Questions tagged [authentication]

Relating to the mechanisms for user authentication and verification. There are many potential approaches to authentication on the salesforce platform.

100 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
7
votes
0answers
1k views

Is it possible to disable Salesforce Authenticator App completely?

Some time ago I had to enable the MyDomain Feature in order to enable custom lightning components on a Sandbox-Org as described here. Until that the two factor authentication was working with password ...
5
votes
0answers
343 views

Named credential does not work with client credentials

I have read the full documentation and have few questions on how named credential works. I have written a custom provider like this: /** * Description of the class * <p /><p /> * @...
4
votes
0answers
76 views

What is the proper approach for deploying custom Auth. Provider in Salesforce DX?

I have a custom Auth. Provider and a couple of Named Credential which use it. The auth. provider metadata requires "Execute As" field which is represented as username in metadata and as you know, ...
4
votes
1answer
414 views

error=redirect_uri_mismatch&error_description=redirect_uri%20must%20match%20configuration

I am connecting two salesforce orgs with connected app, named credential and Auth Provider. I have created connected app in target sandbox. Created Auth Provider in source org by providing Consumer ...
4
votes
0answers
225 views

Custom Domains in web authentication flow

I'm running into authentication issues with users who are attempting to sign into Salesforce on our product using a custom domain (Oauth user-agent flow). From the Salesforce web signin page, the ...
4
votes
0answers
681 views

Rest API Authorization

We're trying to use the JSforce library (http://jsforce.github.io/) for javascript access to the salesforce api but we keep getting "invalid_grant" errors when trying to authenticate <script ...
4
votes
0answers
316 views

Force user to agree to terms and conditions before using the system on portal?

I have a portal app and when a user logs in I want to force them to agree to the latest terms and conditions (t&cs) before using the system. So once a user logs in I check to see if they have ...
3
votes
0answers
755 views

Invalid Signature Identity Provider Event Log for Self Signed Certificate SAML Sp Initiated Web Browser SSO Profile

I am implementing Service Provider component of SAML protocol and I am aiming to achieve SP Initiated Web Browser SSO Profile.I have configured my domain I dint add my self signed digital ...
2
votes
1answer
50 views

Validate jwt token inbound webservice

We have a requirement to validate jwt tokens for inbound webservices: In Salesforce we will expose some REST WS 3rd party system will call salesforce with a jwt token* in the Authorization header *...
2
votes
2answers
83 views

Why would I be getting redirected on an authentication request (Rails app)?

tl;dr - I'm confused about a) why I can't access the our new Sandbox form the API and b) why rather than getting an authorisation error I'm getting redirected. We've just set up a new SF sandbox, and ...
2
votes
1answer
516 views

Named Credential: Authentication process and refresh token

I've begin working with Named Credential and Authentication Provider for the first time and I'm a bit lost on the authentication process and the refresh token functionalities. I'm going to add to my ...
2
votes
0answers
124 views

Obtaning refresh token when using Extenral Data Source with Salesforce OAuth 2

I'm trying to configure an External Data Source to use Salesforce Auth Provider so the OAuth 2 will pass access and refresh token. My configuration: Identity Type: Per User Authentication ...
2
votes
2answers
183 views

Determine logged-in status of users

We are trying to determine logged-in status of our users as part of an automated lead-routing process (we only want to route to logged-in users), but we are seeing some inconsistencies. We currently ...
2
votes
1answer
227 views

How does Salesforce handle or use the state parameter on an oauth callback?

Running into an issue with our Open ID Connect Authentication Provider. The current way our registration page has been implemented requires a unique identifier to be passed through the state parameter ...
2
votes
1answer
89 views

CORS Support for Bulk API

According to this documentation, the bulk API should now support CORS. However, I'm not finding that to be the case. My the preflight request (OPTIONS) is failing with: <?xml version="1.0" ...
2
votes
2answers
451 views

Named Credential - Automatic refresh token does not work with WSO2 Identity server

I am facing an issue with the named credential platform functionality in the following integration scenario: The Salesforce Org is supposed to perform Rest callouts to a 3rd party service. ...
2
votes
0answers
54 views

Redirect to VF page if duplicate user exists in SSO Authantication

I have created a community and created an Auth. Provider for google and linkedIn. This SSO are working correctly. If a user logins for first time user will get created which is fine. But if user ...
2
votes
1answer
226 views

Avoid duplicate user creation using SSO Authentication

I have created a community and created an Auth. Provider for google and linkedIn. This SSO are working correctly. My problem is when I login using gmail a new user is created which is linked to gmail....
2
votes
0answers
41 views

Apex Callout - Need help sending AuthenticationHeader. Request Error. Invalid Login

I am trying to send account record information to an external web service. I have created an Apex Class from WSDL. Right now when I pass the request I am not sending authenticationHeader details. In ...
2
votes
0answers
109 views

Salesforce-bulk authentication issue

I'm trying to login using the Bulk API with the Python interface salesforce-bulk by: bulk = salesforce_bulk.SalesforceBulk(username=userName, password=p) This gives an error AssertionError: Couldn'...
2
votes
1answer
108 views

MobileSDK Native iOS - Check if user is admin or not

I'm working on a native iOS app using the MobileSDK. My app defers the login, that is, it does not occur right at the beginning of the app. From the home screen, users can tap either an "Employee" or ...
2
votes
0answers
369 views

Salesforce Notification through reverse proxy

I am an integration developer working with a Salesforce.com developer. He is using the Notification functionality 'push' a message using SOAP to our integration platform when an object changes. ...
2
votes
0answers
95 views

Canvas App OAuth Fails in Salesforce1

I have a canvas app I am making Salesforce1 compatable. Things work fine when I log in to the desktop and use it is "Salesforce1 mode", but when I try and access it in my Salesforce1 with my dev org, ...
2
votes
1answer
327 views

Error: Janrain authentication

I followed the janrain Auth provider tutorial for social login implementation and getting following error: https://ap1.salesforce.com/_nc_external/identity/sso/ui/AuthorizationError?ErrorCode=...
2
votes
0answers
127 views

2 way SSL authentification on expose FDC webservice

My client calls a webservice on Salesforce (server), first i send him my certificate (server) and then i would like him to send me back a client certificate ( two way ssl) how do I implement that? ...
1
vote
0answers
17 views

salesforce managed authentication provider scope

If I create a salesforce managed authentication provider following the steps here: https://help.salesforce.com/articleView?id=sso_provider_global_auth.htm&type=5. I don't want to create a ...
1
vote
0answers
82 views

How to store and use named credentials with OAuth

I have read this Where to Store Token Auth? and as far as I understand this, the best way for an OAuth based auth. is to use the named credentials. But I do not get the point how this work. In my ...
1
vote
0answers
28 views

Is Salesforce 2FA supported using only SMS or Email and not the Authenticator Application?

I am trying to do two-factor authentication via email or SMS. 2FA via the authenticator app isn't an option as we cannot install anything on user phones. Native Identify Verification codes would work ...
1
vote
1answer
31 views

How to authenticate without the need of a consumer key

Basically, I'm trying to figure out a way to authorize an application to use the Tooling API, but I would like to not have to set up a Connected Application. I've seen this question, but it doesn't ...
1
vote
0answers
99 views

Login with google in the Salesforce SDK in react native

We are building an application where we need to use the google login the login to salesforce. We have setup everything in our salesforce environment to enable this. When we do it with the browser it ...
1
vote
0answers
236 views

JSForce Username and password authentication strategy

I'm using the username, password + authcode strategy in a node app to connect to salesforce. I've got a module to connect, and another to login to salesforce. Connect opens the connection and makes ...
1
vote
0answers
382 views

Iframe with Windows Authentication in Internet Explorer

Having some real problems getting a Visualforce page to work with Internet Explorer 11. I have the following Visualforce Page: <apex:page controller="MyController"> <iframe frameborder=...
1
vote
0answers
167 views

Unable to Authenticate Login with Salesforce Data Loader CLI Using Custom Domain

I have scoured the internet looking for a solution that seems is extremely common among users looking to connect to Salesforce via Data Loader CLI. On top of reading just about every forum out there ...
1
vote
0answers
62 views

Can a SessionID be used to access Identity Service

Background: oAuth 2.0 implemented on a public VF page and is working fine User logs in - regular oAuth flow Usual results returned including the instance url and id url What I am curious about is ...
1
vote
0answers
290 views

OAuth Username and password flow, id URL endpoint accept almost every token

I'm testing (in Postman) a basic username/password flow. I have created Managed App in Salesforce so I have all that I need to invoke token endpoint and get an access token: So far so good. The ...
1
vote
0answers
94 views

Web Service Connector with two-way SSL enabled

In our java application we use Web Service Connector framework (WSC) to communicate with Salesforce (https://github.com/forcedotcom/wsc). We successfuly connected with one-way authentication (server-...
1
vote
0answers
489 views

Connection reset by peer while implementing Mutual Authentication

We have enabled Mutual Authentication in our system. We are facing some issues while external system is trying to connect. Below is the error details when we tried to handshake. The connection from ...
1
vote
1answer
66 views

Authenticate and post in a single call

Is it possible to authenticate to Salesforce and submit a payload to POST method of an apex class exposed as REST resource, all in a single call? I know this usually need 2 different calls, first to ...
1
vote
1answer
382 views

Use JSForce to connect with a community/portal user

it possible to connect to sales force with a community license user using jsforce? This is what I have tried let conn = new jsforce.Connection({ loginUrl : 'https://login.salesforce.com' }); ...
1
vote
0answers
230 views

Google as OAuth2 Provider to Log In from Mobile Device

I'm trying to login to Salesforce in a Xamarin app through Google in order to get a valid bearer token to interact with my custom Salesforce REST API. It works just fine if I point Xamarin.Auth to ...
1
vote
1answer
487 views

getAccessToken is returning null when using Microsoft Access Control Source

I have set up OAuth with Sharepoint by following a Salesforce tutorial. When I go to the Test-Only Initialization URL, I am successfully directed through the OAuth process and end up at the Callback ...
1
vote
0answers
49 views

Forceios App not loging out the community app

I tried to create a Salesforce community remote hybrid app using the forceios. I have set all the configuration for the same. I am now able to login to the app. But when I hit logout and exit the app; ...
1
vote
0answers
303 views

Java issue on command line data import using data loader

I am running date import using command line batch file on daily basis for last 3 years without any problem. This morning I get this error Caused by: sun.security.provider.certpath....
1
vote
0answers
94 views

Can you log out a user from multiple domains ? (expire all sessions)

Our customer portal is available in multiple languages, all of them have their own domain and allow the user to switch languages. Currently, when a user logs out, we take the user to https://company....
1
vote
0answers
80 views

SFMC authentication, does the offline token work for all accounts?

we need your help if possible. We have been using the offline token successfully to authenticate & refresh our token for our Hub Exchange app. This allows us to access the client's account when ...
1
vote
1answer
291 views

How do i get SessionID using SingleSignOn enabled account

I have singlesignon enabled account. Using Authentication WSDL we are able to authenticate user now we need our application(C#) to search contact,Open new contact page in salesforce Before ...
1
vote
0answers
46 views

Can I switch from a Community to Portal without logging in again

I have an existing force.com authenticated site and i am building a community at the moment. I have enabled a profile for both the authenticated site and the community. I can login to both of these ...
1
vote
0answers
378 views

single sign on with adfs is not working for http redirect

When I'm set Service Provider Initiated Request Binding to http post it's working. But when I'm set Service Provider Initiated Request Binding to http redirect it's not working (It shows certificate ...
1
vote
1answer
429 views

How to access the context in the canvas app using payload?

Based on the canvas documentation, i have setup the canvas app so that the authentication is OAuth. Also, I have been in the assumption that OAuth flow can be handled entirely through javascript ...
1
vote
0answers
130 views

Multiple Connected apps for oauth

I have a web application that has a mobile component. Both of them have Salesforce oAuth and use different connected apps. Sometimes users authenticate only via the mobile app and their credentials ...