Questions tagged [authentication]

Relating to the mechanisms for user authentication and verification. There are many potential approaches to authentication on the salesforce platform.

118 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
7
votes
0answers
255 views

What is the proper approach for deploying custom Auth. Provider in Salesforce DX?

I have a custom Auth. Provider and a couple of Named Credential which use it. The auth. provider metadata requires "Execute As" field which is represented as username in metadata and as you know, ...
5
votes
0answers
814 views

Named credential does not work with client credentials

I have read the full documentation and have few questions on how named credential works. I have written a custom provider like this: /** * Description of the class * <p /><p /> * @...
4
votes
0answers
258 views

Custom Domains in web authentication flow

I'm running into authentication issues with users who are attempting to sign into Salesforce on our product using a custom domain (Oauth user-agent flow). From the Salesforce web signin page, the ...
4
votes
0answers
706 views

Rest API Authorization

We're trying to use the JSforce library (http://jsforce.github.io/) for javascript access to the salesforce api but we keep getting "invalid_grant" errors when trying to authenticate <script ...
4
votes
0answers
326 views

Force user to agree to terms and conditions before using the system on portal?

I have a portal app and when a user logs in I want to force them to agree to the latest terms and conditions (t&cs) before using the system. So once a user logs in I check to see if they have ...
3
votes
0answers
89 views

Debugging AuthProvider

I am now working on an implementation of an external authentication for SF. I am following this guide and so far I was able to define and set up the initiate() method and redirect to the correct URL. ...
3
votes
1answer
987 views

How does Salesforce handle or use the state parameter on an oauth callback?

Running into an issue with our Open ID Connect Authentication Provider. The current way our registration page has been implemented requires a unique identifier to be passed through the state parameter ...
3
votes
3answers
869 views

Named Credential - Automatic refresh token does not work with WSO2 Identity server

I am facing an issue with the named credential platform functionality in the following integration scenario: The Salesforce Org is supposed to perform Rest callouts to a 3rd party service. ...
3
votes
0answers
785 views

Invalid Signature Identity Provider Event Log for Self Signed Certificate SAML Sp Initiated Web Browser SSO Profile

I am implementing Service Provider component of SAML protocol and I am aiming to achieve SP Initiated Web Browser SSO Profile.I have configured my domain I dint add my self signed digital ...
2
votes
0answers
289 views

NTLM Authentication Protocol with APEX

I'm working on a project requires integration between Salesforce and Microsoft Navision with NTLM authentication. As I see people refer to NTLM authencation implementation ApexNTLM but it doesn't work ...
2
votes
1answer
163 views

Validate jwt token inbound webservice

We have a requirement to validate jwt tokens for inbound webservices: In Salesforce we will expose some REST WS 3rd party system will call salesforce with a jwt token* in the Authorization header *...
2
votes
0answers
207 views

How to store and use named credentials with OAuth

I have read this Where to Store Token Auth? and as far as I understand this, the best way for an OAuth based auth. is to use the named credentials. But I do not get the point how this work. In my ...
2
votes
0answers
108 views

Is Salesforce 2FA supported using only SMS or Email and not the Authenticator Application?

I am trying to do two-factor authentication via email or SMS. 2FA via the authenticator app isn't an option as we cannot install anything on user phones. Native Identify Verification codes would work ...
2
votes
2answers
151 views

Why would I be getting redirected on an authentication request (Rails app)?

tl;dr - I'm confused about a) why I can't access the our new Sandbox form the API and b) why rather than getting an authorisation error I'm getting redirected. We've just set up a new SF sandbox, and ...
2
votes
0answers
195 views

Obtaning refresh token when using Extenral Data Source with Salesforce OAuth 2

I'm trying to configure an External Data Source to use Salesforce Auth Provider so the OAuth 2 will pass access and refresh token. My configuration: Identity Type: Per User Authentication ...
2
votes
1answer
137 views

CORS Support for Bulk API

According to this documentation, the bulk API should now support CORS. However, I'm not finding that to be the case. My the preflight request (OPTIONS) is failing with: <?xml version="1.0" ...
2
votes
0answers
166 views

SalesForce permanent access token key generation

I'm trying to pull SF records into Sql server using SSIS ETL tools. For that I'm using the SF authentication with valid credentials but SF credentials expires every 12 hrs and I've to again generate ...
2
votes
1answer
588 views

Use JSForce to connect with a community/portal user

it possible to connect to sales force with a community license user using jsforce? This is what I have tried let conn = new jsforce.Connection({ loginUrl : 'https://login.salesforce.com' }); ...
2
votes
0answers
72 views

Redirect to VF page if duplicate user exists in SSO Authantication

I have created a community and created an Auth. Provider for google and linkedIn. This SSO are working correctly. If a user logins for first time user will get created which is fine. But if user ...
2
votes
0answers
44 views

Apex Callout - Need help sending AuthenticationHeader. Request Error. Invalid Login

I am trying to send account record information to an external web service. I have created an Apex Class from WSDL. Right now when I pass the request I am not sending authenticationHeader details. In ...
2
votes
0answers
119 views

Salesforce-bulk authentication issue

I'm trying to login using the Bulk API with the Python interface salesforce-bulk by: bulk = salesforce_bulk.SalesforceBulk(username=userName, password=p) This gives an error AssertionError: Couldn'...
2
votes
1answer
108 views

MobileSDK Native iOS - Check if user is admin or not

I'm working on a native iOS app using the MobileSDK. My app defers the login, that is, it does not occur right at the beginning of the app. From the home screen, users can tap either an "Employee" or ...
2
votes
0answers
554 views

Salesforce Notification through reverse proxy

I am an integration developer working with a Salesforce.com developer. He is using the Notification functionality 'push' a message using SOAP to our integration platform when an object changes. ...
2
votes
0answers
97 views

Canvas App OAuth Fails in Salesforce1

I have a canvas app I am making Salesforce1 compatable. Things work fine when I log in to the desktop and use it is "Salesforce1 mode", but when I try and access it in my Salesforce1 with my dev org, ...
2
votes
1answer
344 views

Error: Janrain authentication

I followed the janrain Auth provider tutorial for social login implementation and getting following error: https://ap1.salesforce.com/_nc_external/identity/sso/ui/AuthorizationError?ErrorCode=...
2
votes
0answers
128 views

2 way SSL authentification on expose FDC webservice

My client calls a webservice on Salesforce (server), first i send him my certificate (server) and then i would like him to send me back a client certificate ( two way ssl) how do I implement that? ...
1
vote
0answers
17 views

OAuth login page redirecting to source org

I am using OAuth web server flow to authenticate one salesforce org(source) with another(it can be any other salesforce org apart from source org). When I send user to authenticate himself into target ...
1
vote
0answers
57 views

Multi-Factor Authentication (MFA) in SFMC with 100+ Accounts

With MFA becoming enabled and eventually required in SFMC, I was curious how partners/3rd parties are handling this requirement, when multiple individuals share the same user login? It seems all ...
1
vote
0answers
37 views

Is our “Identity Server” a Good Use Case for Named Credentials and if so, how should I use Named Credentials Instead?

We have a collection of microservices hosted on Azure. In order to access these, we must first get a token from what's been described as the "identity server". I can use this code to get the ...
1
vote
0answers
49 views

Authenticate Custom Content Block throws a CORS issue

I'm sitting up the SSO login for my application which is a custom content block by redirecting the user to the link below: var redirectRoute = "https://" + process.env.DEFAULT_BASE_URI + &...
1
vote
0answers
151 views

OpenID error: No_Oauth_Token unauthorized_client

I am following this doc to implement an external authentication provider. So far I was able to be redirected to their site, authenticate there and be sent back to SF. However, when I am sent back to ...
1
vote
0answers
36 views

Error using inline Embedded Login

I have a SFDC Community, which has its own Visualforce login page. I have another application running in a cloud host, and I'm trying to use embedded login to authenticate in my community in this ...
1
vote
0answers
79 views

Authenticate Community Users in External Rest API

I have a Community that consumes an external Rest API that requires authentication. For testing purpose, I hardcoded a username and a password in my apex rest callouts in order to be able to consume ...
1
vote
2answers
74 views

TouchId, FaceId login for mobile Apps

One customer is asking for having the Mobile App authentication for External users sites using Communities with FaceId and TouchId, I have tried "Implementing Screen Locking and PIN protection" in the ...
1
vote
1answer
227 views

Decode JWT received from /v2/authorize

I'm developing an app for SalesForce Marketing cloud. For the authentication I have a web page loaded as iframe in the salesforce mc; in this page the customer performs the login to my platform. ...
1
vote
1answer
65 views

Mutual Authentication without access_token

We have a 3rd Party API that wants to connect to our Salesforce without using 2 factor authentication. They want to post data to Salesforce without asking for "access_token". They want us to enforce ...
1
vote
0answers
59 views

salesforce managed authentication provider scope

If I create a salesforce managed authentication provider following the steps here: https://help.salesforce.com/articleView?id=sso_provider_global_auth.htm&type=5. I don't want to create a ...
1
vote
1answer
34 views

How to authenticate without the need of a consumer key

Basically, I'm trying to figure out a way to authorize an application to use the Tooling API, but I would like to not have to set up a Connected Application. I've seen this question, but it doesn't ...
1
vote
0answers
139 views

Login with google in the Salesforce SDK in react native

We are building an application where we need to use the google login the login to salesforce. We have setup everything in our salesforce environment to enable this. When we do it with the browser it ...
1
vote
0answers
548 views

JSForce Username and password authentication strategy

I'm using the username, password + authcode strategy in a node app to connect to salesforce. I've got a module to connect, and another to login to salesforce. Connect opens the connection and makes ...
1
vote
0answers
828 views

Iframe with Windows Authentication in Internet Explorer

Having some real problems getting a Visualforce page to work with Internet Explorer 11. I have the following Visualforce Page: <apex:page controller="MyController"> <iframe frameborder=...
1
vote
0answers
2k views

SalesForce REST API authentication for Java Client

I am trying to authenticate my java client as explained in this link: https://developer.salesforce.com/docs/atlas.en-us.api_streaming.meta/api_streaming/code_sample_auth_oauth.htm I have created th ...
1
vote
0answers
339 views

Unable to Authenticate Login with Salesforce Data Loader CLI Using Custom Domain

I have scoured the internet looking for a solution that seems is extremely common among users looking to connect to Salesforce via Data Loader CLI. On top of reading just about every forum out there ...
1
vote
0answers
87 views

Can a SessionID be used to access Identity Service

Background: oAuth 2.0 implemented on a public VF page and is working fine User logs in - regular oAuth flow Usual results returned including the instance url and id url What I am curious about is ...
1
vote
0answers
331 views

OAuth Username and password flow, id URL endpoint accept almost every token

I'm testing (in Postman) a basic username/password flow. I have created Managed App in Salesforce so I have all that I need to invoke token endpoint and get an access token: So far so good. The ...
1
vote
0answers
115 views

Web Service Connector with two-way SSL enabled

In our java application we use Web Service Connector framework (WSC) to communicate with Salesforce (https://github.com/forcedotcom/wsc). We successfuly connected with one-way authentication (server-...
1
vote
0answers
141 views

Custom login/registration pages for force.com site

Hello! I am developing a website as an online shop, and I encountered a problem with login and registration. I created portal with Authenticated Website license, which is assigned to site. I enable ...
1
vote
0answers
660 views

Connection reset by peer while implementing Mutual Authentication

We have enabled Mutual Authentication in our system. We are facing some issues while external system is trying to connect. Below is the error details when we tried to handshake. The connection from ...
1
vote
1answer
82 views

Authenticate and post in a single call

Is it possible to authenticate to Salesforce and submit a payload to POST method of an apex class exposed as REST resource, all in a single call? I know this usually need 2 different calls, first to ...
1
vote
0answers
235 views

Google as OAuth2 Provider to Log In from Mobile Device

I'm trying to login to Salesforce in a Xamarin app through Google in order to get a valid bearer token to interact with my custom Salesforce REST API. It works just fine if I point Xamarin.Auth to ...