Questions tagged [authentication]

Relating to the mechanisms for user authentication and verification. There are many potential approaches to authentication on the salesforce platform.

Filter by
Sorted by
Tagged with
1
vote
1answer
624 views

Can we authenticate with Salesforce via Basic Authentication?

Can Basic Authentication be used to execute Salesforce REST calls? For eg: /services/data/vXX.0/sobjects/Contact/ Added Request Header as Authorization: Basic xxxxxxxxxxxxxxxxx Tried both of ...
0
votes
1answer
18 views

Clear list of user authorized browsers/ ip addresses after 30 days

When user logs in a new browser (ip address) to Salesforce instance he's prompted to confirm his new device via email (authorization). Then all the info is stored as a list of activated client ...
0
votes
1answer
285 views

Communities Username-Password Authentication Flow

Is it possible to log a Communities user in via the Username-Password Auth Flow? With normal users you can call the http://test.salesforce.com/services/oauth2/token and passing the username, password,...
0
votes
1answer
187 views

Embed Audio Files in a visualforce Page in a secure Way

I am in process of submitted a salesforce app which has a close integration with third party app developed by someother guy. Integration include basic authentication i.e user name password in header ...
3
votes
1answer
2k views

Authentication for custom Apex SOAP web service

I am in the process of creating a custom SOAP apex web service using webservice keyword so that external system can call this apex web service. I am not using Apex REST. From the class I can create ...
0
votes
0answers
142 views

Can't login to sandbox using SalesforceSharp

When I try to login to my sandbox using SalesforceSharp, I'm getting the following error message: InvalidGrant: Authentication Failure Here's what I've done: Pass in the username, password, ...
7
votes
3answers
1k views

Sandbox verification emails

Time and time again another user creates or refreshes a sandbox and I cannot log into it. I use my credentials from production, but a verification code is sent to the "myemail=gmail.com@example.com" ...
0
votes
1answer
5k views

Authorization PHP Curl returns Login page instead of token

I am trying to use PHP curl to authenticate my app's user, but instead of authenticating with OAuth it returns the actual html login form as a response. Why? I don't want to redirect the user over and ...
0
votes
1answer
2k views

Authenticate using OAuth to connect from external System to Salesforce

Usually I provide partner wsdl to external system to connect with my Salesforce Org. Externla system call the SOAP API login() and get the session id. I am trying to implement Oauth as the ...
2
votes
1answer
140 views

How can I get an access token for an Org when the user is signed into a different Org?

My managed package needs to access data from multiple Orgs. For example, say a user has 2 accounts: 1 in Org A, and 1 in Org B. When the user is logged in to Org A, they need to see data from both ...
1
vote
1answer
10k views

Why Am I getting invalid_client_credentials with Web Server OAuth Flow?

I'm trying to create a web service that will provide an OData API to my managed package. As part of that I need to handle authorization so the service can access the user's Org data where they have ...
3
votes
1answer
1k views

Salesforce REST API Named Credential INVALID_SESSION_ID

I am attempting to call the Salesforce REST API from a Lightning Component. As per their documentation I have set up a named credential using the following settings: Label: Salesforce REST Name: ...
4
votes
1answer
267 views

How do I authorize access to a managed application in another org?

I am working with a managed package that is installed in Org A. The user wants to be able to access information from their other org, Org B, where this package is not installed. The plan is to use ...
0
votes
1answer
820 views

Salesforce “Peer not authenticated” through wso2 SOAP

I am working off the following wso2 documentation wso2 salesforce connector and specifically the configuration shown here. I have successfully imported my certificate into my client-truststore.jks, ...
2
votes
1answer
667 views

How can I avoid Salesforce expiring my password and/or token without warning?

I'm pushing back on the claims I've read that security tokens "only change when user changes the password, or regenerates the token." My API access stopped working unexpectedly, and I couldn't get ...
2
votes
1answer
649 views

Getting Metadata API server URL when using OAuth flow

I'm trying to interact with Metadata API from Python, for multiple different Salesforce accounts / organizations. I'm using OAuth flow so nobody needs to give me their username + password, and can ...
1
vote
0answers
333 views

OAuth Username and password flow, id URL endpoint accept almost every token

I'm testing (in Postman) a basic username/password flow. I have created Managed App in Salesforce so I have all that I need to invoke token endpoint and get an access token: So far so good. The ...
2
votes
1answer
899 views

Best way to use session id and user id to authenticate users on external system

I am an ISVforce developer and I am trying to create a managed package for the AppExchange. Our app will make API requests to our external API. Our API requires an authentication token that we ...
0
votes
1answer
520 views

Salesforce OAuth redirect after success

I have implemented most of the Salesforce OAuth process (Web Server Flow outlined here) using a VF page to initiate the process. The VF page uses javascript in a command button to open a popup User ...
8
votes
1answer
2k views

Is it possible to disable Salesforce Authenticator App completely?

Some time ago I had to enable the MyDomain Feature in order to enable custom lightning components on a Sandbox-Org as described here. Until that the two factor authentication was working with password ...
1
vote
2answers
7k views

UserName and Password in Request body of apex callout using Named Credentials

I am able to make an apex callout by passing the username and password in the request body. String endpoint='https://xyz...com/'; String userID='xyz'; String password='pass'; String jsonBody ='userID=...
2
votes
0answers
166 views

SalesForce permanent access token key generation

I'm trying to pull SF records into Sql server using SSIS ETL tools. For that I'm using the SF authentication with valid credentials but SF credentials expires every 12 hrs and I've to again generate ...
0
votes
1answer
22 views

Is there any way to provide secondary level authentication?

I have a requirement to provide secondary level of authentication. I have one salesforce user and I distributed it to five of my team members. First they login with Salesforce user name password after ...
0
votes
1answer
641 views

Username/password authentication curl attempt failture

I'm trying to get an access token using following curl: curl --data grant_type=password&client_id=Y&client_secret=Z&username=A&password=B+C https://login.salesforce.com/services/...
1
vote
1answer
615 views

Is Digital Signature mandatory for the oauth JWT token flow?

Is Digital Signature mandatory for the oauth JWT token flow ? If not, how do I implement the flow without the certificate.A web server is supposed to send a request for the access token and I need to ...
0
votes
2answers
515 views

The impending TLS upgrade

I have been working on a project in which I utilised the following php library in order to push data to Salesforce using the REST API. https://github.com/gmo/salesforce-rest-api Everything was ...
1
vote
1answer
10k views

Using basic http authentication to authorize connection

I am trying to make a login to an external salesforce org from my salesforce org. Below is the code using basic authentication but I get an error: HttpRequest req = new HttpRequest(); req.setEndpoint(...
0
votes
1answer
226 views

Salesforce SSO for a group of users

I've implemented SSO with Active Directory, for now all users going into LDAP and then they can access Salesforce. Is there a way to select a group of users to login in the regular page with ...
1
vote
0answers
116 views

Web Service Connector with two-way SSL enabled

In our java application we use Web Service Connector framework (WSC) to communicate with Salesforce (https://github.com/forcedotcom/wsc). We successfuly connected with one-way authentication (server-...
1
vote
1answer
281 views

CA-signed Certificate: What URL (Common Name)

I'm trying to set up mutual authentication with a third-party. I want to create a new CA signed certificate but I don't know what URL I should use. Testing from our sandbox.
3
votes
0answers
45 views

What Oauth2 flow to choose for this particular situation? [closed]

I have a single page app (call it Collector) on my server and would like my users to have a customizable list of links like : facebook.com/get_my_latest_posts_about_cats github.com/...
0
votes
1answer
238 views

Same CA signed certificate for both salesforce act as server (Mutual TLS) and salesforce act as client

Can i use same CA signed certificate for both salesforce act as server (Mutual TLS) and salesforce act as client(2 way ssl). Actually in one of my project we have exposed some api to external system ...
1
vote
1answer
1k views

Self Singed Certificate for Mutual TLS

I need to expose an rest api to an external system, and wanted to allow authentication only through certificate. So as per the salesforce mutual tls feature can we use self signed certificate ...
2
votes
1answer
837 views

Java Desktop App To Login Salesforce

Could someone please guide us how can we implement the auth flow for our app to be able to login to any Salesforce org and not be tied up to a specific org ? I am interested to implement same ...
0
votes
1answer
476 views

2 Factor Authentication is not being triggered with Single Sign On (OpenID Connect)

Testing SSO against Azure AD using openId connect per this developer.force.com documentation Two-factor authentication is already configured and functions properly for username + password login. ...
0
votes
1answer
79 views

Salesforce required to store server certificate

Do i need to upload server certificate in Salesforce to trust the server while connecting in 2 way ssl? Thanks,
0
votes
1answer
433 views

2 way ssl configuration at salesforce side

Do we need to upload any server certificate or any other configuration while sending api request in 2 way ssl? Here i wanted to understand that what all i need to do to setup mutual SSL/TLS where ...
2
votes
1answer
2k views

Creating keystore file from certificate

I have a .crt file shared with my client but when i converted it into .jks format and try importing it into salesforce under Certificate and Key Management it gives me below error: Error: No ...
4
votes
1answer
593 views

Cant log user out of Salesforce when using Azure SSO with OpenId Connect

I've successfully tested SSO login against Azure AD / O365 using the approach illustrated on this developer.force.com post, which uses OpenID Connect. However, I've been unable to successfully log ...
1
vote
0answers
143 views

Custom login/registration pages for force.com site

Hello! I am developing a website as an online shop, and I encountered a problem with login and registration. I created portal with Authenticated Website license, which is assigned to site. I enable ...
0
votes
0answers
316 views

Implementing Identity Server 3 as Auth. Provider for Salesforce

Has anybody tried implementing an Identity Server 3 as an Auth. Provider in Salesforce? We're trying to use Windows Authentication without using ADFS in the Single Sign-On Settings in Salesforce. It'...
1
vote
0answers
665 views

Connection reset by peer while implementing Mutual Authentication

We have enabled Mutual Authentication in our system. We are facing some issues while external system is trying to connect. Below is the error details when we tried to handshake. The connection from ...
1
vote
1answer
84 views

Authenticate and post in a single call

Is it possible to authenticate to Salesforce and submit a payload to POST method of an apex class exposed as REST resource, all in a single call? I know this usually need 2 different calls, first to ...
2
votes
1answer
688 views

Avoid Credential in Apex REST Callout Code

In my current implementation of an Apex REST callout code to external system , I have to set an endpoint using a Named credentials-NAMED_CRED. The Named Credential has an endpoint like - https://...
5
votes
1answer
403 views

Is there a better way to do two-factor authentication?

I recently got an order from my manager to turn on two-factor authentication on all our databases, so I have enabled "Two-Factor Authentication for User Interface Logins" and assigned the permission ...
7
votes
2answers
4k views

Pros and cons of user-agent flow vs web server flow

After looking into the different OAuth types and reading this question, I'm still confused on the specific pros and cons of user-agent vs web server flows. The best explanation I can find says that ...
2
votes
1answer
586 views

Allow external website authenticated users to access customer community

We have a new customer self service community that we're trying to integrate with our existing external website. Is there a way to allow users access to community and access cases and knowledgebase ...
0
votes
1answer
41 views

Can a standard user reach a community without authentication?

So I have a community that can be accessed by users in my org. I want to have them access it without having to login to the community, and just via a button click, on the same session. Is this ...
0
votes
1answer
148 views

Community authorization without reloading page

I have a community page with angular js implemented. It is a SPA as expected. Angular calls the apex remote action methods receives a response and does some UI stuff. First page(main page) is ...
0
votes
0answers
72 views

Authenticate user to Salesforce based on pre Desktop authentication

I am using OpenID connect flow to authenticate to Salesforce community using a third party Identity provider service. I have configured all settings in Salesforce and it is working fine when initiated:...

1
3 4
5
6 7
10