Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [authorization]

The tag has no usage guidance.

0
votes
1answer
24 views

How to login from external app without using salesforce login redirection?

I want to be able to login via a .NET app using a custom login page on my app so I want no redirection to the salesforce login page. I want the process to be internal.  So how can I implement a way ...
1
vote
0answers
69 views

Salesforce DX - ENOENT error when trying to login

Recently I came upon an error which I cannot resolve. I have searched through google and did not manage to find the answer. I have installed salesforce CLI and when typing the command: in terminal:...
0
votes
1answer
23 views

Salesforce community pages url authorization

I am novice to salesforce, i have following usecase in my project developed using salesforce with vlocity. 1, restrict community users accessing URLs to community pages based on a flag (flag is ...
0
votes
0answers
22 views

Is there a concurrent API limit on calls to /login/salesforce/authorize

Our Application is iFramed and we have implemented Salesforce SSO using web flow we have implemented 4 iframe component of our application and these components lie under the accounts in the cusotmer ...
6
votes
1answer
42 views

Strip Authorisation header from inbound REST Request

I'm integrating with a 3rd party data provider. The way their platform works is you must provide an endpoint to which they periodically send REST requests to with updated data etc. They happen to ...
1
vote
0answers
32 views

Canvas app framing issue (how to define domain of RemoteAccessAuthorizationPage.apexp)

We implemented a tool which uses salesforce oauth. This tool should be included into an opportunity page as canvas app. First of all: The oauth2 workflow works fine when I open the tool in a new ...
4
votes
1answer
258 views

Connected App built in SANDBOX has access to PROD

I created a ConnectedApp in my Sandbox environment (see below img for settings details). I noticed that I can use the consumer key and secret from my sandbox connected app to attain a PRODUCTION ...
4
votes
1answer
256 views

Google OAuth and Authorization Code

I have a two part question but I will break it up into two separate posts. Hopefully the first question will answer the second...The first ask is: I am working through the Google OAuth flow and would ...
4
votes
0answers
626 views

OAuth 2.0 JWT Bearer Token Flow - “user hasn't approved this consumer”

I am trying to get JWT Bearer Token Flow to work. But get the error user hasn't approved this consumer. I have read these posts: Salesforce JWT User Hasn't Approved This Consumer (Again) OAuth 2....
1
vote
1answer
48 views

The authorization page for Marketing Cloud

I need the authorization page for Marketing Cloud. For Salesforce, I am able to use the link below: https://login.salesforce.com/services/oauth2/authorize Yet, I need the Marketing Cloud version of ...
0
votes
1answer
134 views

Connected App: Use external ClientId in JWT

As per this link, The issuer (iss) must be the OAuth client_id **or** the connected app for which the developer registered their certificate. Does this mean can I use external application client id ...
1
vote
1answer
347 views

Rest call with same salesforce org - [Status=Unauthorized, StatusCode=401]

Can some one please guide me where I am going wrong. For some reason i have to invoke the same instance. But i am getting [Status=Unauthorized, StatusCode=401] Error when I Debug. public class ...
0
votes
1answer
540 views

Implementing Two Way SSL Certificates for authentication

I am integrating a third party webservice to salesforce and wondering if I can implement Two Way SSL Certificates for authentication. I will have to generate a self-signed certificate, share it with ...
0
votes
0answers
25 views

Public site keeps asking for login credentials

We have set up a site for outside users to fill out a survey. We have tested in every browser and from our phones and personal email addresses. However, we have some users in our instance and out ...
0
votes
1answer
272 views

Rest Callout to External Resource, 401 Unauth Error, Cannot Set Api Key

I am having issues giving an API key to an external url for a rest callout. req.setHeader is where I attempt to do so. How should I structure this? I only get 401 unauth errors. I am trying to ...
0
votes
1answer
152 views

Can't get refresh_token in callback with a 'full' scope

I'm trying to get an access_token and a refresh token for a connected app. I managed to get either the access_token and a full access to the API, or an access_token and a refresh_token, but without ...
1
vote
1answer
41 views

How can I get an access token for an Org when the user is signed into a different Org?

My managed package needs to access data from multiple Orgs. For example, say a user has 2 accounts: 1 in Org A, and 1 in Org B. When the user is logged in to Org A, they need to see data from both ...
0
votes
1answer
2k views

Why Am I getting invalid_client_credentials with Web Server OAuth Flow?

I'm trying to create a web service that will provide an OData API to my managed package. As part of that I need to handle authorization so the service can access the user's Org data where they have ...
1
vote
1answer
129 views

How do I authorize access to a managed application in another org?

I am working with a managed package that is installed in Org A. The user wants to be able to access information from their other org, Org B, where this package is not installed. The plan is to use ...
4
votes
2answers
4k views

Salesforce JWT User Hasn't Approved This Consumer (Again)

I know others have asked this question.  The previous solutions have not worked.  Using the OAuth JWT flow.  All Users Can Authorize is selected  User authorized via https://login.salesforce.com/...
1
vote
1answer
151 views

CA-signed Certificate: What URL (Common Name)

I'm trying to set up mutual authentication with a third-party. I want to create a new CA signed certificate but I don't know what URL I should use. Testing from our sandbox.
0
votes
1answer
176 views

Same CA signed certificate for both salesforce act as server (Mutual TLS) and salesforce act as client

Can i use same CA signed certificate for both salesforce act as server (Mutual TLS) and salesforce act as client(2 way ssl). Actually in one of my project we have exposed some api to external system ...
1
vote
1answer
671 views

Self Singed Certificate for Mutual TLS

I need to expose an rest api to an external system, and wanted to allow authentication only through certificate. So as per the salesforce mutual tls feature can we use self signed certificate ...
0
votes
0answers
148 views

How do I customize the RemoteAccessAuthorizationPage page?

I have a Salesforce Community setup and external to that I have setup an application that uses Oauth to request API access and retrieve a users details. I've done this using the User-Agent Oauth ...
0
votes
1answer
131 views

Community authorization without reloading page

I have a community page with angular js implemented. It is a SPA as expected. Angular calls the apex remote action methods receives a response and does some UI stuff. First page(main page) is ...
4
votes
1answer
827 views

Named Credentials - Merge Fields not Resolving

I am having an issue when attempting to reference the {!$Credential.UserName} and {!$Credential.Password} merge fields. I created a named credential with the following configuration: Identity Type:...
1
vote
1answer
795 views

How Can I Access Site.com Studio for a Community Builder Site After Winter '17?

Background: Our community was always designed to be private - but community builder lacked functionality that allowed us to select individual access settings for every page or the builder site as ...
2
votes
1answer
72 views

Corporate client oauth request returns HTTP 401 code

To login to my corporate client Salesforce GUI, I have to use the following link: https://theCompany.force.com/partner This link works and logs me in, if I want to log in manually. But when I try to ...
1
vote
2answers
177 views

Salesforce Session ID Invalid right after call

I have been through this for a few days now with no luck. I make a session id authorization, that works, and get my session ID like so: $sf_session = 'https://login.salesforce.com/services/oauth2/...
0
votes
1answer
143 views

Can we use access token or refresh token as a session id for WebService Callout?

there it is mentioned I want to use sessionID for MetadataService call from an org to other org. I have the other org access token and refresh token both. I tried to use access token, but got the ...
0
votes
2answers
205 views

Guest User requires authorization for sites - unsure of what debug code means!

When the Guest User for my account tries to submit a form it is told that authorization is required and they must login. When I set up a debug log for that user a bug logged with these details and I ...
0
votes
1answer
20 views

Unable to edit created opportunity

I'm unable to edit the opportunity i created and unsure abt the auth or security profiles. how can i fix the issue? any inputs please? Insufficient Privileges You do not have the level of access ...
3
votes
1answer
492 views

JSForce - getting OAUTH2 refreshToken - variable app is not defined

I am clearly missing something called app here. I am following Authorization Request section from the documentation. It says your app is callbacked from Salesforce with authorization code in URL ...
3
votes
0answers
84 views

Secure communication between InstallHandler and third party application

During the installation of our package we need to fetch data (related to the installer organization) from a third party system (integration part of our solution). Like stated in the documentation ...
2
votes
0answers
573 views

Authorizing soap c# request errors

https://help.exacttarget.com/en/technical_library/api_overview/ In the above link it states "This element contains the customer's API username. A customer who uses the API creates a special user in ...
1
vote
0answers
273 views

Web Browser XSS Protection Not Enabled

I have to scan HTTP Request and got this 2 low level risk. How to resolve this problem coming in ZAP Report?
1
vote
2answers
351 views

I am calling a web service while clicking on a link , but I am getting status code 401 error. Please let me know the fault

Global class TestCmis{ Webservice static void getCmis( Id LeadId){ system.debug('HAnana---->'); HttpRequest req = new HttpRequest(); req....
0
votes
1answer
796 views

Calling salesforce REST API from sharepoint

I have a sharepoint app in which I call salesforce REST API. I have obtained access_token successfully from the app, (using username-password flow) but when I try to access some resources such as ...
1
vote
2answers
233 views

user authentication authorization community cloud force.com sites

How does user management (authentication / authorization) work when we expose a visualforce page and apex code including controller etc. to community users using public sites, force.com sites.
1
vote
1answer
103 views

Apex Authorization error during installing app in Profession Edition

We are trying to install an app (manged package that already passed sf security review) in Profession Edition. But it is giving "Apex is not supported in Professional Edition" error. We want to raise ...
7
votes
2answers
2k views

Working with Named Credentials spring 15

I have defined the endpoint and given the username and password for the authorization under named credentials (Spring 15 Feature),when I do a http Request I am getting Unauthorized(401) ...
3
votes
1answer
657 views

API calls and user context

Overview: Mobile device (call service on ESB) —> ESB (calls salesforce API to get data) —> Salesforce.Mobile devices and Salesforce supported by the same IdM system. Description: A custom API ...
5
votes
1answer
181 views

Insufficient Privileges for Public Group Memberships Page

A user is a part of multiple public groups in Salesforce and has a custom profile. When the user navigates to the personal information page and clicks on the 'Go To List' link available under the '...
4
votes
1answer
362 views

How to make External Ids ReadOnly in Salesforce?

We have a requirement where we use External IDs in Salesforce Custom Object. Ideally, we wanted to make this External ID field to be : 1. Read Only. 2. Required. But i don't see why Salesforce does ...
0
votes
0answers
64 views

Site that should be available to all Internet users gives “Authorization Required” error

I have a site that should be available to any user that hits a site. Debug logs are of no help debugging this issue, as I have tried capturing them while the issue is in process for a user, and there ...
1
vote
2answers
188 views

Error deleting a solution attached to a case

I´m unable to delete an FAQ (solution) that is linked to a case record: Clicking on delete: I´ve checked the Organization wide default for object "Solution" but according to the Salesforce ...
1
vote
3answers
340 views

Confused with this Salesforce recruiting app question

I don't want the answer to this question but I just want someone to guide me the right way. Following is the question... My question is.. Where is the clue in the question for me to understand ...
2
votes
1answer
598 views

Is it possible to limit access to records based on profile's region?

currently system admin profile for all countries USA, India, China. Can we have custom system admin profile only for one country like usa, in which he isn't able to access the other country records ...