Questions tagged [authorization]
The authorization tag has no usage guidance.
63
questions
0
votes
1answer
43 views
Access Restricted for API Only Users
When I attempt to login using SSO, I get prompted for two factor authentication and when I enter the 2fa code, I am greeted with a message that says "Access Restricted for API Only Users - You’re ...
0
votes
1answer
22 views
Validate Salesforce Access Token via custom backend app
The usecase is very simple
I have a client app SPA in Angular(APTTUS eCommerce) using Salesforce Login for User SignIn.
I need to call a backend API(custom c# application) from the SPA to fetch data ...
0
votes
0answers
33 views
invalid_grant: expired authorization code when using OAuth2 flow
I am using OAuth2 to authorize the user I generate the URL at the backend send the url to the frontend (which is in VUE ) which open it in the new window the callback url is one of the route of the ...
0
votes
1answer
27 views
Using a Connected App to upload a large amount of data
I am attempting to use a connected app to upload a lot of data to our Salesforce instance using our API but am running into an issue with not receiving an access token every time I request one.
In ...
0
votes
0answers
24 views
Restrict object access based on owner ID
I wonder if there is a Salesforce OOTB service that given a user ID, it will return only the objects that the user owns, for example using -https://cloudcraze.atlassian.net/wiki/spaces/CCRZDOCS48/...
1
vote
1answer
58 views
“Application not found” error while authorizing an org using visual studio code
I am trying to authorize an saleforce org from VS Code using salesforce CLI but I am facing following error "Application not found" (please refer attached screenshot for more details).What should I do?...
0
votes
1answer
368 views
SFDX: Authorize an org error: listen EACCES: permission denied 127.0.0.1:1717
I have been using DX for quite some time. Authoring an org either through command palette or with a command in terminal had never been a problem [Command is like this: sfdx force:auth:web:login --...
0
votes
1answer
29 views
API access without username and password
I'm writing a simple nodejs application that signs in to the api with a username, password and security token, obtains an access token which is used to make api calls.
Basically, the app is ready for ...
1
vote
1answer
244 views
Error invalid_grant - expired authorization code while running sfdx force:auth:jwt:grant
I run the command from my build job within Teamcity CI:
sfdx force:auth:jwt:grant --clientid '%SFDX_HUB_CONSUMER_KEY%' --jwtkeyfile config/server.key --username %SFDX_HUB_USERNAME% --setalias hub1 --...
0
votes
0answers
33 views
Where should I carry out Salesforce App Third-Party User Authentication
Context
We have developed a Salesforce Lightning App that is powered by our Apis. We are the third party. The App typically sits in a custom tab within the Contact or the Company pages.
Our data is ...
1
vote
1answer
71 views
Customer.io: webhook access_token update
I'm trying to create a webhook from customer.io that will connect to Salesforce via the REST api. As part of that, I need to grab the access_token. This is fine for a while, but the token will ...
0
votes
0answers
71 views
How can I prevent unauthenticated users from downloading an attachment?
I have a community and internal links to attachments. They end with ...servlet/servlet.FileDownload?file={ID}
When the user clicks the link, a window.open(fileUrl) is called. This prompts to download....
1
vote
1answer
95 views
Rest API call to Salesforce from site - one call only
I created a Rest service to insert/update contacts & opportunities from a donation page on my client's site. The web developer refuses to make more than one call from the script that posts to my ...
1
vote
1answer
30 views
Native Mobile App - Authorized by Salesforce - Access Token
We have SSO enabled for our org via ADFS using SAML. The single sign on is working absolutely fine.
We have an native tablet app (custom) which has an option to launch Salesforce inside the app (as ...
1
vote
1answer
81 views
Using Named Credentials With 3rd Party Authorization Token [duplicate]
Trying to use point and click
External Services
but unsuccessful with
Named Credential authorization.
A 3rd party service just requires the Authorization Token be sent with request. Not ...
1
vote
2answers
428 views
How to incorporate Consumer id and consumer secret in my REST API (Apex class)
I have a requirement where some external web forms would be calling our REST API to submit Lead. I have created a connected app, got the consumer id and consumer secret. I want my apex class to be ...
0
votes
1answer
30 views
Can multiple autorization_code co-exist for a single integration user?
I have a single integration User, which is used to authenticate a background integration job. This uses web-server flow. And to avoid storing username/password on the server, I have only supplied ...
2
votes
1answer
159 views
Need to call salesforce API from external system [closed]
I am creating an external app, where I need to get the data from Salesforce.
I understand the use of Connected apps, and I won't be using the web based OAuth flow where user is redirected to https://...
0
votes
1answer
514 views
Not getting access token to call Rest API from postman
This is my request URL
https://login.salesforce.com/services/oauth2/authorize?client_id=**clientId**&client_secret=**clientSecret**&redirect_uri=https://localhost:8443/RestTest/oauth/...
0
votes
1answer
69 views
How to login from external app without using salesforce login redirection?
I want to be able to login via a .NET app using a custom login page on my app so I want no redirection to the salesforce login page. I want the process to be internal.
So how can I implement a way ...
1
vote
0answers
1k views
Salesforce DX - ENOENT error when trying to login
Recently I came upon an error which I cannot resolve. I have searched through google and did not manage to find the answer.
I have installed salesforce CLI and when typing the command:
in terminal:...
0
votes
1answer
39 views
Salesforce community pages url authorization
I am novice to salesforce, i have following usecase in my project developed using salesforce with vlocity.
1, restrict community users accessing URLs to community pages based on a flag (flag is ...
6
votes
1answer
78 views
Strip Authorisation header from inbound REST Request
I'm integrating with a 3rd party data provider.
The way their platform works is you must provide an endpoint to which they periodically send REST requests to with updated data etc.
They happen to ...
1
vote
0answers
79 views
Canvas app framing issue (how to define domain of RemoteAccessAuthorizationPage.apexp)
We implemented a tool which uses salesforce oauth.
This tool should be included into an opportunity page as canvas app.
First of all: The oauth2 workflow works fine when I open the tool in a new ...
4
votes
1answer
752 views
Connected App built in SANDBOX has access to PROD
I created a ConnectedApp in my Sandbox environment (see below img for settings details).
I noticed that I can use the consumer key and secret from my sandbox connected app to attain a PRODUCTION ...
4
votes
1answer
581 views
Google OAuth and Authorization Code
I have a two part question but I will break it up into two separate posts. Hopefully the first question will answer the second...The first ask is: I am working through the Google OAuth flow and would ...
6
votes
2answers
2k views
OAuth 2.0 JWT Bearer Token Flow - “user hasn't approved this consumer”
I am trying to get JWT Bearer Token Flow to work. But get the error user hasn't approved this consumer. I have read these posts:
Salesforce JWT User Hasn't Approved This Consumer (Again)
OAuth 2....
1
vote
1answer
77 views
The authorization page for Marketing Cloud
I need the authorization page for Marketing Cloud.
For Salesforce, I am able to use the link below:
https://login.salesforce.com/services/oauth2/authorize
Yet, I need the Marketing Cloud version of ...
0
votes
1answer
320 views
Connected App: Use external ClientId in JWT
As per this link, The issuer (iss) must be the OAuth client_id **or** the connected app for which the developer registered their certificate. Does this mean can I use external application client id ...
1
vote
1answer
970 views
Rest call with same salesforce org - [Status=Unauthorized, StatusCode=401]
Can some one please guide me where I am going wrong. For some reason i have to invoke the same instance. But i am getting
[Status=Unauthorized, StatusCode=401]
Error when I Debug.
public class ...
1
vote
2answers
808 views
Rest Callout to External Resource, 401 Unauth Error, Cannot Set Api Key
I am having issues giving an API key to an external url for a rest callout.
req.setHeader is where I attempt to do so. How should I structure this? I only get 401 unauth errors.
I am trying to ...
0
votes
1answer
462 views
Can't get refresh_token in callback with a 'full' scope
I'm trying to get an access_token and a refresh token for a connected app.
I managed to get either the access_token and a full access to the API, or an access_token and a refresh_token, but without ...
2
votes
1answer
110 views
How can I get an access token for an Org when the user is signed into a different Org?
My managed package needs to access data from multiple Orgs. For example, say a user has 2 accounts: 1 in Org A, and 1 in Org B. When the user is logged in to Org A, they need to see data from both ...
1
vote
1answer
8k views
Why Am I getting invalid_client_credentials with Web Server OAuth Flow?
I'm trying to create a web service that will provide an OData API to my managed package. As part of that I need to handle authorization so the service can access the user's Org data where they have ...
3
votes
1answer
230 views
How do I authorize access to a managed application in another org?
I am working with a managed package that is installed in Org A. The user wants to be able to access information from their other org, Org B, where this package is not installed. The plan is to use ...
13
votes
3answers
12k views
Salesforce JWT User Hasn't Approved This Consumer (Again)
I know others have asked this question. The previous solutions have not worked. Using the OAuth JWT flow.
All Users Can Authorize is selected
User authorized via https://login.salesforce.com/...
1
vote
1answer
270 views
CA-signed Certificate: What URL (Common Name)
I'm trying to set up mutual authentication with a third-party. I want to create a new CA signed certificate but I don't know what URL I should use. Testing from our sandbox.
0
votes
1answer
231 views
Same CA signed certificate for both salesforce act as server (Mutual TLS) and salesforce act as client
Can i use same CA signed certificate for both salesforce act as server (Mutual TLS) and salesforce act as client(2 way ssl).
Actually in one of my project we have exposed some api to external system ...
1
vote
1answer
1k views
Self Singed Certificate for Mutual TLS
I need to expose an rest api to an external system, and wanted to allow authentication only through certificate. So as per the salesforce mutual tls feature can we use self signed certificate ...
0
votes
1answer
143 views
Community authorization without reloading page
I have a community page with angular js implemented. It is a SPA as expected.
Angular calls the apex remote action methods receives a response and does some UI stuff.
First page(main page) is ...
4
votes
2answers
2k views
Named Credentials - Merge Fields not Resolving
I am having an issue when attempting to reference the {!$Credential.UserName} and {!$Credential.Password} merge fields.
I created a named credential with the following configuration:
Identity Type:...
3
votes
1answer
1k views
How Can I Access Site.com Studio for a Community Builder Site After Winter '17?
Background: Our community was always designed to be private - but
community builder lacked functionality that allowed us to select
individual access settings for every page or the builder site as ...
2
votes
1answer
81 views
Corporate client oauth request returns HTTP 401 code
To login to my corporate client Salesforce GUI, I have to use the following link:
https://theCompany.force.com/partner
This link works and logs me in, if I want to log in manually. But when I try to ...
1
vote
2answers
188 views
Salesforce Session ID Invalid right after call
I have been through this for a few days now with no luck. I make a session id authorization, that works, and get my session ID like so:
$sf_session = 'https://login.salesforce.com/services/oauth2/...
0
votes
1answer
177 views
Can we use access token or refresh token as a session id for WebService Callout?
there it is mentioned
I want to use sessionID for MetadataService call from an org to other org. I have the other org access token and refresh token both.
I tried to use access token, but got the ...
0
votes
2answers
348 views
Guest User requires authorization for sites - unsure of what debug code means!
When the Guest User for my account tries to submit a form it is told that authorization is required and they must login. When I set up a debug log for that user a bug logged with these details and I ...
0
votes
1answer
20 views
Unable to edit created opportunity
I'm unable to edit the opportunity i created and unsure abt the auth or security profiles. how can i fix the issue? any inputs please?
Insufficient Privileges
You do not have the level of access ...
3
votes
1answer
757 views
JSForce - getting OAUTH2 refreshToken - variable app is not defined
I am clearly missing something called app here.
I am following Authorization Request section from the documentation. It says your app is callbacked from Salesforce with authorization code in URL ...
3
votes
0answers
97 views
Secure communication between InstallHandler and third party application
During the installation of our package we need to fetch data (related to the installer organization) from a third party system (integration part of our solution).
Like stated in the documentation ...
2
votes
0answers
586 views
Authorizing soap c# request errors
https://help.exacttarget.com/en/technical_library/api_overview/
In the above link it states "This element contains the customer's API username. A customer who uses the API creates a special user in ...
