We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [oauth]

OAuth is an open, standard, protocol to allow users to securely authorize web, mobile and desktop applications to access web services on their behalf. Salesforce supports OAuth 1.0a and 2.0.

Filter by
Sorted by
Tagged with
0
votes
0answers
29 views

Allowing connected app oauth to use salesforce azure ad login

I wants to use salesforce oauth using through connected app. But my salesforce login happening using azure ad login(open ID). Connected App (OAUTH) -> Salesforce -> Azure AD So Can you please ...
0
votes
1answer
24 views

How to prevent users to use non registered connected apps

There are many web applications that connect to Salesforce with OAuth without configure a connected app (e.g. onegraph). How can we prevent users to connect such an application?
0
votes
1answer
36 views

oAuth - 3rd party app accessing my org without a connected app

I'm trying to use Skyvia to integrate salesforce with third-party systems. When I create a new connection, I have the possibility of choosing OAuth as the type of authentication. But how can it work ...
1
vote
2answers
35 views

Salesforce with Alexa: Get Salesforce Endpoint dynamically

There is a Trailhead example for Salesforce and Alexa. In this example Alexa link account function is used. It only returns the access token, nothing more. Is it possible to call a static url with an ...
1
vote
1answer
32 views

Alternate VisualForce page for OAuth Web Server flow

I'm trying to determine if it's possible to have two different Visualforce login pages so that some external apps use one Visualforce page to authenticate users, while others use a different page. I ...
1
vote
1answer
41 views

How can I programmatically set a connected app to have permitted users be “Admin approved users are pre-authorized”?

Background: I am making a managed package and have a connected app that needs to have permitted users set to "Admin approved users are pre-authorized" for it to work correctly: It is a terrible ...
6
votes
1answer
106 views

OAuth Authorization Flow for AppExchange Packages

I'm trying to understand the tenant endpoint and credentials flow for the 'authorization code' grant type used by installed packages that are published on AppExchange. I have this flow working well ...
2
votes
1answer
61 views

Salesforce OAuth 2.0 JWT Bearer Token Flow - Token Expiration

I am performing Server-Server communication between Salesforce and a Portal I am developing. I implemented the JWT Flow as follows: Created connected app and digitally signed it with certificate ...
0
votes
0answers
49 views

CORS policy : No 'Access-Control-Allow-Origin' header is present on the requested resource

My requirement is that I want to expose my lightning component to an external website(HTML webpage) without user having to log in to salesforce. For this, as per this questions's answer., I have done ...
0
votes
0answers
16 views

Am getting Outh Error 1800 while trying to login to salesforce from external application

Am getting Oauth 1800 error when I create a developer account with region as United states , and when i create a developer account with India or Australia am able to successfully sign in from ...
-1
votes
1answer
31 views

Salesforce Data Loader OAuth not taking another email address

I am trying to log in to a production environment in Data Loader through OAuth and giving a custom domain, then it is taking my personal outlook account and directly giving an error without giving ...
-1
votes
1answer
63 views

How can I use OAUTH on Salesforce Live Agent REST API

We want to use OAUTH - userid/password flow to access salesforce live agent rest API. We have implemented this for other rest api provided by salesforce. However the live agent rest api are wide open ...
0
votes
0answers
21 views

Connected App / Canvas in Managed Package with dynamic endpoint

I am selling a Java App that customers are installing on their server and now build a Salesforce app (Managed package) to integrate it. This means The Salesforce App packages some Canvas elements to ...
2
votes
2answers
47 views

Which endpoints are supported for OAuth2 token authorization?

Documentation says that for OAuth2 token authorization URL like login.salesforce.com should be used For authorization: https://login.salesforce.com/services/oauth2/authorize For token requests: https:...
0
votes
0answers
28 views

Fire event using oauth

Switching from the generic endpoint to tenant endpoint is giving me issues injecting a contact into a journey. If I test the setup in postman everything works fine. Converting the 'old' method to the '...
1
vote
1answer
187 views

Expired authorization code and Invalid Nonce errors

We recently launched a mobile app and we use Salesforce Identity Management. ie all customers have a Salesforce user record and authentication is done is Salesforce. After the launch, some users were ...
0
votes
0answers
15 views

.NET CORE: Send Custom XML as SOAP message for Triggerred Send Email

We are trying to achieve "Triggerred Send Email". https://webservice.boa.exacttarget.com/Service.asmx We are experiencing issues with soap message format being generated by visual studio wherein it ...
1
vote
1answer
560 views

{“error”:“invalid_grant”,“error_description”:“authentication failure”}

Hi I am trying to connect one salesforce org to another but getting below error in response body while trying to get the access token using the username password flow in oauth. Please suggest what is ...
0
votes
1answer
239 views

Cannot list users - ERROR running force:user:list: Must pass a username and/or OAuth options when creating an AuthInfo instance

When I run sfdx force:user:list this is the error message I get: ERROR running force:user:list: Must pass a username and/or OAuth options when creating an AuthInfo instance. This issue came up ...
0
votes
1answer
136 views

JWT Bearer flow vs. Username+Password flow in server-to-server integration

Official documentation and some SFSE answers advise against the use of Username + Password flow (Resource Owner Password Credentials Grant in oauth). The JWT Bearer flow is also recommended as a ...
1
vote
1answer
117 views

Authorize a DevHub using SalesforceDX without password

I am working on SalesforceDx and I have to authorize my devhub by just using Username of the org I dont want to enter password. I have tried JWT token for authorization but it uses an OPEN SSl ...
0
votes
1answer
364 views

Persistant INVALID_AUTH_HEADER with curl on macos

I'm using curl to connect to a Salesforce org with OAuth (I'm following this tuto and get stuck at step 3): 1) Perform a User Agent OAuth request to get the session data below: { "access_token"...
1
vote
0answers
48 views

Posting SAML assertion to get an OAuth token

I have 2 service providers, SP1 and SP2 and I have obtained my SAML response from IDP into SP1. Now, in order to connect SP1 and SP2 I am using the oauth SAML response from SP1 and posting it to oAuth ...
1
vote
1answer
143 views

SAML bearer assertion flow for retrieving an OAuth token

I am using SAML assertion to retrieve an OAuth token and I am using a custom apex class to generate the SAML assertion. My IDP is set to send User's FederationIdentitfier in Subject (SAML Response Pic)...
2
votes
0answers
56 views

OpenID Connect single logout

I have a connected application (web site) that is using Salesforce as an authentication provider (OpenID Connect). And I'd like the logout on my site to work as a "single logout" - it should also log ...
1
vote
1answer
147 views

Sandbox OAuth Error 1800 through VS Code, CLI, and MavensMate

I'm trying to sign into a sandbox org, but I'm getting an error when running through the OAuth flow: We can't authorize you because of an OAuth error. For more information, contact your Salesforce ...
0
votes
0answers
53 views

I have the ClientID and ClientSecret, I receive the same error after multiple attempts

"https://developer.salesforce.com/docs/atlas.en-us.mc-apis.meta/mc-apis/error-handling.htm","errorcode":404,"message":"Not Found" Here is my request https://subdomain_name.auth.marketingcloudapis....
2
votes
4answers
2k views

Cannot connect a Salesforce org using Authorize an org in VS Code

Using VS Code, after I enter the command line "Authorize an org" I get redirected to Salesforce login and can successfully log in. However I then get the error "This site can't be reached" The URL ...
1
vote
1answer
152 views

Add a custom header property in JWT assertion for OAuth

How do I add additional header properties to my JWT using the JWTBearerTokenExchange Class? (https://developer.salesforce.com/docs/atlas.en-us.apexcode.meta/apexcode/...
0
votes
1answer
53 views

React.js GraphQL web app returning random null values

I'm working on a React.js web app that leverages GraphQL for accessing a combination of varying endpoints, including our org's SF data. My only issue is isolated to my Salesforce progress. In general, ...
2
votes
0answers
74 views

Errors with Web Server OAuth Implementation

I am trying to implement Web Server OAuth flow from one Salesforce Org to another. Following is the Class which contains the logic. I am hitting custom rest api to insert Accounts using the access ...
0
votes
0answers
134 views

Automatic login with Salesforce

I would really appreciate if anybody could guide me to achieve this requirement. A user has told me recently that in his company, the technology team has developed a desktop app whose main purpose is ...
0
votes
1answer
70 views

Token generation for Einstein Sentiment API

I am trying to implement the sentiment api but having issue while generating the access token. I have uploaded einstein_platform.pem file in Files in Salesforce. ContentVersion con = [SELECT Title ...
1
vote
0answers
89 views

id_token not returned in JWT Bearer Token OAuth Flow

As per the JWT Bearer token documentation The id_token will be return if there is a pre-existing approval for the openid. I have existing approvals for openid for the user. Am I missing something in ...
0
votes
0answers
18 views

Community user needs to redirect to login page when logged out

We have a community and users who are using the community are logging into Community using Third party authorization. When logged out, it is showing that the user is still logged in with an error ...
0
votes
1answer
248 views

Redirect to Authentication Provider Page instead of salesforce login page

I have created an open id connection between external authentication provider and salesforce. Now the requirement is when my domail url is entered in browser, it has to redirect to authentication ...
0
votes
1answer
41 views

Restrict the user to get oAuth token from custom app in salesforce

we have an android app which is connected with Salesforce. From the Android app, we will pass the username and password to the salesforce to get oAuth token. I have created one checkbox field i.e. ...
0
votes
2answers
309 views

How is named credentials & auth provider with connected app used? Can i have scenario where it is needed?

I have seen people use auth. providers that has client secret and id of connected app and authenticated using named credentials. The named credentials stores the oauth refresh token but I am not ...
1
vote
1answer
112 views

Google Login in Salesforce1 App Disallow Useragent iOS

We used to be able to use the mobile app for iOS without a problem. Now if we go to log in and click the Google Login button, the immediate message is a 403 disallowed_useragent message. Logging in ...
0
votes
1answer
246 views

OAuth Error when attempting to Deploy the ApexMocks open source library in Trailhead unit 'Apply Unit of Work Principles in Apex'

I'm logged in to Trailhead as myself and working on this unit: https://trailhead.salesforce.com/content/learn/modules/apex_patterns_sl/apex_patterns_sl_apply_uow_principles Scroll to 'Preparation for ...
1
vote
0answers
124 views

[Talend SF Connection JWT]runtime exception https status 400-bad request message {“error”:“invalid_grant”,“error_description”:“audience is invalid”}

I am facing an error while trying to establish the Oauth connection (JWT) between talend ETL tool and salesforce : runtime exception https status 400-bad request message {"error":"invalid_grant","...
2
votes
1answer
91 views

Authenticated Oauth workflow required constant login

I am very new to the Salesforce API. I am creating a library which connects to Salesforce and accesses data etc. I am implementing the Web Server Oauth Authentication workflow (https://developer....
2
votes
0answers
198 views

Salesforce OAuth2 invalid_grant: user hasn't aproved this consumer on AWS

I have developed a client application that accesses Salesforce REST API through OAuth 2 using the Go programming language. Everything works fine locally: I have a correct token, client ID, client ...
1
vote
1answer
429 views

Salesforce calling external application using OAUTH

I need to call an external service FROM salesforce Authenticating against the External application is done via OAUTH so basically I need to write APEX code that uses HttpRequest and passes in the ...
0
votes
1answer
139 views

OAuth 2.0 Device Authentication Flow - invalid device code

I am trying to implement OAuth 2.0 Device Authentication Flow. In first step i received device code successfully. Then i have created JWT token using device code and and other details. Send it to ...
2
votes
0answers
25 views

Can Social Logon be used directly from a native mobile app?

We have a Customer Community with Facebook and Google set up as Auth Providers. In addition, we have a mobile app that connects to Salesforce using OAuth towards this community. This all works fine. ...
3
votes
1answer
82 views

Is session duration guaranteed?

Let's assume that our session timeout value is set to the default 2 hours. The documentation defines this value as Length of time after which the system logs out inactive users. If the user is ...
2
votes
0answers
50 views

Decrypt challenge in Salesforce from external system in 2FA

We are integrating salesforce with external system. External system has two factor authentication process. We are calling first URL to get challenge. - Working fine. We need to decrypt challenge in ...
1
vote
0answers
137 views

When would a Client Application be unable to use the User-Agent OAuth Flow (but able to use Web Server OAuth Flow)?

A Client Secret is no longer required for Web Server OAuth Flow. This is not a new feature (Spring'17), but I have not given it much thought until now. "If a client application can’t securely store ...
0
votes
1answer
54 views

Disable custom connected app from profile

I have a custom connected app that is used for OAuth purposes (outside of Salesforce). Therefore I don't need it to appear in the app launcher, unfortunately I see no way to remove it, at least for ...