Questions tagged [oauth]
OAuth is an open, standard, protocol to allow users to securely authorize web, mobile and desktop applications to access web services on their behalf. Salesforce supports OAuth 1.0a and 2.0.
325
questions
-1
votes
0
answers
28
views
OAuth token in format OAuth + Token [closed]
When I scan the developer console, I saw that the token used is in the format:
OAuth TokenString.
With SF I saw token in the format:
Bearer Token.
But I need to use the OAuth token format for a ...
- 39
2
votes
0
answers
34
views
Will grant_type=client_credentials now work with Using Basic Authentication with Named Credentials?
Lots of questions over the years about using the grant_type=client_credentials version of oAuth with Named Credentials, and how it isn't really supported. I have a customer who wants to use that ...
- 13.2k
2
votes
0
answers
46
views
Get OAuth scopes for managed apps using API
I am exploring the Saleforce API in order to obtain the OAuth scopes for connected applications. As an experiment, I created two connected apps:
Create a connected app manually say App1 by clicking ...
0
votes
1
answer
274
views
Unable to get an Access token using a named credential and getting a State not Send OAuth Error
I am trying to get SF access token using a named credential as that is the secure way as mention here:
I am basically unable to login successfully and get the following error :
No_Oauth_State&...
- 225
0
votes
0
answers
37
views
Salesforce to Salesforce Integration using Canvas App
We are working on requirement where we need to display a Salesforce VF Page in another salesforce instance(Can provide more details on this vf page data but I think its out of the scope for this ...
- 74
0
votes
1
answer
51
views
How to connect Apex Triggers and Classes to other org's accounts
I've written a pretty simple Apex Trigger and Class which sends and HTTP request to an external service when a Salesforce Contact is updated. I developed this in our local dev environment and seems to ...
- 111
0
votes
0
answers
97
views
oAuth JWT flow for multiple users
I've only ever used the JWT flow for server to server integrations with a hardcoded specific user. Is it even recommended to use it with multiple users where we dynamically inject the username into ...
0
votes
0
answers
45
views
Error on previously visited page
im having this kind of error. I want my page to redirect to the last valid page it goes to instead of Account-Show. For example, when I click on a product and I decide to Log-in, after successfully ...
2
votes
1
answer
2k
views
Option to 'Enable Client Credentials Flow' not showing
I'm trying to configure the OAuth 2.0 Client Credentials Flow as described in the docs here.
However, once I go to the connected app I want to configure, I can't find the option Enable Client ...
- 141
1
vote
0
answers
31
views
How to configure OAuth scopes for connected apps in 2GP
I'm confused about how the configuration of connected apps in a 2GP work. I've found a couple helpful pages in the documentation, but feel I'm still missing some important details.
I currently have a ...
- 103
1
vote
0
answers
39
views
How does OAuth Custom Scope work?
I was trying to find a flow diagram how OAuth Custom Scopes works but found very limited documentation on this. Could anyone please explain what it does and how it works?
- 2,173
1
vote
0
answers
28
views
update in iDP from SP [closed]
We're using Salesforce as an IdP(A) for internally developed application(B) using Open ID Connect protocol.
Once identity of user is established in B, user works mostly on that system but there is one ...
- 1,097
0
votes
0
answers
135
views
Planting an Iframe as Aura component to show an external system that receives information from Salesforce API using oAuth web server flow
I have built a web app for our sales team.
The web app is currently using oAuth web server flow in order to authenticate with Salesforce.
Everything is working fine when running it on a separate tab.
...
-1
votes
2
answers
489
views
Maintain session permanently for user signed in through Connected App / Oauth
I am setting up a Salesforce Rest endpoint for a 3rd party to send data to. I've created a specific user who has API only login access. My goal is to generate an access token that will not expire. I ...
- 711
0
votes
1
answer
820
views
Why don't I get a new refresh token when I refresh an access token in Salesforce?
When I first authenticate to Salesforce, I get an access token and a refresh token. But if the access token has expired I make a call using the refresh token to get a new access token, but in the ...
- 9
0
votes
0
answers
515
views
How can one authenticate Dataloader CLI when instance has MFA enabled?
Since moving my data export script out of my company's sandbox and into prod, I've been having a hard time getting Dataloader to authenticate, and I suspect this may be due to the Salesforce ...
- 111
0
votes
0
answers
71
views
How can a REST API integration handle detecting what environment it is being loaded in?
I maintain a WordPress plugin that is based on a REST API integration. When a user installs the plugin, they create a custom app in Salesforce, save the credentials in WordPress, and run through an ...
- 205
0
votes
1
answer
380
views
Connected App OAuth Scopes - full vs. api
I'm wondering if anyone could clarify for me the distinction between the connected app Oauth scopes 'full' vs. 'api'.
We have a couple integrations for which I've used 'web' and 'api', and they work ...
1
vote
0
answers
99
views
Grant higher API access than the login user has
We have a connected app, and a read-only SF user.
I want to get write access to the connected app, which is done by calling https://login.salesforce.com/services/oauth2/token with OAuth client ID and ...
- 123
0
votes
0
answers
228
views
named credentials merge fields
So I implemented a custom Auth for Client Credentials flow using example from "https://lekkimworld.com/2021/05/07/custom-salesforce-auth-provider-for-microsoft-azure-client_credentials-flow" ...
- 1
-1
votes
2
answers
596
views
Invalid Authorization Code when trying to get a refresh token
I'm trying to connect to a Salesforce org with a refresh token but have failed so far and can't get it right.
For the moment, I'm using an access_token which is working fine. I'm getting it with the ...
- 103
-3
votes
1
answer
36
views
Obtain all OAuthTokens from account
Iv'e came across this data object.
I am wondering how can I fetch all of the token which are related to my account (and all of my end users as-well).
I did not quite understand which and how to ...
1
vote
0
answers
208
views
Single log out for oauth connected app
We’ve followed this guide for single logout (SLO) to call the logout url of our connected app.
https://help.salesforce.com/s/articleView?id=sf.connected_app_manage_oauth.htm&type=5
Specifically:
“ ...
- 11
0
votes
1
answer
838
views
Setting up MyTrailHead subdomain results in Auth Provider error No_OAuth_Token
I am trying to set up a MyTrailhead subdomain on a sandbox org as mentioned here:
https://help.salesforce.com/s/articleView?id=sf.mth_set_up_your_mth_subdomain_and_namespace.htm&type=5
My user is ...
- 225
0
votes
1
answer
80
views
Is there an active Salesforce OAuth outage this morning?
It appears that multiple services were unable to oauth to salesforce this morning.
I'm curious if anyone else saw this in their systems.
We're not sure what's happening, it's not a credentials issue. ...
- 1,300
1
vote
0
answers
315
views
OAuth login not returning to redirect uri
I have configured our salesforce sandbox as an OIDC provider in an AWS Cognito user pool. Sometimes when logging in this way, the user is redirected to salesforce after logging in rather than back to ...
5
votes
1
answer
131
views
Is there a security hole in Salesforce's documentation?
I was looking at Salesforce's documentation for implementing an OAuth callback and I noticed they are accepting a "sfdc_community_url" from the client, which should normally only ever be a ...
- 162
-1
votes
1
answer
845
views
Enforce OAuth Scope for Lightning Apps [closed]
How to find if any of lightning apps in my org uses oauth. Can anyone please guide me with this.
- 113
0
votes
1
answer
650
views
How to get instance URL using OAuth?
Is there a way to get the user instance URL using the API? Or any other way? I am using OAuth to get the user token.
- 117
1
vote
1
answer
816
views
Seamless experience between website and Salesforce community site - one login? [closed]
We have a requirement to allow a seamless experience from our main company website to our Salesforce community site.
Basically, someone can login to our company website and be able to click a link ...
- 477
0
votes
1
answer
42
views
Should Authenticated Lighting Out App Not Run As Authenticated User Instead of Guest User?
I have a Lighting Out App hosted on a website and have been using this for read-only actions for sometime via an unauthenticated Community endpoint. This has worked out well. I now have a requirement ...
- 649
0
votes
1
answer
242
views
Salesforce oAuth JWT Integration
We have provided salesforce self signed certificate to external system for oAuth JWT integration with salesforce. when they hit salesforce they get the below error
What does this error mean and how to ...
- 7,705
4
votes
1
answer
1k
views
Access-Control-Allow-Origin Header Authentication Issue
I was trying to call OAuth from our website but it gives an error
Access to XMLHttpRequest at
'https://.salesforce.com/services/oauth2/token' from origin
'https://***.com.ph' has been blocked by CORS ...
- 37
1
vote
0
answers
245
views
JWT authentication parameter error
I am currently working on the project that I am going to integrate the application of my company and salesforce.
In my case, it seemed that using the JWT for authentication is better. So, I wanted to ...
- 19
0
votes
0
answers
333
views
connection to salesforce with curl, no response
As a followup of windows curl authentication error, i'm doing the tutorial on https://trailhead.salesforce.com/content/learn/modules/apex_integration_services/apex_integration_webservices?trail_id=...
- 95
1
vote
1
answer
723
views
windows curl authentication error
I'm doin a tutorial o REST connections to Salesforce, and in the Curl connection, i keep having an authentication error. URL: https://trailhead.salesforce.com/content/learn/modules/...
- 95
2
votes
2
answers
794
views
SessionID access vulnerability found when using Metadata API
Salesforce is performing manual security review in our package. They have found SessionID access Vulnerability in one of our file where we are using Metadata API to grant permissions on profile and ...
- 5,744
2
votes
1
answer
181
views
How to integrate the user interface api with an existing project?
I am trying to implement a form in my react app that allows users to submit data to salesforce using the UI API.
From following the documentation I have created a connected app with a callback url and ...
- 198
0
votes
1
answer
143
views
Does the authentication with sfdx force:auth:device:login expire?
I am using sfdx to pull some data from salesforce on my desktop. Eventually I will have to put this on the server. Just wondering how long after the intial login would I have to login again? Is there ...
- 73
1
vote
1
answer
127
views
Can not install OAuth showing as already installed, Api user is getting error as blocked by Admin
The user cannot access the connected app to the Sf Sandbox. It throws an error "OAUTH_APP_BLOCKED&error_description=this+app+is+blocked+by+admin" in the URL, any idea how to solve ?
I ...
3
votes
1
answer
446
views
Locking Down OAuth App Access in our Salesforce Org
I am looking to control Salesforce OAuth Application Access so it requires admin approval prior to being connected.
Current Issue
All employees at our organization have OAuth Access to Salesforce.
...
- 393
2
votes
1
answer
375
views
Open Id Connect Account Linking
For the OpenId Connect pros out there:
Regarding the RegistrationHandler Interface in Salesforce. I have tried searching online for insight but I am having difficulty finding a specific answer for two ...
- 1,272
2
votes
0
answers
493
views
Salesforce to Azure AD named credential failing after access token expires
Sf azure:Refresh token exchange to renew access token process (not working)
I am facing an issue where I have a named credential configured in Salesforce using auth provider (using openid connect for ...
7
votes
3
answers
2k
views
SFDX: Authorize an Org hangs after login attempt
All,
I am on a Windows 10 laptop with the latest patches and updates from Microsoft Version 10.0.18363. When I attempt to Authorize an Org it opens Google Chrome Version 88.0.4324.190 (Official Build)...
- 71
0
votes
0
answers
332
views
Making OAuth Connected Apps work if current Admin User gets inactivated
In our Production instance we have deactivated a System Administrator and while clearing all dependencies we have found a lot of "OAuth Connected Apps" under his user account. Our ...
- 1,521
4
votes
2
answers
2k
views
sfdx force:auth:web:login – how to get it to work under Linux Mint?
Can't connect any org under Linux Mint via sfdx force:auth:web:login
Neither via sfdx force:auth:web:login -r https://test.salesforce.com -a foo
nor sfdx force:auth:web:login -r https://foo.my....
- 181
2
votes
1
answer
699
views
SFDX force:user:list : meaning of output fields
When I issue the command
sfdx force:user:list --targetusername user@example.com --json
I get the response:
{
"status": 0,
"result": [
{
"defaultMarker": &...
- 620
1
vote
1
answer
528
views
PCKE flow Salesforce for OAuth 2.0
I am using PKCE ( proof key for code exchange ) flow in salesforce and trying to authenticate but getting below error
{
"error": "invalid_grant",
"error_description": &...
- 810
0
votes
1
answer
245
views
Best authentication flow to use for Rest API without interacting or login to salesforce application?
We have web application that need to read & write data to Salesforce. For that, Web application have to authenticate with Salesforce and get access token.
I refer all authentication flow mentioned ...
- 1
0
votes
2
answers
511
views
OAuth2 and Client ID/secret with endpoint users
I'm new with using OAuth2 and want to use it to allow endpoint users to be authenticated with their accounts using LDAP. While the authentication process works, I see that you must send the client ID ...
- 1