Questions tagged [oauth]

OAuth is an open, standard, protocol to allow users to securely authorize web, mobile and desktop applications to access web services on their behalf. Salesforce supports OAuth 1.0a and 2.0.

Filter by
Sorted by
Tagged with
2 votes
1 answer
66 views

Salesforce oauth web server flow authorization - security issue

I have a react front-end app and an express server back-end. From my client app, I link to a route on the express server. In that route, I issue a response.redirect to the Salesforce oauth endpoint ...
kcamp37's user avatar
  • 43
0 votes
1 answer
54 views

oauth not returning authorization code

When trying to login with oauth the Salesforce server just calls my redirect uri with an empty querystring. The login string: https://login.salesforce.com/services/oauth2/authorize?response_type=code&...
dan-klasson's user avatar
0 votes
0 answers
102 views

$Lightning.use() function with access token

Hello Community Experts, Whenever I use the access token into the $Lightning.use() function, It will give the Invalid session ID error and my component will not load on an external site. I have ...
Tushar Jadav's user avatar
0 votes
1 answer
245 views

OAuth 2.0 in External Credential

This is a question about using OAuth 2.0 protocol with Salesforce's Named and External Credentials. I created an External Credential with OAuth, Client/Secret, and token ID URL. I created the ...
Kendra Broom's user avatar
2 votes
2 answers
834 views

Unable to get access token via Client Credentials flow

I am using Postman to make a request to my Salesforce domain: The response shown in the above example: { "error": "unsupported_grant_type", "error_description": &...
dbase1's user avatar
  • 186
0 votes
0 answers
117 views

OAuth1 sign a request with Crypto.generateHash

I'm trying to connect to a distant API (Netsuite). I can send a request and get a successful response when connecting with Postman. But when I try to do the same in Apex I get a 401 response. I ...
Emmanuel BRUNO's user avatar
0 votes
1 answer
128 views

Auth Token Vulnerability with Lightning out

I have been assured by 2 Archtects that there is no security issue here but I want to ask the wider community because i sense a security vulnerability looming. Below is the standard markup for ...
Dane's user avatar
  • 131
0 votes
0 answers
82 views

Any way to bulk revoke oauth tokens

So I have an app that is managing several oauth access/refresh tokens and it would be great if I revoke all the tokens I have. I am aware of the Salesforce's revoke endpoint. But it seems I can only ...
CodeBaker's user avatar
  • 301
0 votes
3 answers
706 views

Generate jwt access token for integration user

I am trying to use the new integration user license with the Salesforce API Only System Integrations profile. I created a user with a password and given them a permission set with a type of Salesforce ...
Valeriy Kutsar's user avatar
0 votes
0 answers
363 views

Named Credential is not automatically refreshing the token

I am using a Tooling API credential to authenticate against the same Salesforce org so that I can get some tooling API data in Apex. I am using oauth 2 and initially my integration user has to go ...
Strong Like Bull's user avatar
2 votes
1 answer
331 views

Authenticate to Salesforce in Chrome extension

crosspost from SO I am trying to authenticate to Salesforce in Chrome extension, but I am getting 400 error. If I try this code in Express.js server, it works. background.js console.log("...
Matt's user avatar
  • 73
2 votes
0 answers
230 views

Will grant_type=client_credentials now work with Using Basic Authentication with Named Credentials?

Lots of questions over the years about using the grant_type=client_credentials version of oAuth with Named Credentials, and how it isn't really supported. I have a customer who wants to use that ...
BritishBoyinDC's user avatar
2 votes
0 answers
83 views

Get OAuth scopes for managed apps using API

I am exploring the Saleforce API in order to obtain the OAuth scopes for connected applications. As an experiment, I created two connected apps: Create a connected app manually say App1 by clicking ...
Prahalad Deshpande's user avatar
0 votes
1 answer
2k views

Unable to get an Access token using a named credential and getting a State not Send OAuth Error

I am trying to get SF access token using a named credential as that is the secure way as mention here: I am basically unable to login successfully and get the following error : No_Oauth_State&...
Strong Like Bull's user avatar
0 votes
0 answers
58 views

Salesforce to Salesforce Integration using Canvas App

We are working on requirement where we need to display a Salesforce VF Page in another salesforce instance(Can provide more details on this vf page data but I think its out of the scope for this ...
Nandan's user avatar
  • 74
0 votes
1 answer
78 views

How to connect Apex Triggers and Classes to other org's accounts

I've written a pretty simple Apex Trigger and Class which sends and HTTP request to an external service when a Salesforce Contact is updated. I developed this in our local dev environment and seems to ...
jerfp's user avatar
  • 111
0 votes
0 answers
197 views

oAuth JWT flow for multiple users

I've only ever used the JWT flow for server to server integrations with a hardcoded specific user. Is it even recommended to use it with multiple users where we dynamically inject the username into ...
Tiago Lopes's user avatar
0 votes
0 answers
72 views

Error on previously visited page

im having this kind of error. I want my page to redirect to the last valid page it goes to instead of Account-Show. For example, when I click on a product and I decide to Log-in, after successfully ...
exekiel vergara's user avatar
2 votes
1 answer
4k views

Option to 'Enable Client Credentials Flow' not showing

I'm trying to configure the OAuth 2.0 Client Credentials Flow as described in the docs here. However, once I go to the connected app I want to configure, I can't find the option Enable Client ...
Joel Barenco's user avatar
2 votes
0 answers
62 views

How to configure OAuth scopes for connected apps in 2GP

I'm confused about how the configuration of connected apps in a 2GP work. I've found a couple helpful pages in the documentation, but feel I'm still missing some important details. I currently have a ...
Rink Stiekema's user avatar
2 votes
0 answers
61 views

How does OAuth Custom Scope work?

I was trying to find a flow diagram how OAuth Custom Scopes works but found very limited documentation on this. Could anyone please explain what it does and how it works?
Avijit Chakraborty's user avatar
1 vote
0 answers
29 views

update in iDP from SP [closed]

We're using Salesforce as an IdP(A) for internally developed application(B) using Open ID Connect protocol. Once identity of user is established in B, user works mostly on that system but there is one ...
curious_techy's user avatar
-1 votes
2 answers
889 views

Maintain session permanently for user signed in through Connected App / Oauth

I am setting up a Salesforce Rest endpoint for a 3rd party to send data to. I've created a specific user who has API only login access. My goal is to generate an access token that will not expire. I ...
Bobbygllh's user avatar
  • 721
1 vote
1 answer
1k views

Why don't I get a new refresh token when I refresh an access token in Salesforce?

When I first authenticate to Salesforce, I get an access token and a refresh token. But if the access token has expired I make a call using the refresh token to get a new access token, but in the ...
Kelly's user avatar
  • 19
0 votes
0 answers
871 views

How can one authenticate Dataloader CLI when instance has MFA enabled?

Since moving my data export script out of my company's sandbox and into prod, I've been having a hard time getting Dataloader to authenticate, and I suspect this may be due to the Salesforce ...
Lauren Oldja's user avatar
0 votes
0 answers
92 views

How can a REST API integration handle detecting what environment it is being loaded in?

I maintain a WordPress plugin that is based on a REST API integration. When a user installs the plugin, they create a custom app in Salesforce, save the credentials in WordPress, and run through an ...
Jonathan Stegall's user avatar
1 vote
1 answer
1k views

Connected App OAuth Scopes - full vs. api

I'm wondering if anyone could clarify for me the distinction between the connected app Oauth scopes 'full' vs. 'api'. We have a couple integrations for which I've used 'web' and 'api', and they work ...
Siri Deva's user avatar
1 vote
0 answers
144 views

Grant higher API access than the login user has

We have a connected app, and a read-only SF user. I want to get write access to the connected app, which is done by calling https://login.salesforce.com/services/oauth2/token with OAuth client ID and ...
klenium's user avatar
  • 119
0 votes
0 answers
359 views

named credentials merge fields

So I implemented a custom Auth for Client Credentials flow using example from "https://lekkimworld.com/2021/05/07/custom-salesforce-auth-provider-for-microsoft-azure-client_credentials-flow" ...
premkris's user avatar
-1 votes
2 answers
1k views

Invalid Authorization Code when trying to get a refresh token

I'm trying to connect to a Salesforce org with a refresh token but have failed so far and can't get it right. For the moment, I'm using an access_token which is working fine. I'm getting it with the ...
victorfink's user avatar
-3 votes
1 answer
60 views

Obtain all OAuthTokens from account

Iv'e came across this data object. I am wondering how can I fetch all of the token which are related to my account (and all of my end users as-well). I did not quite understand which and how to ...
user110170's user avatar
1 vote
0 answers
334 views

Single log out for oauth connected app

We’ve followed this guide for single logout (SLO) to call the logout url of our connected app. https://help.salesforce.com/s/articleView?id=sf.connected_app_manage_oauth.htm&type=5 Specifically: “ ...
Ant's user avatar
  • 11
0 votes
1 answer
1k views

Setting up MyTrailHead subdomain results in Auth Provider error No_OAuth_Token

I am trying to set up a MyTrailhead subdomain on a sandbox org as mentioned here: https://help.salesforce.com/s/articleView?id=sf.mth_set_up_your_mth_subdomain_and_namespace.htm&type=5 My user is ...
Strong Like Bull's user avatar
0 votes
1 answer
103 views

Is there an active Salesforce OAuth outage this morning?

It appears that multiple services were unable to oauth to salesforce this morning. I'm curious if anyone else saw this in their systems. We're not sure what's happening, it's not a credentials issue. ...
Andy Ray's user avatar
  • 1,409
1 vote
0 answers
451 views

OAuth login not returning to redirect uri

I have configured our salesforce sandbox as an OIDC provider in an AWS Cognito user pool. Sometimes when logging in this way, the user is redirected to salesforce after logging in rather than back to ...
Lucas Maloney's user avatar
5 votes
1 answer
139 views

Is there a security hole in Salesforce's documentation?

I was looking at Salesforce's documentation for implementing an OAuth callback and I noticed they are accepting a "sfdc_community_url" from the client, which should normally only ever be a ...
Kevin Denham's user avatar
-1 votes
1 answer
860 views

Enforce OAuth Scope for Lightning Apps [closed]

How to find if any of lightning apps in my org uses oauth. Can anyone please guide me with this.
Sindhuja's user avatar
  • 133
0 votes
1 answer
1k views

How to get instance URL using OAuth?

Is there a way to get the user instance URL using the API? Or any other way? I am using OAuth to get the user token.
hosseio's user avatar
  • 117
1 vote
1 answer
1k views

Seamless experience between website and Salesforce community site - one login? [closed]

We have a requirement to allow a seamless experience from our main company website to our Salesforce community site. Basically, someone can login to our company website and be able to click a link ...
Ryan Werner's user avatar
0 votes
1 answer
80 views

Should Authenticated Lighting Out App Not Run As Authenticated User Instead of Guest User?

I have a Lighting Out App hosted on a website and have been using this for read-only actions for sometime via an unauthenticated Community endpoint. This has worked out well. I now have a requirement ...
RedQueries's user avatar
0 votes
1 answer
342 views

Salesforce oAuth JWT Integration

We have provided salesforce self signed certificate to external system for oAuth JWT integration with salesforce. when they hit salesforce they get the below error What does this error mean and how to ...
RedDevil's user avatar
  • 7,765
4 votes
1 answer
2k views

Access-Control-Allow-Origin Header Authentication Issue

I was trying to call OAuth from our website but it gives an error Access to XMLHttpRequest at 'https://.salesforce.com/services/oauth2/token' from origin 'https://***.com.ph' has been blocked by CORS ...
user3751759's user avatar
1 vote
0 answers
339 views

JWT authentication parameter error

I am currently working on the project that I am going to integrate the application of my company and salesforce. In my case, it seemed that using the JWT for authentication is better. So, I wanted to ...
Abel's user avatar
  • 29
0 votes
0 answers
626 views

connection to salesforce with curl, no response

As a followup of windows curl authentication error, i'm doing the tutorial on https://trailhead.salesforce.com/content/learn/modules/apex_integration_services/apex_integration_webservices?trail_id=...
Luis Aguiar's user avatar
1 vote
1 answer
935 views

windows curl authentication error

I'm doin a tutorial o REST connections to Salesforce, and in the Curl connection, i keep having an authentication error. URL: https://trailhead.salesforce.com/content/learn/modules/...
Luis Aguiar's user avatar
3 votes
2 answers
1k views

SessionID access vulnerability found when using Metadata API

Salesforce is performing manual security review in our package. They have found SessionID access Vulnerability in one of our file where we are using Metadata API to grant permissions on profile and ...
Mr.Frodo's user avatar
  • 5,804
2 votes
1 answer
286 views

How to integrate the user interface api with an existing project?

I am trying to implement a form in my react app that allows users to submit data to salesforce using the UI API. From following the documentation I have created a connected app with a callback url and ...
sgt_pepper85's user avatar
0 votes
1 answer
203 views

Does the authentication with sfdx force:auth:device:login expire?

I am using sfdx to pull some data from salesforce on my desktop. Eventually I will have to put this on the server. Just wondering how long after the intial login would I have to login again? Is there ...
Chad H.'s user avatar
  • 73
1 vote
1 answer
257 views

Can not install OAuth showing as already installed, Api user is getting error as blocked by Admin

The user cannot access the connected app to the Sf Sandbox. It throws an error "OAUTH_APP_BLOCKED&error_description=this+app+is+blocked+by+admin" in the URL, any idea how to solve ? I ...
kiran pandian's user avatar
4 votes
1 answer
776 views

Locking Down OAuth App Access in our Salesforce Org

I am looking to control Salesforce OAuth Application Access so it requires admin approval prior to being connected. Current Issue All employees at our organization have OAuth Access to Salesforce. ...
Matthew Metros's user avatar

1
2 3 4 5
7