Skip to main content
New
Stack Overflow Jobs powered by Indeed: A job site that puts thousands of tech jobs at your fingertips (U.S. only). Search jobs

Questions tagged [oauth]

OAuth is an open, standard, protocol to allow users to securely authorize web, mobile and desktop applications to access web services on their behalf. Salesforce supports OAuth 1.0a and 2.0.

Filter by
Sorted by
Tagged with
0 votes
0 answers
30 views

Any limitations on creating an OAuth Connected App in Salesforce Essentials edition?

Are there any limitations to creating an OAuth connected app in Salesforce Essentials edition vs the higher editions like Professional, Enterprise, etc.? Are there any restrictions that I should be ...
tanfive7's user avatar
0 votes
0 answers
20 views

INVALID_SESSION_ID with metadata api login

I'm trying the metadata api in java using this sample code - https://developer.salesforce.com/docs/atlas.en-us.api_meta.meta/api_meta/meta_quickstart_java_sample.htm Instead of the basic ...
jacksparrow007's user avatar
0 votes
0 answers
60 views

oAuth - refresh token flow

I am trying to get a new access token via the refresh token when the current access token has expired: auth_url = 'https://login.salesforce.com/services/oauth2/token' payload = { "grant_type&...
Toivo Ranta's user avatar
0 votes
0 answers
52 views

Zentitle and Salesforce

Has anyone used REST with Zentitle? I'm having a problem authenticating. They give some examples in Java, but apparently I'm failing with converting them to Apex... This is the example code I'm ...
Florida Hippy's user avatar
2 votes
2 answers
84 views

Why am I getting "invalid_client: invalid client credentials" after upgrading from Android SDK 10.2.0 to 11.0.0?

I've inherited an Android app that uses the Salesforce SDK for auth. I've never used this SDK before. For some time now, the app has been running against the 10.0.0 SDK with no problems signing in. I ...
bartonstanley's user avatar
2 votes
1 answer
34 views

Connected App / OAuth Scopes - Access the Salesforce API Platform (sfap_api)

Does anyone have any idea what this OAuth Scope is?
nstuyvesant's user avatar
1 vote
1 answer
175 views

Refreshing Access Token generated unexpected 'invalid_grant: expired access/refresh token'

When I authenticated using oAuth, I received an access token and a refresh token, with which I am able to query data from Salesforce. The access token is working correctly, but once it expires, I ...
Z0q's user avatar
  • 59
0 votes
0 answers
49 views

Programatically give a user access to an ExternalCredential Principal (Per User)

I try to find a way to programatically give a user access to an ExternalCredential Principal (Per User). The standard way, is to go to personal settings and click "Allow Access". I found out ...
Elliot41's user avatar
-1 votes
2 answers
69 views

Authorize Application Like Workbench

I want to create an application that integrates to Salesforce - just like Workbench (https://workbench.developerforce.com/login.php). Every single guide I find wants be to create a connected app. Isn'...
Simon B. Nielsen's user avatar
-1 votes
1 answer
17 views

Making a web app that allows any salesforce org/user to sign up and see analytics

I'm creating a web application in which a user can "connect" their salesforce account to my web app and see analytics. I've currently looked at creating a connected app, but that only works ...
aaryan punia's user avatar
0 votes
0 answers
50 views

How to escape # in the redirect_uri for OAuth2?

I am redirecting user to salesforce for OAuth. It is giving me the error that unsupported response_type. When i debugged in the detail then i found that it is due to # in the url. How can i escape #? ...
Bhaskar Dabhi's user avatar
0 votes
1 answer
203 views

Error when using the username-password oauth flow

I'm fresh using the SF API and want to get the token by the oauth API to do some test. After I completed creating the connected APP followed the sf spec with the setting like below: then I got the ...
user143715's user avatar
0 votes
0 answers
55 views

Understanding the access path from ApiEvent

Hello Salesforce Community, I am facing a challenge in correlating ApiEvent records with OAuthToken, particularly for connected apps that haven't been installed in our Salesforce org. While I can see ...
Gal Malka's user avatar
  • 101
3 votes
1 answer
286 views

Salesforce oauth web server flow authorization - security issue

I have a react front-end app and an express server back-end. From my client app, I link to a route on the express server. In that route, I issue a response.redirect to the Salesforce oauth endpoint ...
kcamp37's user avatar
  • 53
0 votes
1 answer
271 views

oauth not returning authorization code

When trying to login with oauth the Salesforce server just calls my redirect uri with an empty querystring. The login string: https://login.salesforce.com/services/oauth2/authorize?response_type=code&...
dan-klasson's user avatar
0 votes
0 answers
151 views

$Lightning.use() function with access token

Hello Community Experts, Whenever I use the access token into the $Lightning.use() function, It will give the Invalid session ID error and my component will not load on an external site. I have ...
Tushar Jadav's user avatar
  • 1,806
0 votes
1 answer
1k views

OAuth 2.0 in External Credential

This is a question about using OAuth 2.0 protocol with Salesforce's Named and External Credentials. I created an External Credential with OAuth, Client/Secret, and token ID URL. I created the ...
Kendra Broom's user avatar
2 votes
2 answers
2k views

Unable to get access token via Client Credentials flow

I am using Postman to make a request to my Salesforce domain: The response shown in the above example: { "error": "unsupported_grant_type", "error_description": &...
DevelBase2's user avatar
0 votes
0 answers
215 views

OAuth1 sign a request with Crypto.generateHash

I'm trying to connect to a distant API (Netsuite). I can send a request and get a successful response when connecting with Postman. But when I try to do the same in Apex I get a 401 response. I ...
Emmanuel BRUNO's user avatar
0 votes
1 answer
210 views

Auth Token Vulnerability with Lightning out

I have been assured by 2 Archtects that there is no security issue here but I want to ask the wider community because i sense a security vulnerability looming. Below is the standard markup for ...
Dane's user avatar
  • 139
0 votes
0 answers
118 views

Any way to bulk revoke oauth tokens

So I have an app that is managing several oauth access/refresh tokens and it would be great if I revoke all the tokens I have. I am aware of the Salesforce's revoke endpoint. But it seems I can only ...
CodeBaker's user avatar
  • 301
1 vote
3 answers
1k views

Generate jwt access token for integration user

I am trying to use the new integration user license with the Salesforce API Only System Integrations profile. I created a user with a password and given them a permission set with a type of Salesforce ...
Valeriy Kutsar's user avatar
0 votes
0 answers
790 views

Named Credential is not automatically refreshing the token

I am using a Tooling API credential to authenticate against the same Salesforce org so that I can get some tooling API data in Apex. I am using oauth 2 and initially my integration user has to go ...
Strong Like Bull's user avatar
2 votes
1 answer
426 views

Authenticate to Salesforce in Chrome extension

crosspost from SO I am trying to authenticate to Salesforce in Chrome extension, but I am getting 400 error. If I try this code in Express.js server, it works. background.js console.log("...
Matt's user avatar
  • 73
2 votes
0 answers
368 views

Will grant_type=client_credentials now work with Using Basic Authentication with Named Credentials?

Lots of questions over the years about using the grant_type=client_credentials version of oAuth with Named Credentials, and how it isn't really supported. I have a customer who wants to use that ...
BritishBoyinDC's user avatar
2 votes
0 answers
102 views

Get OAuth scopes for managed apps using API

I am exploring the Saleforce API in order to obtain the OAuth scopes for connected applications. As an experiment, I created two connected apps: Create a connected app manually say App1 by clicking ...
Prahalad Deshpande's user avatar
0 votes
1 answer
3k views

Unable to get an Access token using a named credential and getting a State not Send OAuth Error

I am trying to get SF access token using a named credential as that is the secure way as mention here: I am basically unable to login successfully and get the following error : No_Oauth_State&...
Strong Like Bull's user avatar
0 votes
1 answer
98 views

How to connect Apex Triggers and Classes to other org's accounts

I've written a pretty simple Apex Trigger and Class which sends and HTTP request to an external service when a Salesforce Contact is updated. I developed this in our local dev environment and seems to ...
jerfp's user avatar
  • 111
0 votes
0 answers
215 views

oAuth JWT flow for multiple users

I've only ever used the JWT flow for server to server integrations with a hardcoded specific user. Is it even recommended to use it with multiple users where we dynamically inject the username into ...
Tiago Lopes's user avatar
0 votes
0 answers
77 views

Error on previously visited page

im having this kind of error. I want my page to redirect to the last valid page it goes to instead of Account-Show. For example, when I click on a product and I decide to Log-in, after successfully ...
exekiel vergara's user avatar
3 votes
2 answers
5k views

Option to 'Enable Client Credentials Flow' not showing

I'm trying to configure the OAuth 2.0 Client Credentials Flow as described in the docs here. However, once I go to the connected app I want to configure, I can't find the option Enable Client ...
Joel Barenco's user avatar
2 votes
0 answers
81 views

How to configure OAuth scopes for connected apps in 2GP

I'm confused about how the configuration of connected apps in a 2GP work. I've found a couple helpful pages in the documentation, but feel I'm still missing some important details. I currently have a ...
Rink Stiekema's user avatar
2 votes
0 answers
82 views

How does OAuth Custom Scope work?

I was trying to find a flow diagram how OAuth Custom Scopes works but found very limited documentation on this. Could anyone please explain what it does and how it works?
Avijit Chakraborty's user avatar
1 vote
0 answers
30 views

update in iDP from SP [closed]

We're using Salesforce as an IdP(A) for internally developed application(B) using Open ID Connect protocol. Once identity of user is established in B, user works mostly on that system but there is one ...
curious_techy's user avatar
-1 votes
2 answers
1k views

Maintain session permanently for user signed in through Connected App / Oauth

I am setting up a Salesforce Rest endpoint for a 3rd party to send data to. I've created a specific user who has API only login access. My goal is to generate an access token that will not expire. I ...
Bobbygllh's user avatar
  • 731
1 vote
1 answer
2k views

Why don't I get a new refresh token when I refresh an access token in Salesforce?

When I first authenticate to Salesforce, I get an access token and a refresh token. But if the access token has expired I make a call using the refresh token to get a new access token, but in the ...
Kelly's user avatar
  • 19
0 votes
0 answers
1k views

How can one authenticate Dataloader CLI when instance has MFA enabled?

Since moving my data export script out of my company's sandbox and into prod, I've been having a hard time getting Dataloader to authenticate, and I suspect this may be due to the Salesforce ...
Lauren Oldja's user avatar
0 votes
0 answers
100 views

How can a REST API integration handle detecting what environment it is being loaded in?

I maintain a WordPress plugin that is based on a REST API integration. When a user installs the plugin, they create a custom app in Salesforce, save the credentials in WordPress, and run through an ...
Jonathan Stegall's user avatar
1 vote
1 answer
2k views

Connected App OAuth Scopes - full vs. api

I'm wondering if anyone could clarify for me the distinction between the connected app Oauth scopes 'full' vs. 'api'. We have a couple integrations for which I've used 'web' and 'api', and they work ...
Siri Deva's user avatar
1 vote
0 answers
186 views

Grant higher API access than the login user has

We have a connected app, and a read-only SF user. I want to get write access to the connected app, which is done by calling https://login.salesforce.com/services/oauth2/token with OAuth client ID and ...
klenium's user avatar
  • 123
0 votes
0 answers
445 views

named credentials merge fields

So I implemented a custom Auth for Client Credentials flow using example from "https://lekkimworld.com/2021/05/07/custom-salesforce-auth-provider-for-microsoft-azure-client_credentials-flow" ...
premkris's user avatar
-1 votes
2 answers
2k views

Invalid Authorization Code when trying to get a refresh token

I'm trying to connect to a Salesforce org with a refresh token but have failed so far and can't get it right. For the moment, I'm using an access_token which is working fine. I'm getting it with the ...
victorfink's user avatar
-3 votes
1 answer
84 views

Obtain all OAuthTokens from account

Iv'e came across this data object. I am wondering how can I fetch all of the token which are related to my account (and all of my end users as-well). I did not quite understand which and how to ...
user110170's user avatar
1 vote
0 answers
412 views

Single log out for oauth connected app

We’ve followed this guide for single logout (SLO) to call the logout url of our connected app. https://help.salesforce.com/s/articleView?id=sf.connected_app_manage_oauth.htm&type=5 Specifically: “ ...
Ant's user avatar
  • 11
0 votes
1 answer
1k views

Setting up MyTrailHead subdomain results in Auth Provider error No_OAuth_Token

I am trying to set up a MyTrailhead subdomain on a sandbox org as mentioned here: https://help.salesforce.com/s/articleView?id=sf.mth_set_up_your_mth_subdomain_and_namespace.htm&type=5 My user is ...
Strong Like Bull's user avatar
0 votes
1 answer
111 views

Is there an active Salesforce OAuth outage this morning?

It appears that multiple services were unable to oauth to salesforce this morning. I'm curious if anyone else saw this in their systems. We're not sure what's happening, it's not a credentials issue. ...
Andy Ray's user avatar
  • 1,468
1 vote
0 answers
489 views

OAuth login not returning to redirect uri

I have configured our salesforce sandbox as an OIDC provider in an AWS Cognito user pool. Sometimes when logging in this way, the user is redirected to salesforce after logging in rather than back to ...
Lucas Maloney's user avatar
5 votes
1 answer
153 views

Is there a security hole in Salesforce's documentation?

I was looking at Salesforce's documentation for implementing an OAuth callback and I noticed they are accepting a "sfdc_community_url" from the client, which should normally only ever be a ...
Kevin Denham's user avatar
-1 votes
1 answer
887 views

Enforce OAuth Scope for Lightning Apps [closed]

How to find if any of lightning apps in my org uses oauth. Can anyone please guide me with this.
Sindhuja's user avatar
  • 155
0 votes
1 answer
1k views

How to get instance URL using OAuth?

Is there a way to get the user instance URL using the API? Or any other way? I am using OAuth to get the user token.
hosseio's user avatar
  • 117

1
2 3 4 5
7