Questions tagged [oauth2]

OAuth 2.0 is the next evolution of the OAuth protocol and is not backwards compatible with OAuth 1.0. OAuth 2.0 focuses on client developer simplicity while providing specific authorization flows for web applications, desktop applications, mobile phones, and living room devices.

Filter by
Sorted by
Tagged with
3
votes
1answer
29 views

Cannot authorize a Scratch Org via JWT - invalid_grant - user hasn't approved this consumer

I've followed the docs here to create a cert and configured the following; OAuth scopes: api, refresh_token, offline_access and web Permitted users: Admin approved users are pre-authorized Profiles: ...
0
votes
1answer
31 views

Accessing Token Introspection end points in a PKCE Web Server Flow

When using PKCE flow, I generate a code verifier and code challenge pair - appending the latter to the authorization request and the former to any subsequent calls to the token endpoint. But what ...
0
votes
0answers
34 views

Apex callout failed with SunCertPathBuilderException [duplicate]

Below is the requirement and they provided JAva code to create JWT. JWT token should be signed with Client Secret. Client Key, UniqueAppId (Id assigned to the app) and a GUID should be included in ...
0
votes
0answers
21 views

SSO for External OAuth 2.0 Provider - NO_ACCESS User+was+a+portal+user

I configured Single-Sign-On for my application through OAuth 2.0. Plugin class works well, salesforce gets all required infromation. RegistrationHandler -> createUser is perfomed and a new user is ...
0
votes
1answer
49 views

Salesforce internal server error - SSO through OAuth 2.0 external provider

I am configuring Single Sign On for my application through OAuth 2.0 server. I used the next recommendations: https://help.salesforce.com/articleView?id=sso_provider_plugin_custom.htm&type=5#...
1
vote
1answer
23 views

Getting an OAuth2 token in scratch orgs

I'm trying to get an OAuth2 token in a scratch org, I set up a connected app and tried just about every way that I could think of. I attempted to use my scratch org url and test, this is what my ...
0
votes
0answers
36 views

Login limit exceeded error for an integration user [duplicate]

Background - One of the external application (in Java) calls Salesforce resources. Integration user generates OAUTH token through Username-Password flow and uses it to access SF resources. In ...
0
votes
0answers
27 views

Salesforce Connect with Cross-Org Adapter: This session is not valid for use with the REST API

I am using Salesforce Connect with a cross-org adapter to connect two orgs. I have configured the external data source with oAuth and an Authentication Provider. The data source was successfully ...
1
vote
0answers
22 views

How can i returned access token for partner community user (external user) from connected app? [duplicate]

In my organization i have two users(Salesforce license user, Partner Community license user ). Here i am accessed over a connected app using postman. The access token is returned for Salesforce ...
1
vote
1answer
33 views

Authentication that does not use oAuth

Is it possible to retrieve client id & secret without Connected App creating? As well - is it possible to use rest only with username, password and tocken?
0
votes
0answers
17 views

Login Flows redirection issue

We have a login flow and based on the profile, we redirect the users to a different page inside salesforce. It works fine in the redirection process. Recently we have installed a managed package, ...
3
votes
1answer
56 views

Creating and authenticating Salesforce Marketing Cloud Integration [duplicate]

My customers are asking for an Integration to update some of their data in Salesforce Marketing Cloud from an application that I own. They want some properties from the users in my application to be ...
0
votes
0answers
38 views

FuelSDK-Node OAuth2 Problem - “No access token”

I have a problem to get a token with Oauth2 using FuelSDK-Node. This is the code I am using: const client = new ET_Client(clientId, clientSecret, stack, {origin, authOrigin, soapOrigin, authOptions :...
0
votes
0answers
37 views

Adding custom claims to access token in oAuth JWT Bearer flow [duplicate]

My requirement is to retrieve additional attributes via JWT Flow. For that I developed a connected app plugin class and added it to the connected app. Although i am able to get the access token, it ...
4
votes
1answer
67 views

Redirecting to MyDomain URL

We set up SSO with Auth.Provider in Salesforce. We deployed My Domain and linked the auth provider to it. When a user navigates to the My Domain URL, they are automatically redirected to the auth ...
0
votes
0answers
66 views

Rest API + JWT flow, will certificate by Salesforce enough?

I have created a connected app that I want to use as part of a JWT flow. For this I created a certificate, by using the Create CA-Signed Certificate button from Certificate and key Management in ...
0
votes
1answer
144 views

OpenID Connect - ID Token vs Access Token

I have setup a connected app with the "openid" scope. Using the web server flow, my callback is able to get the Open-ID JWT from "id_token", generated by Salesforce. My API has no problem validating ...
0
votes
1answer
80 views

oauth infinite redirect loop during authorization

This problem has occurred in a few of our applications that use the same forms of salesforce oauth authentication. When you first navigate to mywebsite.com, it sends you to salesforce to login, once ...
0
votes
0answers
30 views

Salesforce community login from different website without SSO [duplicate]

I would like community users to login to salesforce community from the company website (via click) without SSO. is there a way to achieve this? For salesforce login (not community) I know there is a ...
0
votes
2answers
54 views

Named Credentials OAuth Sharepoint Microsoft Access Control Service Cust Auth. Provider

I have SalesForce and SharePoint connected on OAuth. I have created Sharepoint app-only, added it to Custom Auth provider and created namedcredentials which is showing as authenticated. Every blog ...
0
votes
0answers
30 views

error=redirect_uri_mismatch Oauth2

I having trouble to create the Refresh Token. I want to give it to a third party, So it can use it to get an access token and send us data using an exposing web service that I created. I tried to do ...
2
votes
1answer
38 views

How can be personalised the standard login/authentication process of salesforce?

I'm trying to understand if is possible to override the standard login/authentication processo of salesforce. I need to add custom logic when is triggered the login/authentication process of ...
0
votes
0answers
33 views

Get access token of user after they install a package from AppExchange [duplicate]

Is there any way to get access token of user (to external system) who install my package from AppExchange. I have seen an OAuth flow when I try to install any package from AppExchange, does that mean ...
0
votes
0answers
34 views

(Connected App) Retrieve access token of user after successfully installing the application [duplicate]

In my app there are various component like visual force page, tabs, custom field..etc. It works in a way that after installing the app, it needs user access_token into our platform (not Salesforce) to ...
3
votes
1answer
85 views

JWT Bearer Token flow for Community: Invalid Token

I'm implementing a JWT Bearer Token within Salesforce (Apex) so my customers can passwordlessly login to a community. Not sure if it is a good practice, but I done some research and saw some use cases ...
1
vote
0answers
58 views

Jenkins Http Request not returning token [closed]

I am trying to communicate through API from Jenkins HTTP request plugin, by passing the parameters in the body like below: "username": "xxx", "password": "xxx", "client_id": "xxx", "...
0
votes
1answer
113 views

Unauthorized Access using Named Credentials [duplicate]

I am using Named Credentials oAuth2.0 protocol to connect with Xero. I have setup Auth. Provider and Named Credential. Named Credential is also authenticated. I have followed the steps mentioned here ...
0
votes
0answers
22 views

Custom Auth Provider 503 Error

I have implemented a custom auth provider as part of the single sign on flow for Salesforce communities. Most of the flow is working correctly. I am able to get the authorization token, access token ...
3
votes
1answer
60 views

Impact of Freezing SF User - scheduled jobs, reports, oauth tokens

We are going to do one big release (deployment, configuration, data load) in our prod org and need to have some sort of maintenance window to prevent users from interacting with SF org. Freezing all ...
2
votes
1answer
79 views

For an OAuth 2.0 process, do you need multiple connected apps for each instanceUrl?

I am building an integration from my platform whereby you can export data to your Salesforce instance, having authenticated via OAuth 2.0. I'm experiencing the below when attempting to get an access ...
0
votes
0answers
28 views

Authenticate 3rd party in Salesforce [duplicate]

I have my server in Ruby on Rails. Now I wanted to build an app in the salesforce that will authenticate with my server using auth2.0. All org who have installed my app will have access to their ...
0
votes
0answers
18 views

Error while querying ThirdPartyAccountLink object

I have an external authprovider which our external users will login to Salesforce using that. I want to know total count of active ones who logged into Salesforce using that SSO Provider name. below ...
0
votes
2answers
161 views

Marketing Cloud - acquiring an access token

Here is my request for authorization token in Postman: https://mc8fqc9ydvcn66zzz-zzzzkl4f0.auth.marketingcloudapis.com/v2/token/?grant_type=client_credentials&client_id=yoxt7vzzzzzzzp5qe5zjr0ue&...
2
votes
1answer
258 views

Salesforce to Xero integration using Named Credentials by OAuth 2.0

I am trying to do the integration between Salesforce and Xero by using Named Credentials (Authentication Protocol is OAuth 2.0). I created an Auth provider - Then created Named credentials of OAuth 2....
1
vote
2answers
37 views

TouchId, FaceId login for mobile Apps

One customer is asking for having the Mobile App authentication for External users sites using Communities with FaceId and TouchId, I have tried "Implementing Screen Locking and PIN protection" in the ...
0
votes
0answers
12 views

SFDC SDK 7.3 OAuth Compliance for Biometric Login Implementation

SFDC SDK 7.2 is already in use to implement an App with Biometric Login. Upon authorization grant from Auth Server(SFDC), Access Token is to be used to login to the app and biometric login is ...
5
votes
1answer
123 views

Is it possible to programmatically change connectedApp settings in production?

Background: I have a requirement to make it so that an SFDC connected app defaults/is super easy to set to Admin Users are Pre-authorized instead of All users may self-authorize. This setting is ...
0
votes
0answers
122 views

Salesforce OpenID connect with Azure Errror - No_Oauth_Token: Access token was not returned

We are configuring Azure open ID as salesforce Auth provider to a community portal and attempting to log in results in the error: “No_Oauth_Token”. We have checked multiple times and it looks all good ...
2
votes
1answer
24 views

Bypassing Header Based Authentication

I am configuring a REST Hook between Salesforce and this marketing tool AutopilotHQ. Rather than having Salesforce continuously poll to find out when there is new information to trigger from, ...
2
votes
1answer
51 views

How can I use REST API through OAuth?

For test purposes, I'm trying to use some customer's REST API on Salesforce. I don't have any API-consuming code yet (I'm just using CURL, OAuthDebugger, et similia). I've tried the following this ...
0
votes
1answer
82 views

invalid_grant: expired access/refresh token with refresh token included in JSForce

I am trying to build a server that will populate Salesforce through a front end website using Express JS with JSForce library. However, every time the access token expired, it does not refresh by ...
2
votes
1answer
55 views

How do I get client Id and redirect URI from salesforce without having access to an sfdc org

I'm trying to understand OAuth flow by building a chrome extension. I need access to the user's org and the way to do that authorization is via a connected app. Well what do you need for a ...
0
votes
1answer
59 views

PHP OAuth 2.0 JWT Bearer Token Flow

I am trying to obtain a JWT Bearer Token from Salesforce. I am trying to follow their documentation but am however unsuccessful. https://help.salesforce.com/articleView?id=remoteaccess_oauth_jwt_flow....
0
votes
3answers
129 views

Add custom claims to OpenID Connect id token - Web Server Authentication flow

We are using Keycloak to generate OpenID Connect id tokens, now they want to use Salesforce Identity to do that. We have some custom claims in the id token returned by Keycloak that we are not able to ...
0
votes
0answers
11 views

How to prevent salesforce mobile android app from handling oauth links

Currently on both my web and mobile app, when initiating oauth, android asks the user if they want the link to open in either chrome or the salesforce mobile app. If the user selects the latter, auth ...
5
votes
1answer
381 views

Authorize Apex Rest API call using an Azure token

I'm new to the OAuth concept in Salesforce and looking for some pointers for my use-case. I'm not even sure if I'm framing my question correctly, but I'm trying to understand if I can invoke an Apex ...
4
votes
1answer
243 views

Specifying an expiration date/time when creating a JWT

I have a connected app that I would like to connect to using a JWT flow using a bearer token. Using anonymous Apex I have: // The consumer key for a connected app of mine String iss = '<MY ...
0
votes
0answers
20 views

Refresh token in Username-Password OAuth Authentication Flow [duplicate]

I am implementing an Android app that talks to Salesforce community. I would like to get the following inputs from the experts here. In Username-Password OAuth Authentication Flow, we will get only ...
1
vote
1answer
58 views

Authorization of clients (VS Code, Data Loader)

To use the OAuth protocol, you need to create a connected app on Salesforce. Through consumer key and secret key it is possible to implement different oAuth flows. But how does it work with Visual ...
5
votes
1answer
167 views

“Decryption Exception” errors on Named Credential

I have callouts that use a Named Credential and a Custom Oauth2 Auth Provider fail with this error response: Invalid parameter value "[hidden]" for parameter "Decryption Exception" A similar ...

1
2 3 4 5
13