Questions tagged [oauth2]

OAuth 2.0 is the next evolution of the OAuth protocol and is not backwards compatible with OAuth 1.0. OAuth 2.0 focuses on client developer simplicity while providing specific authorization flows for web applications, desktop applications, mobile phones, and living room devices.

Filter by
Sorted by
Tagged with
0
votes
2answers
35 views

Named Credentials OAuth Sharepoint Microsoft Access Control Service Cust Auth. Provider

I have SalesForce and SharePoint connected on OAuth. I have created Sharepoint app-only, added it to Custom Auth provider and created namedcredentials which is showing as authenticated. Every blog ...
0
votes
0answers
22 views

error=redirect_uri_mismatch Oauth2

I having trouble to create the Refresh Token. I want to give it to a third party, So it can use it to get an access token and send us data using an exposing web service that I created. I tried to do ...
2
votes
1answer
33 views

How can be personalised the standard login/authentication process of salesforce?

I'm trying to understand if is possible to override the standard login/authentication processo of salesforce. I need to add custom logic when is triggered the login/authentication process of ...
0
votes
0answers
29 views

Get access token of user after they install a package from AppExchange [duplicate]

Is there any way to get access token of user (to external system) who install my package from AppExchange. I have seen an OAuth flow when I try to install any package from AppExchange, does that mean ...
0
votes
0answers
33 views

(Connected App) Retrieve access token of user after successfully installing the application [duplicate]

In my app there are various component like visual force page, tabs, custom field..etc. It works in a way that after installing the app, it needs user access_token into our platform (not Salesforce) to ...
2
votes
1answer
41 views

JWT Bearer Token flow for Community: Invalid Token

I'm implementing a JWT Bearer Token within Salesforce (Apex) so my customers can passwordlessly login to a community. Not sure if it is a good practice, but I done some research and saw some use cases ...
1
vote
0answers
31 views

Jenkins Http Request not returning token [closed]

I am trying to communicate through API from Jenkins HTTP request plugin, by passing the parameters in the body like below: "username": "xxx", "password": "xxx", "client_id": "xxx", "...
0
votes
1answer
61 views

Unauthorized Access using Named Credentials [duplicate]

I am using Named Credentials oAuth2.0 protocol to connect with Xero. I have setup Auth. Provider and Named Credential. Named Credential is also authenticated. I have followed the steps mentioned here ...
0
votes
0answers
21 views

Custom Auth Provider 503 Error

I have implemented a custom auth provider as part of the single sign on flow for Salesforce communities. Most of the flow is working correctly. I am able to get the authorization token, access token ...
2
votes
1answer
48 views

Impact of Freezing SF User - scheduled jobs, reports, oauth tokens

We are going to do one big release (deployment, configuration, data load) in our prod org and need to have some sort of maintenance window to prevent users from interacting with SF org. Freezing all ...
2
votes
1answer
43 views

For an OAuth 2.0 process, do you need multiple connected apps for each instanceUrl?

I am building an integration from my platform whereby you can export data to your Salesforce instance, having authenticated via OAuth 2.0. I'm experiencing the below when attempting to get an access ...
0
votes
0answers
28 views

Authenticate 3rd party in Salesforce [duplicate]

I have my server in Ruby on Rails. Now I wanted to build an app in the salesforce that will authenticate with my server using auth2.0. All org who have installed my app will have access to their ...
0
votes
0answers
10 views

Error while querying ThirdPartyAccountLink object

I have an external authprovider which our external users will login to Salesforce using that. I want to know total count of active ones who logged into Salesforce using that SSO Provider name. below ...
0
votes
2answers
67 views

Marketing Cloud - acquiring an access token

Here is my request for authorization token in Postman: https://mc8fqc9ydvcn66zzz-zzzzkl4f0.auth.marketingcloudapis.com/v2/token/?grant_type=client_credentials&client_id=yoxt7vzzzzzzzp5qe5zjr0ue&...
1
vote
1answer
98 views

Salesforce to Xero integration using Named Credentials by OAuth 2.0

I am trying to do the integration between Salesforce and Xero by using Named Credentials (Authentication Protocol is OAuth 2.0). I created an Auth provider - Then created Named credentials of OAuth 2....
1
vote
2answers
30 views

TouchId, FaceId login for mobile Apps

One customer is asking for having the Mobile App authentication for External users sites using Communities with FaceId and TouchId, I have tried "Implementing Screen Locking and PIN protection" in the ...
0
votes
0answers
9 views

SFDC SDK 7.3 OAuth Compliance for Biometric Login Implementation

SFDC SDK 7.2 is already in use to implement an App with Biometric Login. Upon authorization grant from Auth Server(SFDC), Access Token is to be used to login to the app and biometric login is ...
2
votes
1answer
65 views

Is it possible to programmatically change connectedApp settings in production?

Background: I have a requirement to make it so that an SFDC connected app defaults/is super easy to set to Admin Users are Pre-authorized instead of All users may self-authorize. This setting is ...
0
votes
0answers
71 views

Salesforce OpenID connect with Azure Errror - No_Oauth_Token: Access token was not returned

We are configuring Azure open ID as salesforce Auth provider to a community portal and attempting to log in results in the error: “No_Oauth_Token”. We have checked multiple times and it looks all good ...
2
votes
1answer
24 views

Bypassing Header Based Authentication

I am configuring a REST Hook between Salesforce and this marketing tool AutopilotHQ. Rather than having Salesforce continuously poll to find out when there is new information to trigger from, ...
2
votes
1answer
45 views

How can I use REST API through OAuth?

For test purposes, I'm trying to use some customer's REST API on Salesforce. I don't have any API-consuming code yet (I'm just using CURL, OAuthDebugger, et similia). I've tried the following this ...
0
votes
1answer
52 views

invalid_grant: expired access/refresh token with refresh token included in JSForce

I am trying to build a server that will populate Salesforce through a front end website using Express JS with JSForce library. However, every time the access token expired, it does not refresh by ...
2
votes
1answer
38 views

How do I get client Id and redirect URI from salesforce without having access to an sfdc org

I'm trying to understand OAuth flow by building a chrome extension. I need access to the user's org and the way to do that authorization is via a connected app. Well what do you need for a ...
0
votes
1answer
35 views

PHP OAuth 2.0 JWT Bearer Token Flow

I am trying to obtain a JWT Bearer Token from Salesforce. I am trying to follow their documentation but am however unsuccessful. https://help.salesforce.com/articleView?id=remoteaccess_oauth_jwt_flow....
0
votes
3answers
41 views

Add custom claims to OpenId JWT Token - Web Server Authentication flow

We are using Keycloak to generate OpenId tokens, now they want to use Salesforce Identity to do that, the thing is that the have some custom claims in the JWT token that we are not able to include in ...
0
votes
0answers
11 views

How to prevent salesforce mobile android app from handling oauth links

Currently on both my web and mobile app, when initiating oauth, android asks the user if they want the link to open in either chrome or the salesforce mobile app. If the user selects the latter, auth ...
5
votes
1answer
194 views

Authorize Apex Rest API call using an Azure token

I'm new to the OAuth concept in Salesforce and looking for some pointers for my use-case. I'm not even sure if I'm framing my question correctly, but I'm trying to understand if I can invoke an Apex ...
4
votes
1answer
84 views

Specifying an expiration date/time when creating a JWT

I have a connected app that I would like to connect to using a JWT flow using a bearer token. Using anonymous Apex I have: // The consumer key for a connected app of mine String iss = '<MY ...
0
votes
0answers
19 views

Refresh token in Username-Password OAuth Authentication Flow [duplicate]

I am implementing an Android app that talks to Salesforce community. I would like to get the following inputs from the experts here. In Username-Password OAuth Authentication Flow, we will get only ...
1
vote
1answer
42 views

Authorization of clients (VS Code, Data Loader)

To use the OAuth protocol, you need to create a connected app on Salesforce. Through consumer key and secret key it is possible to implement different oAuth flows. But how does it work with Visual ...
5
votes
1answer
151 views

“Decryption Exception” errors on Named Credential

I have callouts that use a Named Credential and a Custom Oauth2 Auth Provider fail with this error response: Invalid parameter value "[hidden]" for parameter "Decryption Exception" A similar ...
0
votes
0answers
48 views

Overriding Mobile SDK 7.3 login screen for React Native

we are doing a custom development of a mobile app connected to SF with a connected App. I was wondering if there's any way to override the default salesforce login screen that pops up and use a view ...
1
vote
0answers
16 views

OAuth Authentication for Community Customer User [duplicate]

I am trying to connect from Salesforce an unrelated Salesforce instance through a community user. I can successfully authenticate using Postman, however I am having a bit of trouble converting this ...
3
votes
1answer
86 views

Oauth2 redirect_uri_mismatch except that it matches exactly

So I created a new Connected App in Salesforce - in a sandbox environment. In the app's settings I enabled OAuth with Full access and set the Callback URI to https://test.mydomain.com/tools/...
0
votes
2answers
60 views

oAuth - how to acquire an access token from another org via an Apex callout

I want to actually connect to a salesforce environment in the background and retrieve information there. I don't want to be redirected anywhere with a token in the url. I want to be able to get the ...
2
votes
1answer
103 views

How to retrieve Apex 'webservice' WSDL using oauth access token?

My Connected App authenticates using the OAuth 2 Username/password flow, which gives an "access_token" that I can use for authenticating REST queries via the "Authorization" HTTP header as a bearer ...
0
votes
1answer
25 views

Explanations OAuth protocol Digging Deeper Documentation

In the documentation it says that "Apps that use OAuth can also directly authenticate and access Salesforce resources without a user’s presence". What does it mean?Is it not necessary create a ...
1
vote
1answer
186 views

What is “Sfdx Auth Url” attribute used for?

Till now, I have been working with SFDX orgs using JWT cert based auth auth:jwt:grantor authenticating using browser using auth:web:login I recently came across the --verbose attribute which gives ...
4
votes
1answer
87 views

Does Salesforce support PKCE validation in Web server flow?

In Salesforce OAuth2.0 Web Server flow, there is an option to not require a client key. But I am not sure whether it supports OAuth 2.0 RFC 7636: https://oauth.net/2/pkce/, which is the PKCE ...
0
votes
1answer
29 views

Can Protected Managed Package Custom Settings be used to store OAuth2.0 Credentials from a Custom Auth Provider?

Background: I have created a custom Auth. Provider in Salesforce to reach out to an authorization server that isn't on the default list of Provider Types. I used https://developer.salesforce.com/docs/...
2
votes
1answer
60 views

Overriding the final destination of the OAuth2.0 flow from a custom OAuth2.0 Auth provider

Background: I have created a custom Auth. Provider in Salesforce to reach out to an authorization server that isn't on the default list of Provider Types. I used https://developer.salesforce.com/docs/...
0
votes
0answers
67 views

Need help for test class for JWT Auth

I need to cover below class . It is 91% covered but giving NoDataFound public class JWTOAuth{ public static string getAccessToken( Salesforce_Org__c o){ Auth.JWT jwt = new Auth.JWT(); ...
0
votes
1answer
24 views

oauth2 token request failure with bad client_id

I'm submitting a curl command to get an oauth token and it fails with a bad client_id. What am I missing I setup an Auth. Provider and used MTest as mu consumer key and MRestTest as my Consumer ...
0
votes
0answers
38 views

OAuth 2.0 Web server flow without require secret - is that a better option than user-agent flow? [duplicate]

In connectedApp setting, there is an option called require secret for web-server flow. If I understand that correctly, if we choose that option, when using web-server flow, after authentication, the ...
1
vote
1answer
86 views

JWT Unsupported Grant Type when calling from node.js app but fine from Postman?

I am having some issues with my node.js app that I have been testing. This app is supposed to authenticate with my Salesforce Sandbox using a JWT in order to get a new access token. The token is ...
0
votes
0answers
16 views

Am getting Outh Error 1800 while trying to login to salesforce from external application

Am getting Oauth 1800 error when I create a developer account with region as United states , and when i create a developer account with India or Australia am able to successfully sign in from ...
1
vote
2answers
166 views

Ruby - Salesforce OAuth 2.0 JWT Bearer Token Flow - invalid assertion

I am following this document as I try to implement the Salesforce OAuth 2.0 JWT Bearer Token Flow. There are a number of steps involved and I have tried them over and over again but I keep getting {"...
0
votes
0answers
19 views

Managed Package and API Authentication

I am using Lightning and creating a managed package and want to pull in external data in JSON format from a REST API that I am developing. I want to have a button some where in the UI that when ...
0
votes
1answer
106 views

OAuth 2.0 User-Agent flow, why is it okay to keep the refresh token when it is considered unable to protect the secret

When I read the oauth 2.0 flows, the user-agent flow states itself to be used when the application is unable to protect the secret. But in the user-agent flow it is okay to have a refresh token ...
1
vote
1answer
80 views

Decode JWT received from /v2/authorize

I'm developing an app for SalesForce Marketing cloud. For the authentication I have a web page loaded as iframe in the salesforce mc; in this page the customer performs the login to my platform. ...