Questions tagged [oauth]

OAuth is an open, standard, protocol to allow users to securely authorize web, mobile and desktop applications to access web services on their behalf. Salesforce supports OAuth 1.0a and 2.0.

Filter by
Sorted by
Tagged with
2
votes
0answers
103 views

OpenID Connect single logout

I have a connected application (web site) that is using Salesforce as an authentication provider (OpenID Connect). And I'd like the logout on my site to work as a "single logout" - it should also log ...
3
votes
1answer
46 views

Adding extra parameters to Auth Provider URLs

Is it possible to add extra parameters to the auto generated SF URLs in Auth. Provider? To be more clear, here's an example: We have an Auth. Provider with an auto generated URL(let's say https://...
3
votes
2answers
90 views

oAuth - Introspection endpoint says a valid access token is inactive

I'm new to salesforce and I'm trying to obtain a access token with password grant, I can successfully obtain the access token: Request: POST /services/oauth2/token HTTP/1.1 Host: dpos--...
0
votes
1answer
37 views

How to store OAuth credentials in Salesforce Securely [closed]

I have implemented a custom auth provider by following the steps from this help guide https://help.salesforce.com/articleView?id=sso_provider_plugin_custom.htm and the setup works as expected. Now ...
0
votes
1answer
35 views

How to do basic auth to acces external url and advoid System.HttpResponse[Status=Forbidden, StatusCode=403]

I have a basic auth which I have working with Postman but when I do this with apex I get an Forbidden error. The variables userKeyVal and userSecretVal are filled correctly, my url is correct and I ...
0
votes
1answer
477 views

Salesforce OAuth redirect after success

I have implemented most of the Salesforce OAuth process (Web Server Flow outlined here) using a VF page to initiate the process. The VF page uses javascript in a command button to open a popup User ...
2
votes
1answer
902 views

JSForce: Error invalid session id

Using JSForce, I create a new connection using the access and refresh token like so: new jsforce.Connection({ oauth2: { clientId: clintId, clientSecret: clientSecret, ...
0
votes
0answers
9 views

SAP system wanted to connect with Salesforce using connected App with entering Users credentials(Username and Password) [duplicate]

Can you please share your thoughts on how SAP system to connect Salesforce using Salesforce created connected app(OAuth)information like (Consumer Key,Consumer Secret and only username not user's ...
3
votes
1answer
427 views

Community login without redirecting user to Salesforce with SSO or OAuth

We are building a Drupal site for one of our customers. Our customer wants to use the Salesforce self-registration and community login features for authenticating their customers to the CMS. As far ...
5
votes
1answer
833 views

Returning Oauth token with REST API via PHP arrays when trying to send new contacts

In the salesforce REST API documentation, it tells how the system can give Oauth Tokens (https://code.exacttarget.com/apis-sdks/rest-api/v1/auth/requestToken.html ) But I don't seen any documentation ...
1
vote
1answer
32 views

Error message when trying to access Workbench

I'm getting this error message when trying to log in to Workbench: OAUTH_APP_ACCESS_DENIED: user is not admin approved to access this app This is a recent issue as I have been able to access ...
4
votes
1answer
393 views

possible to access REST API of another SF instance with portal user from scheduled class?

I have a scenario where I'd like a user of another SF instance to register in our portal, then have a scheduled class on their end reach out to a REST endpoint on our end. Upon reviewing the oAuth ...
1
vote
0answers
49 views

Don't receive refresh token after successful login via Oauth

I have a web app that performs the oauth authentication flow following this doc. After redirecting the user to the salesforce login page using this url : <a href="https://login.salesforce.com/...
1
vote
5answers
7k views

Cannot connect a Salesforce org using Authorize an org in VS Code

Using VS Code, after I enter the command line "Authorize an org" I get redirected to Salesforce login and can successfully log in. However I then get the error "This site can't be reached" The URL ...
7
votes
2answers
3k views

OAuth 2.0 JWT Bearer Token Flow giving a user hasn't approved this consumer error

I have setup a connected app and want to use the OAuth JWT. Based on my understanding of the salesforce documentation only preauthorized client can use this flow to get an access token. I have ...
0
votes
2answers
44 views

Using Salesforce oauth to make calls to own account/app

We use salesforce in our website. I'm new to it, and still can't find a way to calls REST api to our own account without going long way of visiting oauth login page, granting access etc(oauth flow). ...
1
vote
1answer
36 views

Can we OAuth without overwriting the user's current login?

We’re currently working on integrating our application with Salesforce as a canvas app and hit a snag. Our application uses OAuth to allows a single user to grant our app access to multiple orgs (...
0
votes
1answer
57 views

“ Invalid_grant : authentication error” loggin in workbench

I got this error loggin in workbench, after setting up a scratch org (it shows a strange custom domain but I red around forums that it's ok since it can be an old unused org). I went through the ...
0
votes
1answer
219 views

SFDX: Authorize an org error: listen EACCES: permission denied 127.0.0.1:1717

I have been using DX for quite some time. Authoring an org either through command palette or with a command in terminal had never been a problem [Command is like this: sfdx force:auth:web:login --...
61
votes
2answers
24k views

Connected App - avoiding a limit on a number of issued tokens + token expiration

We have configured our web application to use OAuth2 with our SFDC Connected App. The connected app is configured to never expire the refresh token unless manually revoked. When an admin connects the ...
0
votes
1answer
34 views

Acquiring an oAuth access token from an external service

I'm really new to Apex and coding in general, so I seem to get stuck while trying to retrieve an access token. I still can't quite figure out the logic between how to send the request and how to ...
0
votes
1answer
137 views

oauth infinite redirect loop during authorization

This problem has occurred in a few of our applications that use the same forms of salesforce oauth authentication. When you first navigate to mywebsite.com, it sends you to salesforce to login, once ...
1
vote
2answers
713 views

Pass parameters through Redirect URI in oauth flow, to know sandbox or regular

I use the oauth flow to allow users to authorize my Salesforce app to access the API on their behalf. Depending on input in my app, I either prompt them with https://login.salesforce.com/services/...
4
votes
1answer
2k views

Username-Password OAuth Authentication for community users?

I have a native ios app and i want to login using the username password flow, From the POC i made i discovered that for community user, i dont get a security token which i was using while REST call to ...
0
votes
1answer
151 views

How to force logout an user session from Partner Community

I have a partner community where we have two auth providers. One is being Auth1 and other is Auth2. We had Auth1 in place for long time and as maintenance cost is getting higher, we have moved to ...
0
votes
1answer
97 views

Disable custom connected app from profile

I have a custom connected app that is used for OAuth purposes (outside of Salesforce). Therefore I don't need it to appear in the app launcher, unfortunately I see no way to remove it, at least for ...
0
votes
0answers
61 views

Allowing connected app oauth to use salesforce azure ad login

I wants to use salesforce oauth using through connected app. But my salesforce login happening using azure ad login(open ID). Connected App (OAUTH) -> Salesforce -> Azure AD So Can you please ...
0
votes
1answer
31 views

How to prevent users to use non registered connected apps

There are many web applications that connect to Salesforce with OAuth without configure a connected app (e.g. onegraph). How can we prevent users to connect such an application?
1
vote
1answer
144 views

Google Login in Salesforce1 App Disallow Useragent iOS

We used to be able to use the mobile app for iOS without a problem. Now if we go to log in and click the Google Login button, the immediate message is a 403 disallowed_useragent message. Logging in ...
0
votes
1answer
52 views

oAuth - 3rd party app accessing my org without a connected app

I'm trying to use Skyvia to integrate salesforce with third-party systems. When I create a new connection, I have the possibility of choosing OAuth as the type of authentication. But how can it work ...
1
vote
2answers
39 views

Salesforce with Alexa: Get Salesforce Endpoint dynamically

There is a Trailhead example for Salesforce and Alexa. In this example Alexa link account function is used. It only returns the access token, nothing more. Is it possible to call a static url with an ...
19
votes
4answers
15k views

Salesforce: Any API for getting user information?

I am trying to find a way to get the information about the salesforce enterprise user from his auth_token. I want to find the username, email address and role(admin/user) from the auth-token. ...
1
vote
1answer
37 views

Alternate VisualForce page for OAuth Web Server flow

I'm trying to determine if it's possible to have two different Visualforce login pages so that some external apps use one Visualforce page to authenticate users, while others use a different page. I ...
1
vote
1answer
129 views

How can I programmatically set a connected app to have permitted users be “Admin approved users are pre-authorized”?

Background: I am making a managed package and have a connected app that needs to have permitted users set to "Admin approved users are pre-authorized" for it to work correctly: It is a terrible ...
7
votes
1answer
252 views

OAuth Authorization Flow for AppExchange Packages

I'm trying to understand the tenant endpoint and credentials flow for the 'authorization code' grant type used by installed packages that are published on AppExchange. I have this flow working well ...
2
votes
1answer
230 views

Salesforce OAuth 2.0 JWT Bearer Token Flow - Token Expiration

I am performing Server-Server communication between Salesforce and a Portal I am developing. I implemented the JWT Flow as follows: Created connected app and digitally signed it with certificate ...
0
votes
0answers
170 views

CORS policy : No 'Access-Control-Allow-Origin' header is present on the requested resource

My requirement is that I want to expose my lightning component to an external website(HTML webpage) without user having to log in to salesforce. For this, as per this questions's answer., I have done ...
0
votes
0answers
19 views

Am getting Outh Error 1800 while trying to login to salesforce from external application

Am getting Oauth 1800 error when I create a developer account with region as United states , and when i create a developer account with India or Australia am able to successfully sign in from ...
-1
votes
1answer
46 views

Salesforce Data Loader OAuth not taking another email address

I am trying to log in to a production environment in Data Loader through OAuth and giving a custom domain, then it is taking my personal outlook account and directly giving an error without giving ...
8
votes
1answer
11k views

Why do I get 'PKIX path building failed' exception with my callout?

Error message :PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target Hello all please see the above ...
4
votes
3answers
2k views

REST OAuth connection for Bulk API queries

Is it possible to authenticate an OAuth app for the user and then make Bulk API queries on their behalf? The results are easily going to be more than 20k records each authenticated user. When I have ...
1
vote
0answers
152 views

When would a Client Application be unable to use the User-Agent OAuth Flow (but able to use Web Server OAuth Flow)?

A Client Secret is no longer required for Web Server OAuth Flow. This is not a new feature (Spring'17), but I have not given it much thought until now. "If a client application can’t securely store ...
-1
votes
1answer
118 views

How can I use OAUTH on Salesforce Live Agent REST API

We want to use OAUTH - userid/password flow to access salesforce live agent rest API. We have implemented this for other rest api provided by salesforce. However the live agent rest api are wide open ...
0
votes
0answers
46 views

Connected App / Canvas in Managed Package with dynamic endpoint

I am selling a Java App that customers are installing on their server and now build a Salesforce app (Managed package) to integrate it. This means The Salesforce App packages some Canvas elements to ...
2
votes
2answers
59 views

Which endpoints are supported for OAuth2 token authorization?

Documentation says that for OAuth2 token authorization URL like login.salesforce.com should be used For authorization: https://login.salesforce.com/services/oauth2/authorize For token requests: https:...
0
votes
0answers
43 views

Fire event using oauth

Switching from the generic endpoint to tenant endpoint is giving me issues injecting a contact into a journey. If I test the setup in postman everything works fine. Converting the 'old' method to the '...
3
votes
3answers
2k views

How do I retrieve the server and session id from the Salesforce iOS API?

I'm currently trying to hack in some functionality to download attachment data for an iOS Salesforce application. I'm going to do that using a direct HTTP request, but for that to work I need to pull ...
1
vote
1answer
481 views

Expired authorization code and Invalid Nonce errors

We recently launched a mobile app and we use Salesforce Identity Management. ie all customers have a Salesforce user record and authentication is done is Salesforce. After the launch, some users were ...
0
votes
1answer
349 views

Cannot list users - ERROR running force:user:list: Must pass a username and/or OAuth options when creating an AuthInfo instance

When I run sfdx force:user:list this is the error message I get: ERROR running force:user:list: Must pass a username and/or OAuth options when creating an AuthInfo instance. This issue came up ...
0
votes
1answer
677 views

Persistant INVALID_AUTH_HEADER with curl on macos

I'm using curl to connect to a Salesforce org with OAuth (I'm following this tuto and get stuck at step 3): 1) Perform a User Agent OAuth request to get the session data below: { "access_token"...

1
2 3 4 5 6