Questions tagged [oauth]

OAuth is an open, standard, protocol to allow users to securely authorize web, mobile and desktop applications to access web services on their behalf. Salesforce supports OAuth 1.0a and 2.0.

Filter by
Sorted by
Tagged with
8
votes
2answers
2k views

Using OAuth 1.0 encoded requests for external webservice calls

I have a business requirement that necessitates a callout from Apex to an external .NET based web service that receives signed OAuth responses. There is no built-in support for this in Apex, but ...
2
votes
0answers
176 views

Salesforce OAuth2 invalid_grant: user hasn't aproved this consumer on AWS

I have developed a client application that accesses Salesforce REST API through OAuth 2 using the Go programming language. Everything works fine locally: I have a correct token, client ID, client ...
1
vote
1answer
369 views

Salesforce calling external application using OAUTH

I need to call an external service FROM salesforce Authenticating against the External application is done via OAUTH so basically I need to write APEX code that uses HttpRequest and passes in the ...
0
votes
1answer
120 views

OAuth 2.0 Device Authentication Flow - invalid device code

I am trying to implement OAuth 2.0 Device Authentication Flow. In first step i received device code successfully. Then i have created JWT token using device code and and other details. Send it to ...
1
vote
1answer
921 views

SSL certificate problem: unable to get local issuer certificate, curl_errno 60

I'm trying to integrate PHP script with Salesforce by following the example on the link: http://developer.force.com/cookbook/recipe/interact-with-the-forcecom-rest-api-from-php But I get the error ...
2
votes
0answers
24 views

Can Social Logon be used directly from a native mobile app?

We have a Customer Community with Facebook and Google set up as Auth Providers. In addition, we have a mobile app that connects to Salesforce using OAuth towards this community. This all works fine. ...
11
votes
2answers
580 views

OAuth interactions: do they count as API calls?

OAuth token grants and token authorizations are human interactions that take place in the browser. And token refreshes happen to be machine interactions. Do any of the typical OAuth interactions count ...
3
votes
1answer
73 views

Is session duration guaranteed?

Let's assume that our session timeout value is set to the default 2 hours. The documentation defines this value as Length of time after which the system logs out inactive users. If the user is ...
2
votes
2answers
400 views

Where is the URL where I can Enable OAuth Settings?

I am trying to follow the directions here: https://help.salesforce.com/apex/HTViewHelpDoc?id=connected_app_create.htm I click "Setup" and I create a new app. But I do not see any link offering me ...
2
votes
0answers
49 views

Decrypt challenge in Salesforce from external system in 2FA

We are integrating salesforce with external system. External system has two factor authentication process. We are calling first URL to get challenge. - Working fine. We need to decrypt challenge in ...
0
votes
0answers
37 views

Disable custom connected app from profile

I have a custom connected app that is used for OAuth purposes (outside of Salesforce). Therefore I don't need it to appear in the app launcher, unfortunately I see no way to remove it, at least for ...
8
votes
1answer
5k views

Error using Session Id auth with cURL following REST documentation

Problem: trying to authenticate to a dev org using Session Id authentication and cURL fails when following the REST API Dev doc. The example in the doc provides the following, which fails (Quick Start ...
0
votes
0answers
45 views

How to consume OAuth 1.0 webservice in salesforce

I have another application which I need to call and they are using OAuth 1.0. now I am calling their system endpoint, I have client id and client secret only. Do I need to generate token also? ...
3
votes
1answer
289 views

How does the automatically created connected app works when I use workbench?

I've read this article but I'm still confused about what happens when I approved the access from workbench. The connected app "Workbench" seems automatically created in my org when I approve the ...
0
votes
1answer
41 views

OAuth with 3rd party providers

I'm trying to integrate Salesforce with Google apps in Apex. For this I need to do OAuth with google. However, I'm confused with what value should be given for redirect_uri to google. I can create a ...
0
votes
2answers
314 views

What is difference in Web Server and User-Agent OAuth Authentication Flow

I have just started learning Rest API from developer guide. I'm not able to understand the difference in Web Server and User-Agent flow, both seem to be same, the only difference in Web Server is ...
1
vote
1answer
619 views

Is there any way to generate Authorization Code programmatically

I've come in such a circumstances where I need to pass authorization code without oauth login. User will be already login in salesforce and will be clicking on external link and that external server ...
1
vote
2answers
984 views

oAuth 2 token Request Invalid

I have created a connected app in salesforce so that the external system can connect to our org. They are using oauth2 so i have set it up accordingly and shared the client key and client secret. ...
2
votes
1answer
476 views

Google OAuth and UI - is is possible to pass back the authorization code not in the URL?

Is it possible to use Google OAuth and have no UI ever? My thought is: save the account credentials and refresh token into a custom setting and keep calling that every time. So the flow would look ...
4
votes
1answer
385 views

Google OAuth and Authorization Code

I have a two part question but I will break it up into two separate posts. Hopefully the first question will answer the second...The first ask is: I am working through the Google OAuth flow and would ...
0
votes
2answers
207 views

Salesforce API Access without App-Register?

We have to design an application and retrieve data from salesforce. Therefore, I have to authenticate my web app to Salesforce to make API calls. As I read in the documentation, I need to define our ...
4
votes
2answers
3k views

Why Salesforce oAuth Username Password flow does not need a security token?

When using SOAP API login call, we need security token or the public IP should be white listed. Why not when we use the connected APP Username Password flow (UP flow)? If you compare the security ...
0
votes
0answers
94 views

Salesforce Oauth 2.0 JWT

I am getting below - {"error":"invalid_grant","error_description":"user hasn't approved this consumer"} Dev org To Dev Org, below are the connected app -
4
votes
3answers
39k views

Missing SOAP action header

Im trying to get the session ID of another user in the same org by sending the following request by using the data from my enterprise wsdl and its an developer edition. <?xml version="1.0" ...
3
votes
1answer
115 views

Share OAuth config between multiple connected apps?

I'm building an application that consists of several independent "Canvas" components, all of which are different views into the same application. At the moment it appears I'm required to configure a ...
0
votes
1answer
186 views

SSO - delegated/federated limitations with community

I'm looking into implementing SSO for customer community. I've been reading the documentation on SSO implementation using either delegated or federated authentication. I have not done SSO before so I'...
5
votes
4answers
4k views

Is there a way to get rid of Salesforce oAuth login page?

I am developing a salesforce mobile app. I want to create a customized login page to ask user to input username and password. I will use this username and password to call an external oauth service in ...
0
votes
1answer
266 views

Java - Creating BulkConnection object with Oauth token

I have successfully been able to create a bulk API connection with the following code that calls the SOAP auth endpoint: ConnectorConfig partnerConfig = new ConnectorConfig(); partnerConfig....
1
vote
0answers
77 views

How to delivery Salesforce API access in Managed Package when using Lightning Component

Trying to build managed package that can analyze metadata configuration, flow specifically. Building as Lightning Component. Looking for a solution to delivery a Named Credential capable of accessing ...
0
votes
0answers
170 views

Embed Visualforce Page into Native Mobile app as Hybrid page

We have developed a native iOS mobile app that connects to Salesforce, users login through this native app using OAuth user-agent flow and a connected App. This all works fine. We are now trying to ...
2
votes
0answers
291 views

Named Credentials not working with Twitter API [closed]

So I have set up a Named Credentials with information about my Twitter App. I know the authentication is working correctly becacause my named credential looks like this: And it says I am ...
1
vote
1answer
266 views

Persisting OAuth Token in Apex

So I've been working to persist a logged-in Users session without the user having to log back in. This would be done with the "OAuth 2.0 Refresh Token Flow". However, I'm having trouble mapping out ...
0
votes
1answer
987 views

Oauth Implementation [closed]

I need Oauth Implementation without User Credentials... using Connected App..Can Anyone Please help me out of this issue. I have created the following class but it is showing redirect uri mismatch ...
0
votes
0answers
41 views

Update a Record's Fields in Production Org from External Website w/o Salesforce Login

I have a form on my WordPress website that collects additional information from customers. I want this information added to an existing record of MyCustomObject. To do this, I will need to make a ...
0
votes
0answers
41 views

Can not get token back from OAuth callback URL using CurrentPage.parameters

Can not get token back from OAuth callback URL using CurrentPage.parameters We have a connected app for which the callback URL is a visualforce page. https://myapp.na59.visual.force.com/apex/...
0
votes
1answer
69 views

Oauth grant breaks when managed package is upgraded

We have a managed package that uses oauth both online and offline to interact with the Salesforce APIs on behalf of a user. When the user launches the managed package, they authorize the app. From ...
3
votes
2answers
2k views

How to refresh a token retrieved from the Auth.AuthToken class

A Salesforce instance is configured so that users can log in using OpenID Connect and their Google credentials. I am trying to access the token provisioned by the login via google to make callouts to ...
-1
votes
1answer
1k views

Invalid Client Id

Need to resolve some issue about the code which i have written. This is the error code: {"error":"invalid_client_id","error_description":"client identifier invalid"} remote site setting: https://...
1
vote
0answers
454 views

OAuth Error 1800

I have created a connected app and added redirect URI of a Firefox Extension page. Im currently developing this extension. It gives this error: We can't authorize you because of an OAuth error. For ...
2
votes
1answer
737 views

OAuth implementation in SOAP API (C#) [closed]

I would like help how I can append Soap Header with following header in C#. Currently we are passing user credentials in the header. I need a help how we can replace with FuelOauth node in C#? As per ...
0
votes
0answers
38 views

Why is Okta continually reauthenticating from Salesforce CPQ?

We just implemented Salesforce CPQ in Production and found that every time a user does anything that requires a call out to the server that CPQ is on... Okta wants to re-authenticate each time, which ...
0
votes
1answer
102 views

Failed authentication using auth code [closed]

I am trying to get access_token using authenticate method of nforce. I am doing everything right, but it still gives, Error: invalid_grant - authentication failure. Here's my code: var nforce = ...
2
votes
1answer
610 views

Java Desktop App To Login Salesforce

Could someone please guide us how can we implement the auth flow for our app to be able to login to any Salesforce org and not be tied up to a specific org ? I am interested to implement same ...
5
votes
1answer
141 views

Storing OAuth Credentials

I have the following issue and need an advice on how to approach it. I connect to a third party system which generates a JWT token. The problem is that the token expires every 15 minutes and I'am not ...
3
votes
0answers
319 views

Force.com REST API - Web Server OAuth Authentication Flow

Im building a multi tenant application where each client has their own subdomain. For example: clientA.myapp.com and clientB.myapp.com I want to allow clients to integrate our app with their ...
1
vote
0answers
185 views

Community user impersonation - Single signon

we have a community portal setup and we have a third application running which uses this communication portal for single signon. That is for end users ..they login to third party application by using ...
7
votes
1answer
2k views

OAuth 2.0 JWT Bearer Token Flow giving a user hasn't approved this consumer error

I have setup a connected app and want to use the OAuth JWT. Based on my understanding of the salesforce documentation only preauthorized client can use this flow to get an access token. I have ...
0
votes
1answer
425 views

Quickbooks and Salesforce Authentication OAuth Errpr

I am doing an integration of Quickbooks and Salesforce as 3-rd party solutions do not satisfy my requirements. I created Quickbooks online developer account and have an app and Customer Key and ...
0
votes
1answer
783 views

Outh authenticating with curl, but not with C# client

First, I make a curl call using the following format... curl -v https://login.salesforce.com/services/oauth2/token -d "grant_type=password" -d "client_id=xxx" -d "client_secret=xxx" -d "username=xxx" ...
1
vote
0answers
192 views

cant make call to https://login.salesforce.com/services/oauth2/token from angular

im trying get acsess token in my angular app but i get 400 error bad request. from postman there is no problem and i get the token this is in my js code. i removed some info from my code here. ...