Questions tagged [oauth]

OAuth is an open, standard, protocol to allow users to securely authorize web, mobile and desktop applications to access web services on their behalf. Salesforce supports OAuth 1.0a and 2.0.

0
votes
0answers
316 views

Issue whie generating auth signature in salesforce

I am facing an issue while generation Auth signature in salesforce. I tried to test the API from Postman and it works well with key and token. Even when I change the Authorization Header in Apex to ...
2
votes
1answer
380 views

Using the OAuth JWT flow with guest users in a Lightning Community

We're using the JWT flow to retrieve session IDs for the current user in a Lightning Community, for use in code running outside of Salesforce. In particular, we use that session ID to run SOSL queries ...
8
votes
1answer
25k views

What is the use of setting OAuth Callback URL as https://login.salesforce.com/services/oauth2/success?

I'm using Salesforce developer account and trying to obtain OAuth access token using curl and it returns 500 Server Error giving the message specified in [1]. Used curl command is curl -v -H "Content-...
2
votes
1answer
1k views

Difference between Authentication and Identity Provider

Question What is the difference between an authentication provider and an identity provider. Can Salesforce be the authentication and identity provider at the same time?
0
votes
2answers
410 views

Connect my salesforce instance to Xero using xero public application [closed]

I am trying to connect my salesforce instance to Xero. For now, I successfully connect my salesforce instance to xero using private application. But what I want at the moment is to connect to xero ...
2
votes
1answer
317 views

Maintaining session on external website using Canvas App

We are using OAuth web server flow. We need to know what is the best practice for maintaining session state within the external website. We do not want to use client side coding.
4
votes
1answer
128 views

Tie web server oauth to user session in my canvas app

I'm trying to figure out how to allow my users to login to my app using only Salesforce. I think I want to use the "web server oauth flow" and follow the directions in the solution here: https://...
4
votes
1answer
729 views

One machine getting “unknown_error” during password OAuth flow — works elsewhere

We have a Connected App set up in Salesforce. I'm attempting to use the username-password OAuth flow via curl. The request looks like this: curl -v https://login.salesforce.com/services/oauth2/token -...
5
votes
1answer
1k views

Named Credentials: How to Start OAuth flow?

I'm using Named Credentials with OAuth authentication. When calling a method on the endpoint, my Apex app receives back the status that the token needs to be refreshed. How do I tell Salesforce to ...
2
votes
1answer
172 views

Salesforce OAuth Flow locale?

Trying to authenticate to a Salesforce community org (External Identity License) from an external application using OpenID / OAuth 2.0. Can the OAuth flow accept a language parameter in the header or ...
3
votes
1answer
140 views

What is the value of using an OAuth flow for your own external systems

I'd like to begin by saying that I'm not talking about systems outside of a given company. I understand how OAuth is important for an application like workbench, where you don't know who the people ...
5
votes
1answer
317 views

Metadata API: where is the Connected App / OAuth policies / Permitted Users setting?

Salesforce.com setup screen has, in "Administer" section -> "Manage Apps" menu -> "Connected Apps" -> edit app page, a setting called "Permitted Users". This setting allows the portal administrator to ...
7
votes
3answers
235 views

Security Review Oauth Callback “Insecure Storage of Sensitive Data”

I'm getting dinged in the security review for passing my package namespace prefix back in the state parameter of the OAuth callback. https://login.salesforce.com/services/oauth2/authorize?...
1
vote
0answers
28 views

Getting an Error on Community When Trying to Work with Custom Auth. Provider

I've configured a community to work with custom Auth. Provider by selecting it on the manage community menu (Administration --> Login & Registration). After entering user name + password, it goes ...
0
votes
0answers
20 views

OAuth response is different when called from apex and browser

I am doing a basic OAuth, I am getting 2 different errors when I try calling api from browser and from my apex code. When the api is called from the browser it requires username and password for ...
8
votes
1answer
1k views

OAuth within an iframe in salesforce

We are an ISV org and building out a new 'Text an Agent' feature. However the initial OAuth page is not being displayed in the iframe. In the picture below highlighted in the yellow box is the ...
0
votes
1answer
1k views

Unable to retrieve context in canvas app when authenticating with oauth

I’m having trouble authenticating my canvas app using oauth2. This is despite being able to authenticate and connect via other means. The following is my problem in detail… I’ve configured a ...
2
votes
0answers
176 views

How to call EverNote API in Salesforce (Apex)

I have a requirement for which I need to convert all the opportunities in to ENML and then upload it on EverNote. I have created the ENML. But how can I upload/submit the ENML on evernote? What is ...
2
votes
0answers
203 views

Using OAuth 1.0 encoded requests for external web service calls Error: signature_invalid

Please help me. I have a salesforce requirement that necessitates a callout from Apex to an external web service that receives signed OAuth responses. I am getting oAuth_token successfully. But ...
5
votes
1answer
3k views

Authentication Failure when submitting Authorization Code in OAuth Web-Server Flow

I am trying to test the Webserver OAuth as described here I can get the authorization code successfully by opening https://login.salesforce.com/services/oauth2/authorize?response_type=code&...
2
votes
2answers
469 views

Simplest way to call Apex class from external web server?

My use case is similar to Web-to-Lead: we collect user data, then add it to salesforce as new lead. I would like to upgrade to the API for higher reliability and fine-grained control. I believe I can ...
2
votes
1answer
116 views

Does Salesforce support OAuth 1.0

Does anyone know if Salesforce supports OAuth 1.0 ? Our current solution is based on OAuth 1.0 and in the last week we started getting some issue creating such connection. Any feedback will help, ...
6
votes
1answer
876 views

Server to Server JWT Authentication Certificate management

I'm writing an application to sync some data from a service to salesforce and back. I'm working with a developer account and so far I was able to implement the bulk of the needed functionality merely ...
0
votes
0answers
226 views

Error oauth_problem when trying to Connect to Xero using method POST

Good day everyone, I am trying to connect to Xero using Salesforce Apex. I've found this link Apex for Xero and find it very useful. Everything is working well when I use PUT and GET method. The ...
3
votes
1answer
6k views

(400) - Bad Request when requesting auth token using Wordpress

We're using some house-built wordpress plugins to create emails in SFMC from wordpress content. The original plugin used the Fuel SDK, which from what I can tell, does not support remote sending, only ...
0
votes
0answers
381 views

Avaya Communicator web is not working

We use Avaya communicator web to run our call center. When I open Avaya web extension (Google chrome) and click on login through Salesforce credential and login. I got an error message: “License ...
1
vote
1answer
318 views

Canvas Signed Request vs OAuth flow [closed]

What are the compelling reasons to choose one approach over the other? Is OAuth flow more secure than the Signed Request flow or is OAuth preferable only to have the external app invoke Salesforce via ...
2
votes
0answers
157 views

Canvas SDK and server side OAuth (.net)

I am attempting to connect our C# MVC application with Salesforce to use within Salesforce record pages (e.g. opportunity details) and a Visual force page. Using the Force.com-Toolkit-for-NET I can ...
1
vote
1answer
287 views

Automated testing of Salesforce Oauth flow breaking by “verify your identity in salesforce” process

I don't have the rep to comment on this question, so I'll have to add my own. I want to automate testing of the SF Oauth server auth flow. I can go through it manually, and everything works, but when ...
7
votes
0answers
242 views

Loading Static Resources When Accessing a Page WIth an OAuth Access Token

If you specify the 'web' scope for a connected app it's supposed to grant/provide access to Visualforce pages. I'm authenticating via the iOS mobile SDK and then attempting to use the access token I ...
0
votes
1answer
131 views

Oauth call to webservice

I am trying to call this web service via a wordpress plugin: https://na25.salesforce.com/services/apexrest/echosign_dev1/template/load/a1t31500002HmjV?email=VAR Adobe said I need to have a valid ...
3
votes
0answers
371 views

Salesforce Marketing Cloud/Exact Target API Authorization Endpoint for OAuth Authorization Code Workflow?

Does anybody know it? Their documentation discusses getting a user token here and here, but that's not what I need. The documentation clearly states on these pages linked about that "it is ...
5
votes
1answer
58 views

Building a connected app without a production instance to store oAuth keys

I cannot find any reliable advice on the best approach to on oAuth secret keys when you do not have a production license. Background - I am creating an application that the community can use for free ...
4
votes
0answers
52 views

Lifetime of connected app record / tokens

With the recently announced plan to de-activate (and presumably at some point delete) inactive developer edition orgs, I've been wondering what's the lifetime of a connected app record created in a DE ...
1
vote
0answers
27 views

Can verification code emails be redirected or forwarded to another email address?

We have multiple users that login to the same Salesforce1 App company wide. When at a new site with a new WAN IP, the verification code prompt generates. Can that code be emailed to a different ...
2
votes
1answer
437 views

Username/Password Auth flow using nforce with nodejs not working after Spring `16 upgrade

We have an app that is designed to run on a Heroku server that is creating new records in salesforce and also listening to streaming API topics to update our other datastore with changes in those ...
18
votes
3answers
13k views

Salesforce: Any API for getting user information?

I am trying to find a way to get the information about the salesforce enterprise user from his auth_token. I want to find the username, email address and role(admin/user) from the auth-token. ...
2
votes
0answers
388 views

Auth.AuthToken.getAccessToken is returning a null value

So I have an Auth Provider setup through Microsoft Access Control Service that was created using this tutorial. Whenever I try and call Auth.AuthToken.getAccessToken('0xxx0000000000x','Microsoft ...
2
votes
2answers
537 views

JWT Oauth flow Confusion

I am having trouble getting the hang of the JWT Oauth flow and how it exactly works. Is a user supposed to enter their username on your website, which you then generate the JWT on your server and then ...
1
vote
0answers
69 views

Can we use something other than a Salesforce User Account to access the REST API?

We're accessing the Salesforce REST API with one of our regular Salesforce user accounts. That use changed his password, which is a good thing, but that invalidated our OAuth token, which meant we had ...
2
votes
1answer
84 views

Social login redirect

This is my first contact with salesforce, so please don't get mad at my silly questions :) I am struggling to configure a login with facebook using salesforce. I went trough the example and I got it ...
3
votes
1answer
68 views

Canvas app oauth with Partner Users post Winter 2016

I have a Force.com Canvas component inside an ApexHTML page, and it works just fine for regular user licenses, and prior to the Winter 2016 release, it worked fine for Partner level licenses (...
2
votes
1answer
868 views

OAuth signature generation

I have some code generating OAuth signature and sending request to NetSuite. I reviewed all the parameters I send to NetSuite with their developers and they told me that I have some issue with ...
1
vote
1answer
331 views

error=invalid_client_id in Android native app

i get the following error when logging out of my native android app that i built with Salesforce Mobile SDK: error=invalid_client_id&error_description=client%20identifier%20invalid This results ...
2
votes
0answers
351 views

what does “invalid_grant” error with “inactive user” description mean?

The title is pretty much the whole question, I have seen the "invalid_grant" error in the Oauth2 flow alot of times and the description is always "expired access/refresh token" just like the webpage ...
1
vote
1answer
2k views

java desktop example user agent flow OAuth

We would want to use the user agent flow for our desktop application that we connect to Salesforce via the REST API. Does anyone have somewhere a working java example of this or point me in the good ...
6
votes
3answers
3k views

Remote Access Apps (Production & Sandbox support)

A Remote Access record has a Client ID (key), Consumer Secret and Callback URL. To my knowledge, the proper callback URL for Salesforce is https://login.salesforce.com/services/oauth2/success. ...
1
vote
1answer
120 views

Options to save external oauth tokens in salesforce

Feels like a general question, but thought to put in discussion. Need to connect to an external system from salesforce and Oauth flow is ok. First though to store access_token, refresh_token, etc. in ...
1
vote
1answer
50 views

How do I create a new version of my Connected App?

I just joined a company that is working on a Connected App in Salesforce. The previous programmer set up the Connected App. He is no longer with our company. I am changing the app. I need to change ...
2
votes
0answers
508 views

JSForce Login Issue

I am using Jforce to connect to my developer account using oAuth. But i am getting error. This XML file does not appear to have any style information associated with it. The document tree is shown ...