Questions tagged [oauth]

OAuth is an open, standard, protocol to allow users to securely authorize web, mobile and desktop applications to access web services on their behalf. Salesforce supports OAuth 1.0a and 2.0.

85 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
7
votes
0answers
243 views

Loading Static Resources When Accessing a Page WIth an OAuth Access Token

If you specify the 'web' scope for a connected app it's supposed to grant/provide access to Visualforce pages. I'm authenticating via the iOS mobile SDK and then attempting to use the access token I ...
4
votes
0answers
52 views

Lifetime of connected app record / tokens

With the recently announced plan to de-activate (and presumably at some point delete) inactive developer edition orgs, I've been wondering what's the lifetime of a connected app record created in a DE ...
4
votes
1answer
764 views

Returning Oauth token with REST API via PHP arrays when trying to send new contacts

In the salesforce REST API documentation, it tells how the system can give Oauth Tokens (https://code.exacttarget.com/apis-sdks/rest-api/v1/auth/requestToken.html ) But I don't seen any documentation ...
4
votes
2answers
107 views

Username-Password Flow OAuth unable to access web page

I can't find any documentation to suggest this would be a limitation, but using my access_token from a usernamepassword flow I can access api endpoints but not a url like instance.salesforce.com/id. ...
4
votes
1answer
378 views

possible to access REST API of another SF instance with portal user from scheduled class?

I have a scenario where I'd like a user of another SF instance to register in our portal, then have a scheduled class on their end reach out to a REST endpoint on our end. Upon reviewing the oAuth ...
4
votes
1answer
607 views

Authentication approach with Salesforce in Mobile App

Here is my case study: We are developing a mobile app. The mobile app interacts with two salesforce orgs i.e. Metadata org : Having all the customer metadata required by mobile app for each customer....
3
votes
0answers
314 views

Force.com REST API - Web Server OAuth Authentication Flow

Im building a multi tenant application where each client has their own subdomain. For example: clientA.myapp.com and clientB.myapp.com I want to allow clients to integrate our app with their ...
3
votes
0answers
282 views

400 error on username-password flow

I'm implementing a partner system to an existing username-password oauth flow for SalesForce, and I'm trying to get the c# code to work. I've been working with a standard WebRequest variant, which I'...
3
votes
0answers
376 views

Salesforce Marketing Cloud/Exact Target API Authorization Endpoint for OAuth Authorization Code Workflow?

Does anybody know it? Their documentation discusses getting a user token here and here, but that's not what I need. The documentation clearly states on these pages linked about that "it is ...
3
votes
0answers
224 views

Salesforce API - have auth token; can't make API call

I'm having the same issue as this user in this question, but the answer provided doesn't work in my. I can connect, I can retrieve a auth token, but when I immediately make a call with it it fails ...
3
votes
0answers
348 views

Auth. Providers Facebook Existing (community) User Linking

I'm currently adding a Facebook login to our customer onboarding process that we host through Salesforce. I have got it working for existing users already, if their Facebook email is the same as ...
3
votes
1answer
114 views

Share OAuth config between multiple connected apps?

I'm building an application that consists of several independent "Canvas" components, all of which are different views into the same application. At the moment it appears I'm required to configure a ...
2
votes
0answers
35 views

OpenID Connect single logout

I have a connected application (web site) that is using Salesforce as an authentication provider (OpenID Connect). And I'd like the logout on my site to work as a "single logout" - it should also log ...
2
votes
0answers
48 views

Errors with Web Server OAuth Implementation

I am trying to implement Web Server OAuth flow from one Salesforce Org to another. Following is the Class which contains the logic. I am hitting custom rest api to insert Accounts using the access ...
2
votes
0answers
162 views

Salesforce OAuth2 invalid_grant: user hasn't aproved this consumer on AWS

I have developed a client application that accesses Salesforce REST API through OAuth 2 using the Go programming language. Everything works fine locally: I have a correct token, client ID, client ...
2
votes
0answers
23 views

Can Social Logon be used directly from a native mobile app?

We have a Customer Community with Facebook and Google set up as Auth Providers. In addition, we have a mobile app that connects to Salesforce using OAuth towards this community. This all works fine. ...
2
votes
0answers
48 views

Decrypt challenge in Salesforce from external system in 2FA

We are integrating salesforce with external system. External system has two factor authentication process. We are calling first URL to get challenge. - Working fine. We need to decrypt challenge in ...
2
votes
1answer
355 views

Community login without redirecting user to Salesforce with SSO or OAuth

We are building a Drupal site for one of our customers. Our customer wants to use the Salesforce self-registration and community login features for authenticating their customers to the CMS. As far ...
2
votes
0answers
499 views

Connected App-Trusted IP Range for OAuth Web server flow

I am trying to understand the use of Trusted IP Range for OAuth Web server flow setting of a connected app but the documentation is not clear to me. Does it override profile level IP settings? How ...
2
votes
0answers
160 views

Canvas SDK and server side OAuth (.net)

I am attempting to connect our C# MVC application with Salesforce to use within Salesforce record pages (e.g. opportunity details) and a Visual force page. Using the Force.com-Toolkit-for-NET I can ...
2
votes
0answers
393 views

Auth.AuthToken.getAccessToken is returning a null value

So I have an Auth Provider setup through Microsoft Access Control Service that was created using this tutorial. Whenever I try and call Auth.AuthToken.getAccessToken('0xxx0000000000x','Microsoft ...
2
votes
0answers
211 views

Using OAuth 1.0 encoded requests for external web service calls Error: signature_invalid

Please help me. I have a salesforce requirement that necessitates a callout from Apex to an external web service that receives signed OAuth responses. I am getting oAuth_token successfully. But ...
2
votes
1answer
86 views

Social login redirect

This is my first contact with salesforce, so please don't get mad at my silly questions :) I am struggling to configure a login with facebook using salesforce. I went trough the example and I got it ...
2
votes
0answers
360 views

what does “invalid_grant” error with “inactive user” description mean?

The title is pretty much the whole question, I have seen the "invalid_grant" error in the Oauth2 flow alot of times and the description is always "expired access/refresh token" just like the webpage ...
2
votes
0answers
516 views

JSForce Login Issue

I am using Jforce to connect to my developer account using oAuth. But i am getting error. This XML file does not appear to have any style information associated with it. The document tree is shown ...
2
votes
0answers
476 views

Invalid token after OAuth on app in production, but not in development?

I'm having an issue where when I use an app in my developer's instance everything works fine. But when we create an exact duplicate of the app in our real production instance, the token's we are ...
2
votes
0answers
930 views

Sandbox, oAuth & My Domain issue

We have developed AppExchnage app and is used connected app to integrate 3rd party system with SFDC. This app worked great till one of our customer have asked to install it on their sandbox. 3rd party ...
2
votes
1answer
113 views

Maintaining session using web server oauth

I am using canvas app and have java code at backend. We are integrating using web server oauth. I am using my java code to retrieve access token first time now i need to maintain the session , how ...
2
votes
1answer
778 views

JSForce: Error invalid session id

Using JSForce, I create a new connection using the access and refresh token like so: new jsforce.Connection({ oauth2: { clientId: clintId, clientSecret: clientSecret, ...
2
votes
0answers
79 views

Using the REST API, how can I tell that a user has blocked OAuth access vs revoked OAuth access?

It seems that I get the same authentication error message the token is invalid. Is there a way I can tell the difference as the vendor? Note that I am not referring to an Apex app. My app is purely ...
2
votes
0answers
634 views

How to authorize users to use SAML2 bearer oauth flow?

I am new in the forum as a signed up user but have been lurking for a while. I have the following setup: a connected app with a certificate associated associated the system admin profile to the app ...
2
votes
1answer
53 views

Get a User's OAuth Connected Applications via API

Is there a way to get the list of oauth connected applications of a given user (of a set of users) via SOAP/REST API? Thanks, Uri
2
votes
0answers
178 views

How to call EverNote API in Salesforce (Apex)

I have a requirement for which I need to convert all the opportunities in to ENML and then upload it on EverNote. I have created the ENML. But how can I upload/submit the ENML on evernote? What is ...
1
vote
1answer
197 views

{“error”:“invalid_grant”,“error_description”:“authentication failure”}

Hi I am trying to connect one salesforce org to another but getting below error in response body while trying to get the access token using the username password flow in oauth. Please suggest what is ...
1
vote
0answers
32 views

Posting SAML assertion to get an OAuth token

I have 2 service providers, SP1 and SP2 and I have obtained my SAML response from IDP into SP1. Now, in order to connect SP1 and SP2 I am using the oauth SAML response from SP1 and posting it to oAuth ...
1
vote
1answer
93 views

Sandbox OAuth Error 1800 through VS Code, CLI, and MavensMate

I'm trying to sign into a sandbox org, but I'm getting an error when running through the OAuth flow: We can't authorize you because of an OAuth error. For more information, contact your Salesforce ...
1
vote
0answers
64 views

id_token not returned in JWT Bearer Token OAuth Flow

As per the JWT Bearer token documentation The id_token will be return if there is a pre-existing approval for the openid. I have existing approvals for openid for the user. Am I missing something in ...
1
vote
0answers
76 views

Google Login in Salesforce1 App Disallow Useragent iOS

We used to be able to use the mobile app for iOS without a problem. Now if we go to log in and click the Google Login button, the immediate message is a 403 disallowed_useragent message. Logging in ...
1
vote
0answers
101 views

[Talend SF Connection JWT]runtime exception https status 400-bad request message {“error”:“invalid_grant”,“error_description”:“audience is invalid”}

I am facing an error while trying to establish the Oauth connection (JWT) between talend ETL tool and salesforce : runtime exception https status 400-bad request message {"error":"invalid_grant","...
1
vote
0answers
73 views

How to delivery Salesforce API access in Managed Package when using Lightning Component

Trying to build managed package that can analyze metadata configuration, flow specifically. Building as Lightning Component. Looking for a solution to delivery a Named Credential capable of accessing ...
1
vote
0answers
444 views

OAuth Error 1800

I have created a connected app and added redirect URI of a Firefox Extension page. Im currently developing this extension. It gives this error: We can't authorize you because of an OAuth error. For ...
1
vote
0answers
185 views

cant make call to https://login.salesforce.com/services/oauth2/token from angular

im trying get acsess token in my angular app but i get 400 error bad request. from postman there is no problem and i get the token this is in my js code. i removed some info from my code here. ...
1
vote
0answers
38 views

Customizing an OAuth access token for app

I am setting up External Identity for authentication into a custom application. Provisioning access to various features within the application using custom object records that will be assigned to ...
1
vote
0answers
30 views

Getting an Error on Community When Trying to Work with Custom Auth. Provider

I've configured a community to work with custom Auth. Provider by selecting it on the manage community menu (Administration --> Login & Registration). After entering user name + password, it goes ...
1
vote
0answers
27 views

Can verification code emails be redirected or forwarded to another email address?

We have multiple users that login to the same Salesforce1 App company wide. When at a new site with a new WAN IP, the verification code prompt generates. Can that code be emailed to a different ...
1
vote
0answers
179 views

Community user impersonation - Single signon

we have a community portal setup and we have a third application running which uses this communication portal for single signon. That is for end users ..they login to third party application by using ...
1
vote
0answers
70 views

Can we use something other than a Salesforce User Account to access the REST API?

We're accessing the Salesforce REST API with one of our regular Salesforce user accounts. That use changed his password, which is a good thing, but that invalidated our OAuth token, which meant we had ...
1
vote
0answers
31 views

Can we OAuth without overwriting the user's current login?

We’re currently working on integrating our application with Salesforce as a canvas app and hit a snag. Our application uses OAuth to allows a single user to grant our app access to multiple orgs (...
1
vote
0answers
4k views

400 Bad Request on RestTemplate POST request to Salesforce Oauth

I am trying to send a POST request to https://test.salesforce.com/services/oauth2/token to retrieve the oauth access token. The response is 400 Bad Request with no info. Here's the (Java) client code: ...
1
vote
1answer
265 views

OAuth Token Management - Fuel SDK (PHP)

What are recommended best practices for reusing the OAuth token for the ExactTarget Fuel SDK? On my website once I get a valid OAuth token, I cache it for 15 minutes and use that same token for all ...