Questions tagged [oauth]

OAuth is an open, standard, protocol to allow users to securely authorize web, mobile and desktop applications to access web services on their behalf. Salesforce supports OAuth 1.0a and 2.0.

Filter by
Sorted by
Tagged with
5
votes
0answers
20 views

sfdx force:auth:jwt:grant failure user hasn't approved this consumer - cross machine

This is related to How to open a scratch org created in another machine but posed somewhat differently Given: DevHub with Connected App defined using a digital certificate Correct Oauth scopes ...
0
votes
0answers
14 views

Functionality Embedded Login explained

Salesforce provides the Embedded Login fuctionality which is pretty OK for some scenarios. But the issue is that it relates to user Third-Party Cookies, which will be restricted more and more in the ...
0
votes
0answers
26 views

JSforce not working on express [closed]

To give some context, I am a front end dev tasked with intergrating salesforce into a react app. This is a new learning curve for me as I am a SF newbie. I have been looking for a way to make ...
0
votes
0answers
25 views

invalid_grant: expired authorization code when using OAuth2 flow

I am using OAuth2 to authorize the user I generate the URL at the backend send the url to the frontend (which is in VUE ) which open it in the new window the callback url is one of the route of the ...
0
votes
0answers
24 views

POST API into new Netsuite Rest Web Services OAUTH - InvalidSignature [closed]

Looking for a bit of help on generating a Signature for Netsuite Rest Web Services. We've got everything working in Postman, now just trying to generate same details in Apex. We're currently getting ...
0
votes
1answer
67 views

Handling authentication when embedding salesforce visual page in external website

I'm trying to embed salesforce visualforce page in an external website using the iframe. I've handled the issues with iframe but one thing I couldn't able to solve is how we can handle the ...
0
votes
0answers
15 views

How do you do Canvas Authentication client-side for a Javascript application?

I am trying to build out a PoC of what will eventually be a nodeJS+React application that will be embedded in Salesforce via Canvas. I'd like to get the PoC up and running with just React. What would ...
3
votes
1answer
54 views

Adding extra parameters to Auth Provider URLs

Is it possible to add extra parameters to the auto generated SF URLs in Auth. Provider? To be more clear, here's an example: We have an Auth. Provider with an auto generated URL(let's say https://...
3
votes
2answers
114 views

oAuth - Introspection endpoint says a valid access token is inactive

I'm new to salesforce and I'm trying to obtain a access token with password grant, I can successfully obtain the access token: Request: POST /services/oauth2/token HTTP/1.1 Host: .....my....
0
votes
1answer
45 views

How to store OAuth credentials in Salesforce Securely [closed]

I have implemented a custom auth provider by following the steps from this help guide https://help.salesforce.com/articleView?id=sso_provider_plugin_custom.htm and the setup works as expected. Now ...
0
votes
1answer
38 views

How to do basic auth to acces external url and advoid System.HttpResponse[Status=Forbidden, StatusCode=403]

I have a basic auth which I have working with Postman but when I do this with apex I get an Forbidden error. The variables userKeyVal and userSecretVal are filled correctly, my url is correct and I ...
0
votes
0answers
11 views

SAP system wanted to connect with Salesforce using connected App with entering Users credentials(Username and Password) [duplicate]

Can you please share your thoughts on how SAP system to connect Salesforce using Salesforce created connected app(OAuth)information like (Consumer Key,Consumer Secret and only username not user's ...
1
vote
1answer
35 views

Error message when trying to access Workbench

I'm getting this error message when trying to log in to Workbench: OAUTH_APP_ACCESS_DENIED: user is not admin approved to access this app This is a recent issue as I have been able to access ...
1
vote
0answers
51 views

Don't receive refresh token after successful login via Oauth

I have a web app that performs the oauth authentication flow following this doc. After redirecting the user to the salesforce login page using this url : <a href="https://login.salesforce.com/...
0
votes
1answer
313 views

SFDX: Authorize an org error: listen EACCES: permission denied 127.0.0.1:1717

I have been using DX for quite some time. Authoring an org either through command palette or with a command in terminal had never been a problem [Command is like this: sfdx force:auth:web:login --...
0
votes
1answer
60 views

“ Invalid_grant : authentication error” loggin in workbench

I got this error loggin in workbench, after setting up a scratch org (it shows a strange custom domain but I red around forums that it's ok since it can be an old unused org). I went through the ...
0
votes
1answer
34 views

Acquiring an oAuth access token from an external service

I'm really new to Apex and coding in general, so I seem to get stuck while trying to retrieve an access token. I still can't quite figure out the logic between how to send the request and how to ...
0
votes
1answer
192 views

oauth infinite redirect loop during authorization

This problem has occurred in a few of our applications that use the same forms of salesforce oauth authentication. When you first navigate to mywebsite.com, it sends you to salesforce to login, once ...
0
votes
1answer
197 views

How to force logout an user session from Partner Community

I have a partner community where we have two auth providers. One is being Auth1 and other is Auth2. We had Auth1 in place for long time and as maintenance cost is getting higher, we have moved to ...
0
votes
0answers
73 views

Allowing connected app oauth to use salesforce azure ad login

I wants to use salesforce oauth using through connected app. But my salesforce login happening using azure ad login(open ID). Connected App (OAUTH) -> Salesforce -> Azure AD So Can you please ...
0
votes
1answer
31 views

How to prevent users to use non registered connected apps

There are many web applications that connect to Salesforce with OAuth without configure a connected app (e.g. onegraph). How can we prevent users to connect such an application?
0
votes
1answer
53 views

oAuth - 3rd party app accessing my org without a connected app

I'm trying to use Skyvia to integrate salesforce with third-party systems. When I create a new connection, I have the possibility of choosing OAuth as the type of authentication. But how can it work ...
1
vote
2answers
41 views

Salesforce with Alexa: Get Salesforce Endpoint dynamically

There is a Trailhead example for Salesforce and Alexa. In this example Alexa link account function is used. It only returns the access token, nothing more. Is it possible to call a static url with an ...
1
vote
1answer
38 views

Alternate VisualForce page for OAuth Web Server flow

I'm trying to determine if it's possible to have two different Visualforce login pages so that some external apps use one Visualforce page to authenticate users, while others use a different page. I ...
1
vote
1answer
161 views

How can I programmatically set a connected app to have permitted users be “Admin approved users are pre-authorized”?

Background: I am making a managed package and have a connected app that needs to have permitted users set to "Admin approved users are pre-authorized" for it to work correctly: It is a terrible ...
7
votes
1answer
276 views

OAuth Authorization Flow for AppExchange Packages

I'm trying to understand the tenant endpoint and credentials flow for the 'authorization code' grant type used by installed packages that are published on AppExchange. I have this flow working well ...
3
votes
1answer
295 views

Salesforce OAuth 2.0 JWT Bearer Token Flow - Token Expiration

I am performing Server-Server communication between Salesforce and a Portal I am developing. I implemented the JWT Flow as follows: Created connected app and digitally signed it with certificate ...
0
votes
0answers
204 views

CORS policy : No 'Access-Control-Allow-Origin' header is present on the requested resource

My requirement is that I want to expose my lightning component to an external website(HTML webpage) without user having to log in to salesforce. For this, as per this questions's answer., I have done ...
0
votes
0answers
19 views

Am getting Outh Error 1800 while trying to login to salesforce from external application

Am getting Oauth 1800 error when I create a developer account with region as United states , and when i create a developer account with India or Australia am able to successfully sign in from ...
-1
votes
1answer
47 views

Salesforce Data Loader OAuth not taking another email address

I am trying to log in to a production environment in Data Loader through OAuth and giving a custom domain, then it is taking my personal outlook account and directly giving an error without giving ...
-1
votes
1answer
130 views

How can I use OAUTH on Salesforce Live Agent REST API

We want to use OAUTH - userid/password flow to access salesforce live agent rest API. We have implemented this for other rest api provided by salesforce. However the live agent rest api are wide open ...
0
votes
0answers
51 views

Connected App / Canvas in Managed Package with dynamic endpoint

I am selling a Java App that customers are installing on their server and now build a Salesforce app (Managed package) to integrate it. This means The Salesforce App packages some Canvas elements to ...
2
votes
2answers
62 views

Which endpoints are supported for OAuth2 token authorization?

Documentation says that for OAuth2 token authorization URL like login.salesforce.com should be used For authorization: https://login.salesforce.com/services/oauth2/authorize For token requests: https:...
1
vote
1answer
566 views

Expired authorization code and Invalid Nonce errors

We recently launched a mobile app and we use Salesforce Identity Management. ie all customers have a Salesforce user record and authentication is done is Salesforce. After the launch, some users were ...
0
votes
1answer
357 views

Cannot list users - ERROR running force:user:list: Must pass a username and/or OAuth options when creating an AuthInfo instance

When I run sfdx force:user:list this is the error message I get: ERROR running force:user:list: Must pass a username and/or OAuth options when creating an AuthInfo instance. This issue came up ...
0
votes
1answer
289 views

JWT Bearer flow vs. Username+Password flow in server-to-server integration

Official documentation and some SFSE answers advise against the use of Username + Password flow (Resource Owner Password Credentials Grant in oauth). The JWT Bearer flow is also recommended as a ...
1
vote
1answer
280 views

Authorize a DevHub using SalesforceDX without password

I am working on SalesforceDx and I have to authorize my devhub by just using Username of the org I dont want to enter password. I have tried JWT token for authorization but it uses an OPEN SSl ...
0
votes
1answer
747 views

Persistant INVALID_AUTH_HEADER with curl on macos

I'm using curl to connect to a Salesforce org with OAuth (I'm following this tuto and get stuck at step 3): 1) Perform a User Agent OAuth request to get the session data below: { "access_token"...
1
vote
0answers
58 views

Posting SAML assertion to get an OAuth token

I have 2 service providers, SP1 and SP2 and I have obtained my SAML response from IDP into SP1. Now, in order to connect SP1 and SP2 I am using the oauth SAML response from SP1 and posting it to oAuth ...
1
vote
1answer
290 views

SAML bearer assertion flow for retrieving an OAuth token

I am using SAML assertion to retrieve an OAuth token and I am using a custom apex class to generate the SAML assertion. My IDP is set to send User's FederationIdentitfier in Subject (SAML Response Pic)...
2
votes
1answer
141 views

OpenID Connect single logout

I have a connected application (web site) that is using Salesforce as an authentication provider (OpenID Connect). And I'd like the logout on my site to work as a "single logout" - it should also log ...
1
vote
1answer
207 views

Sandbox OAuth Error 1800 through VS Code, CLI, and MavensMate

I'm trying to sign into a sandbox org, but I'm getting an error when running through the OAuth flow: We can't authorize you because of an OAuth error. For more information, contact your Salesforce ...
0
votes
0answers
57 views

I have the ClientID and ClientSecret, I receive the same error after multiple attempts

"https://developer.salesforce.com/docs/atlas.en-us.mc-apis.meta/mc-apis/error-handling.htm","errorcode":404,"message":"Not Found" Here is my request https://subdomain_name.auth.marketingcloudapis....
1
vote
5answers
8k views

Cannot connect a Salesforce org using Authorize an org in VS Code

Using VS Code, after I enter the command line "Authorize an org" I get redirected to Salesforce login and can successfully log in. However I then get the error "This site can't be reached" The URL ...
1
vote
1answer
287 views

Add a custom header property in JWT assertion for OAuth

How do I add additional header properties to my JWT using the JWTBearerTokenExchange Class? (https://developer.salesforce.com/docs/atlas.en-us.apexcode.meta/apexcode/...
0
votes
1answer
67 views

React.js GraphQL web app returning random null values

I'm working on a React.js web app that leverages GraphQL for accessing a combination of varying endpoints, including our org's SF data. My only issue is isolated to my Salesforce progress. In general, ...
2
votes
0answers
153 views

Errors with Web Server OAuth Implementation

I am trying to implement Web Server OAuth flow from one Salesforce Org to another. Following is the Class which contains the logic. I am hitting custom rest api to insert Accounts using the access ...
0
votes
0answers
267 views

Automatic login with Salesforce

I would really appreciate if anybody could guide me to achieve this requirement. A user has told me recently that in his company, the technology team has developed a desktop app whose main purpose is ...
0
votes
1answer
119 views

Token generation for Einstein Sentiment API

I am trying to implement the sentiment api but having issue while generating the access token. I have uploaded einstein_platform.pem file in Files in Salesforce. ContentVersion con = [SELECT Title ...
1
vote
0answers
118 views

id_token not returned in JWT Bearer Token OAuth Flow

As per the JWT Bearer token documentation The id_token will be return if there is a pre-existing approval for the openid. I have existing approvals for openid for the user. Am I missing something in ...

1
2 3 4 5 6