Questions tagged [oauth]

OAuth is an open, standard, protocol to allow users to securely authorize web, mobile and desktop applications to access web services on their behalf. Salesforce supports OAuth 1.0a and 2.0.

Filter by
Sorted by
Tagged with
0
votes
0answers
22 views

Setting up MyTrailHead subdomain results in Auth Provider error No_OAuth_Token

I am trying to set up a MyTrailhead subdomain on a sandbox org as mentioned here: https://help.salesforce.com/s/articleView?id=sf.mth_set_up_your_mth_subdomain_and_namespace.htm&type=5 My user is ...
0
votes
1answer
35 views

Is there an active Salesforce OAuth outage this morning?

It appears that multiple services were unable to oauth to salesforce this morning. I'm curious if anyone else saw this in their systems. We're not sure what's happening, it's not a credentials issue. ...
0
votes
0answers
36 views

OAuth login not returning to redirect uri

I have configured our salesforce sandbox as an OIDC provider in an AWS Cognito user pool. Sometimes when logging in this way, the user is redirected to salesforce after logging in rather than back to ...
5
votes
1answer
88 views

Is there a security hole in Salesforce's documentation?

I was looking at Salesforce's documentation for implementing an OAuth callback and I noticed they are accepting a "sfdc_community_url" from the client, which should normally only ever be a ...
-1
votes
1answer
728 views

Enforce OAuth Scope for Lightning Apps [closed]

How to find if any of lightning apps in my org uses oauth. Can anyone please guide me with this.
0
votes
1answer
31 views

How to get instance URL using OAuth?

Is there a way to get the user instance URL using the API? Or any other way? I am using OAuth to get the user token.
1
vote
1answer
127 views

Seamless experience between website and Salesforce community site - one login? [closed]

We have a requirement to allow a seamless experience from our main company website to our Salesforce community site. Basically, someone can login to our company website and be able to click a link ...
0
votes
1answer
15 views

Should Authenticated Lighting Out App Not Run As Authenticated User Instead of Guest User?

I have a Lighting Out App hosted on a website and have been using this for read-only actions for sometime via an unauthenticated Community endpoint. This has worked out well. I now have a requirement ...
0
votes
1answer
61 views

Salesforce oAuth JWT Integration

We have provided salesforce self signed certificate to external system for oAuth JWT integration with salesforce. when they hit salesforce they get the below error What does this error mean and how to ...
1
vote
1answer
278 views

Access-Control-Allow-Origin Header Authentication Issue

I was trying to call OAuth from our website but it gives an error Access to XMLHttpRequest at 'https://.salesforce.com/services/oauth2/token' from origin 'https://***.com.ph' has been blocked by CORS ...
1
vote
0answers
47 views

JWT authentication parameter error

I am currently working on the project that I am going to integrate the application of my company and salesforce. In my case, it seemed that using the JWT for authentication is better. So, I wanted to ...
0
votes
0answers
83 views

connection to salesforce with curl, no response

As a followup of windows curl authentication error, i'm doing the tutorial on https://trailhead.salesforce.com/content/learn/modules/apex_integration_services/apex_integration_webservices?trail_id=...
1
vote
1answer
188 views

windows curl authentication error

I'm doin a tutorial o REST connections to Salesforce, and in the Curl connection, i keep having an authentication error. URL: https://trailhead.salesforce.com/content/learn/modules/...
2
votes
2answers
128 views

SessionID access vulnerability found when using Metadata API

Salesforce is performing manual security review in our package. They have found SessionID access Vulnerability in one of our file where we are using Metadata API to grant permissions on profile and ...
2
votes
1answer
61 views

How to integrate the user interface api with an existing project?

I am trying to implement a form in my react app that allows users to submit data to salesforce using the UI API. From following the documentation I have created a connected app with a callback url and ...
0
votes
1answer
32 views

Does the authentication with sfdx force:auth:device:login expire?

I am using sfdx to pull some data from salesforce on my desktop. Eventually I will have to put this on the server. Just wondering how long after the intial login would I have to login again? Is there ...
1
vote
1answer
42 views

Can not install OAuth showing as already installed, Api user is getting error as blocked by Admin

The user cannot access the connected app to the Sf Sandbox. It throws an error "OAUTH_APP_BLOCKED&error_description=this+app+is+blocked+by+admin" in the URL, any idea how to solve ? I ...
3
votes
1answer
40 views

Locking Down OAuth App Access in our Salesforce Org

I am looking to control Salesforce OAuth Application Access so it requires admin approval prior to being connected. Current Issue All employees at our organization have OAuth Access to Salesforce. ...
0
votes
0answers
40 views

Authentication ways for salesforce to salesforce connection [duplicate]

My question is a generic one, so i am sure someone will flag it, but i am hoping i can receive some helpful directions. I have 2 salesforce org - Org1, Org2. I build a rest API in Org2. Now i need to ...
0
votes
0answers
79 views

Getting an OAuth 1800 error when logging into Salesforce from Salesforce Mobile SDK on Android

We have been getting an OAuth 1800 error for the past week or so in our Android app. We are using the Salesforce Mobile SDK to manage our OAuth login flow. This error comes after the user has tapped ...
2
votes
0answers
102 views

Open Id Connect Account Linking

For the OpenId Connect pros out there: Regarding the RegistrationHandler Interface in Salesforce. I have tried searching online for insight but I am having difficulty finding a specific answer for two ...
0
votes
0answers
52 views

Salesforce to Azure AD named credential failing after access token expires

Sf azure:Refresh token exchange to renew access token process (not working) I am facing an issue where I have a named credential configured in Salesforce using auth provider (using openid connect for ...
7
votes
3answers
1k views

SFDX: Authorize an Org hangs after login attempt

All, I am on a Windows 10 laptop with the latest patches and updates from Microsoft Version 10.0.18363. When I attempt to Authorize an Org it opens Google Chrome Version 88.0.4324.190 (Official Build)...
0
votes
0answers
92 views

Making OAuth Connected Apps work if current Admin User gets inactivated

In our Production instance we have deactivated a System Administrator and while clearing all dependencies we have found a lot of "OAuth Connected Apps" under his user account. Our ...
3
votes
3answers
623 views

sfdx force:auth:web:login – how to get it to work under Linux Mint?

Can't connect any org under Linux Mint via sfdx force:auth:web:login Neither via sfdx force:auth:web:login -r https://test.salesforce.com -a foo nor sfdx force:auth:web:login -r https://foo.my....
0
votes
0answers
156 views

How to call Mobile SDK oauth.authenticate() for a custom community login page?

When logging in with a custom community login page, calling oauth.authenticate() does not resolve for the mobile version (React Native for iOS/Android) of my connected app. Salesforce's docs for ...
2
votes
1answer
194 views

SFDX force:user:list : meaning of output fields

When I issue the command sfdx force:user:list --targetusername user@example.com --json I get the response: { "status": 0, "result": [ { "defaultMarker": &...
1
vote
1answer
199 views

PCKE flow Salesforce for OAuth 2.0

I am using PKCE ( proof key for code exchange ) flow in salesforce and trying to authenticate but getting below error { "error": "invalid_grant", "error_description": &...
0
votes
1answer
77 views

Best authentication flow to use for Rest API without interacting or login to salesforce application?

We have web application that need to read & write data to Salesforce. For that, Web application have to authenticate with Salesforce and get access token. I refer all authentication flow mentioned ...
0
votes
2answers
252 views

OAuth2 and Client ID/secret with endpoint users

I'm new with using OAuth2 and want to use it to allow endpoint users to be authenticated with their accounts using LDAP. While the authentication process works, I see that you must send the client ID ...
0
votes
1answer
101 views

How to find if user is authenticating a Production or Sandbox when processing auth code received on Callback url?

I am working on a nodejs app using jsforce to authenticate users their Salesforce org with nodejs app and this is how it works at high level: User launches nodejs app and login screen is shown with ...
1
vote
1answer
145 views

For Authorization Code with PKCE. In Salesforce Which OAuth Flows Support this?

I have a requirement to implement an oAuth 2.0 Auth Service with PKCE when accessing Salesforce. I was looking to find out which Salesforce OAuth2.0 Flows support this. I wondered if PKCE is only ...
10
votes
1answer
1k views

Custom REST controller to access Auth.AuthToken.getAccessToken returning null

Following on from a previous question: How to access OAuth Token stored in NamedCredential using Apex for use in other third party application I've created a custom REST endpoint which proxies ...
1
vote
0answers
65 views

Per User Authentication for External Service

As part of my use case, I need to integrate different external sources from Salesforce . All the authentication has to be per-user and this whole thing needs to be part of managed package. Now the few ...
0
votes
1answer
118 views

Authentication in Lightning Out by passing Session Id

In below VF page <apex:page showHeader="false" sidebar="false" cache="false" standardStylesheets="false"> <apex:includeLightning /> &...
0
votes
1answer
864 views

OAUTH_APP_BLOCKED | this app is blocked by admin

I am trying to integrate http://salesloft.com/ with my salesforce production instance via OAUTH. When I try to login to production using my valid credentials (I an system admin), salesloft see ...
0
votes
2answers
421 views

What is the difference between RelayState and redirect_uri?

I believe RelayState is for deep links after authentication and redirect_uri is where you send a user after they are authenticated. I could be wrong through. I have not found any documentation ...
0
votes
1answer
385 views

Get Permanent Authorization Code for Salesforce API [duplicate]

I am new to Salesforce integration.I have a web application and want to post user data to SalesForce account.The examples available for this purpose required SalesForce login when try to get ...
1
vote
0answers
68 views

Is our "Identity Server" a Good Use Case for Named Credentials and if so, how should I use Named Credentials Instead?

We have a collection of microservices hosted on Azure. In order to access these, we must first get a token from what's been described as the "identity server". I can use this code to get the ...
0
votes
3answers
1k views

How to see the setup of an OAuth Connected App

I am trying to figure out the setup of the integration with an external system. When I go into the user account being used as the integration user account I see the name of the application in the ...
0
votes
0answers
102 views

Ant validation/deployment errors using sessionId

I have a weird problem with Ant setup on CI. I have a script that fetches access token using JWT. The token is retrieved successfully, and when I want to use it with Ant deployment (switching in ant ...
0
votes
0answers
200 views

Calling Marketing Cloud APIs from C# via FuelSDK

In am trying to get an access token to call Salesforce Marketing Api through FuelSDK the code is: NameValueCollection parameters = new NameValueCollection(); parameters.Add("clientId"...
7
votes
0answers
432 views

sfdx force:auth:jwt:grant failure user hasn't approved this consumer - cross machine

This is related to How to open a scratch org created in another machine but posed somewhat differently Given: DevHub with Connected App defined using a digital certificate Correct Oauth scopes ...
1
vote
0answers
267 views

invalid_grant: expired authorization code when using OAuth2 flow

I am using OAuth2 to authorize the user I generate the URL at the backend send the url to the frontend (which is in VUE ) which open it in the new window the callback url is one of the route of the ...
0
votes
1answer
207 views

Handling authentication when embedding salesforce visual page in external website

I'm trying to embed salesforce visualforce page in an external website using the iframe. I've handled the issues with iframe but one thing I couldn't able to solve is how we can handle the ...
1
vote
0answers
41 views

How do you do Canvas Authentication client-side for a Javascript application?

I am trying to build out a PoC of what will eventually be a nodeJS+React application that will be embedded in Salesforce via Canvas. I'd like to get the PoC up and running with just React. What would ...
3
votes
1answer
139 views

Adding extra parameters to Auth Provider URLs

Is it possible to add extra parameters to the auto generated SF URLs in Auth. Provider? To be more clear, here's an example: We have an Auth. Provider with an auto generated URL(let's say https://...
4
votes
2answers
1k views

oAuth - Introspection endpoint says a valid access token is inactive

I'm new to salesforce and I'm trying to obtain a access token with password grant, I can successfully obtain the access token: Request: POST /services/oauth2/token HTTP/1.1 Host: .....my....
0
votes
1answer
305 views

How to store OAuth credentials in Salesforce Securely [closed]

I have implemented a custom auth provider by following the steps from this help guide https://help.salesforce.com/articleView?id=sso_provider_plugin_custom.htm and the setup works as expected. Now ...
0
votes
1answer
220 views

How to do basic auth to acces external url and advoid System.HttpResponse[Status=Forbidden, StatusCode=403]

I have a basic auth which I have working with Postman but when I do this with apex I get an Forbidden error. The variables userKeyVal and userSecretVal are filled correctly, my url is correct and I ...

1
2 3 4 5
7