Questions tagged [open-id-connect]
OpenID Connect (OIDC) is an open authentication protocol that works on top of the OAuth 2.0 framework. OIDC allows Salesforce users to log in via single sign-on (SSO) to access relying party sites using OpenID Providers (OPs) to authenticate their identities.
72
questions
0
votes
0
answers
69
views
Single Logout (SLO) via OpenID Connect
We use an external identity provider to verify credentials with SSO via OpenID Connect to Salesforce Experience Cloud as the Relying Party. After the the person logs out from Site A, he should be ...
- 17
0
votes
1
answer
270
views
UserInfo: protecting access token (GET vs POST)
I've noticed when using the official Postman collection, the parameters for any methods have to be put as parameters in the URL, otherwise the status code received is 400.
I've tried debugging it, so ...
- 186
1
vote
0
answers
172
views
How to retrieve id_token from APEX OIDC Auth Provider
We are using Azure as Identity Provider and did the OIDC Setup. Configured Auth.Provider with Azure Credentials. We were able to generate the Access token from the Auth.RegistrationHandler, but we ...
3
votes
1
answer
108
views
Remote ID limit is 128 characters
I have implemented an auth provider using OpenId Connect. But when I am trying to test the connection, I am getting this error - We can’t log you in because of the following error.
Remote_Id_Length: ...
- 31
1
vote
0
answers
174
views
Is there a way to shorten/override the stateToPropagate parameter from AuthProviderPluginClass methods?
Following the Apex structure of AuthProviderPluginClass:
getCustomMetadataType()
Returns the custom metadata type API name for a custom OAuth-based authentication provider for single sign-on to ...
- 1,251
3
votes
0
answers
112
views
Is single sign-on for self-registering Digital Experience users possible?
We have a Digital Experience that includes self-registration logic that, when completed correctly, goes ahead and creates the necessary Contact and User resulting in the welcome email being sent. The ...
- 135k
0
votes
0
answers
107
views
Retrieving User-Level OKTA Tokens for Apex Callouts
I have users who log into Salesforce with OKTA SSO.
I want to use that same session/token to then make requests from Apex to cloud services with that user's authorization.
The services that receive ...
- 2,039
0
votes
0
answers
222
views
Salesforce community as IDP not working when using custom login page
I've to use Salesforce customer community as IdP for one of my external portal(SP) which is built on Angular framework. We're trying to use web server Oauth flow where grant type is authorization ...
- 1,107
0
votes
1
answer
217
views
Is Salesforce supporting JIT (just in time provisionning) over OpenID
We want to use OpenId SSO for our Salesforce Community Users provisionning
and I was wondering if Salesforce supports JIT (just in time provisionning) over OpenID (contact + account + user creation ...
- 15
0
votes
0
answers
115
views
How can I get the Salesforce IAM to generate an OIDC compliant id_token on login?
We use Salesforce as our CRM.
However, there are aspects of our customer data that sits in external systems, that we need to use to augment the data presented on the CRM to our users.
We can access ...
- 1
1
vote
1
answer
1k
views
Login into Salesforce community from external website using openid connect
I need to create a link/button to login to salesforce community from external web application. My requirement is external web app needs to be the IDP and OpenId connect should be used as provider type....
- 11
2
votes
1
answer
154
views
How often does Salesforce change the keys at https://login.salesforce.com/id/keys?
How often does Salesforce change the keys change at https://login.salesforce.com/id/keys ?
Context
A client wants to verify the JWT signature generated for Salesforce's OpenID Connect token
However, ...
- 2,112
-1
votes
2
answers
895
views
How to resolve "You can’t delete this auth provider as an authentication method because your org or Experience Cloud site is currently using it"?
How can Auth. Providers be removed from Experience Cloud sites?
When I attempt to delete my OpenID Auth. Provider in my Sandbox, I am receiving the following error:
You can’t delete this auth ...
- 1
-2
votes
1
answer
497
views
Salesforce Single Logout (SLO) configuration with multiple relying party
In one of the Salesforce implementation I am working on, a single Connected App is being used for Single-Sign-On (Community users) for multiple relying parties (using OpenId protocol). SSO is working ...
- 771
2
votes
1
answer
265
views
How to set Custom Message when throwing Exception from RegistrationHandler
I successfully integrated an Open Id connector(via Auth. Provider) with our Salesforce environment, we can log in successfully. But sometimes you should not get access because you don't have the right ...
- 228
1
vote
1
answer
233
views
How to add nonce & state to OpenID based Named Credential
I'm working on an integration using a named credential with an OpenID auth. provider. I'm getting a nonce_is_missing response when running the authentication flow (during save of the named credential)....
- 4,378
0
votes
1
answer
135
views
Remote_Id_Length: Remote ID limit is 128 characters
Does anyone know if there is a plan to increase the length of the identifier field to match the OpenId specs? Configuring an Auth. Provider using eIDAS (https://en.wikipedia.org/wiki/EIDAS) as the ...
- 1,035
0
votes
1
answer
663
views
OpenID Connect AWS Cognito - ERROR: No_OpenId_Response
Overview
Currently using AWS Cognito User Pools as Identity Provider using OpenID Connect for logging in a Salesforce Community.
I'm currently getting a similar issue with this post OpenID Connect - ...
- 1,099
1
vote
0
answers
40
views
Lock custom attributes of an connected app in subscriber organization
I have a connected app (openid connect) that is configured to include custom attributes in the id token. The connected app defines custom attributes (only salesforce standard fields like $Organization....
- 443
0
votes
1
answer
194
views
How to save bearer token received from OpenID
Use case
We are trying to implement a openID based authentication flow with Salesforce as the service provider.
Post the successful authentication of a user we need to pass the bearer token received ...
- 1
2
votes
1
answer
1k
views
Salesforce Registration Handler Interface Logic
In Salesforce, when configuring an Auth. Provider, we can create and customize a Registration Handler Class implementing this interface
there are two methods that need to be implemented:
global User ...
- 1,361
2
votes
1
answer
584
views
Open Id Connect Account Linking
For the OpenId Connect pros out there:
Regarding the RegistrationHandler Interface in Salesforce. I have tried searching online for insight but I am having difficulty finding a specific answer for two ...
- 1,361
4
votes
0
answers
751
views
How to retrieve a current user's OpenID Connect ID token via apex?
Question:
Is there any method for retrieving the current user's OpenId Connect (OIDC) Id Token via apex?
Background Context / Goal:
My goal is to set up Single logout for a salesforce community that ...
- 341
2
votes
0
answers
677
views
Single Logout (SLO) for Salesforce Community using OIDC and Okta
Background Context & Goal:
Our end goal is to allow users to log in and log out of a salesforce community using okta credentials (via an openid auth. provider).
When customers logout of the ...
- 341
0
votes
2
answers
470
views
Using MultiStaticResourceCalloutMock [duplicate]
I am working on a class that makes a callout to a third party API. The third party API needs to be authenticated with a OpenID Connect Auth token. So, in my class, I am making a callout to the OpenID ...
- 537
0
votes
0
answers
179
views
How to access JWT in registration handler using Auth provider (open id)
In our org we have an open Id auth provider setup that works fine along with the registration handler. The only issue is we are receiving only the email currently from the provider in the auth....
- 21
3
votes
1
answer
1k
views
Salesforce as an OpenID Connect provider with Azure B2C as a Relying Party [closed]
I am working on a prototype to do federated authentication through Azure AD (AAD) B2C. I have successfully linked my prototype to a separate Azure AD tenant using OpenID Connect and have it working. ...
- 33
0
votes
1
answer
406
views
Salesforce Marketing Cloud SSO setting with OpenID Connect
I'm trying to set up Marketing cloud Single-sign-on. I'm not allowed to use SAML.
I'll need to config the SSO via Open Id Connect.
Is there anyone can give me some idea how to do it?
Just quick ...
- 13
1
vote
1
answer
2k
views
Post-logout redirect in OpenID Connect
When I log into my application with Salesforce as OpenID Connect Provider (OP), I am able to do so. But, when I try and log out of my application, I am logged out of Salesforce and then redirected to ...
0
votes
1
answer
167
views
AuthToken using Open Id Connect
We use a third party provider for SSO using OpenId Connect. We use the accessToken for the logged in user when making API calls for user session validation.
When we do an Auth.AuthToken.getAccessToken(...
- 155
3
votes
0
answers
335
views
Including SSO in a managed package
We have a Salesforce Managed Package, and we'd like to use it to provide access to a non-Salesforce service (in this case Tableau). The ISVForce Guide indicates that you can package SAML SSO config in ...
- 2,132
0
votes
0
answers
130
views
ID Token from OpenId Connect
We are using OpenId Connect for SSO into a Community with an external Identity Provider. It is easy to get the Access Token returned via AuthToken.getAccessToken.
Is there any way get the ID Token (...
- 41
2
votes
0
answers
3k
views
OpenID error: No_Oauth_Token unauthorized_client
I am following this doc to implement an external authentication provider.
So far I was able to be redirected to their site, authenticate there and be sent back to SF. However, when I am sent back to ...
- 5,236
1
vote
1
answer
685
views
OpenID connect is not returning EMail id, Address and Phone number from Salesforce
I am working on the Implementation of Salesforce as an identity provider using OpenId Connect authentication method.
I am using Auth0 to test this. I have mentioned Scope in Auth0 - id openid profile ...
- 69
1
vote
0
answers
75
views
Salesforce iOS Remote Hybrid SDK works incorrect with SSO
We're using Salesforce iOS Remote Hybrid SDK in our app, version 7.1.2, that is shared for different clients, and it works ok with simple oAuth2 flow.
However, started from Spring 2020 release, it's ...
- 11
2
votes
1
answer
3k
views
OpenID Connect - ID Token vs Access Token
I have setup a connected app with the "openid" scope. Using the web server flow, my callback is able to get the Open-ID JWT from "id_token", generated by Salesforce. My API has no problem validating ...
- 123
1
vote
1
answer
3k
views
How to force logout an user session from Partner Community
I have a partner community where we have two auth providers. One is being Auth1 and other is Auth2. We had Auth1 in place for long time and as maintenance cost is getting higher, we have moved to ...
- 131
1
vote
3
answers
2k
views
Add custom claims to OpenID Connect id token - Web Server Authentication flow
We are using Keycloak to generate OpenID Connect id tokens, now they want to use Salesforce Identity to do that. We have some custom claims in the id token returned by Keycloak that we are not able to ...
- 101
0
votes
1
answer
165
views
Can we avoid navigating to Azure Ad login screen when we configure SSO with Azure AD as ID provider
I have to configure Single Sign using Azure AD for our salesforce community as Identity provider and Salesforce being the service provider, I want to use Open id Connect.
I want check with the forum ...
- 73
3
votes
1
answer
895
views
Apex callout to an OpenID Connect endpoint protected by PKCE code challenge
I'm trying to write Apex code that'll call an external API. The API is using OpenID Connect for authentication, meaning I'll have to first give consent in order to get an authorization code, then ...
1
vote
0
answers
87
views
OAuth Flow required every day. Otherwise Callout fails with 401
In a customer org, Api calls are made using a NamedCredential using an OpenIdConnect AuthProvider. I didn't configure this but my own code fails with 401 Unauthorized. When I going to the ...
- 37.3k
1
vote
1
answer
2k
views
OpenID Connect - adding custom attributes (claims) to id token
I'm having trouble getting a custom claim attribute to come through in the id_token. I've got the scope set to openid and I've added the custom attribute to the Connected App (tenantId). I also tried ...
- 330
3
votes
2
answers
640
views
OpenID Connect single logout
I have a connected application (web site) that is using Salesforce as an authentication provider (OpenID Connect). And I'd like the logout on my site to work as a "single logout" - it should also log ...
- 41
0
votes
1
answer
210
views
Salesforce1 Mobile SSO with OpenID Connect, possible?
Reading through the SSO possibilities, I found nothing related to SalesforceApp SSO with the OpenID Connect
I got documentation related only to implementation with SAML
Is is possible by any chance ...
0
votes
2
answers
177
views
Error while logging into salesforce using Google Oauth
We have our Org connected with google using open-id configuration. When User tries to log in to Salesforce using Google, the system checks for the user's gmail id in slaesforce user profile and if it ...
- 141
1
vote
0
answers
85
views
Setting up an external OIDC auth provider with Salesforce
I have always integrated a SAML IDP with Salesforce and I'm trying OIDC now.
I have created a Salesforce OIDC app in my IDP. I took the clientID and clientSecret, and then created a Auth. Provider in ...
- 11
0
votes
1
answer
436
views
OpenId access token does not work for rest api
I want to use OpenId for Salesforce authentication.
I have done the following:
created an auth provider (like in this tutorial: https://help.salesforce.com/articleView?id=sso_provider_sfdc.htm&...
- 37
1
vote
0
answers
275
views
id_token not returned in JWT Bearer Token OAuth Flow
As per the JWT Bearer token documentation The id_token will be return if there is a pre-existing approval for the openid.
I have existing approvals for openid for the user. Am I missing something in ...
- 11
0
votes
1
answer
2k
views
Redirect to Authentication Provider Page instead of salesforce login page
I have created an open id connection between external authentication provider and salesforce. Now the requirement is when my domail url is entered in browser, it has to redirect to authentication ...
- 141
0
votes
1
answer
3k
views
Users need to login using External Authentication Provider [duplicate]
I have a requirement where users need to log in to salesforce using external authentication provider. The configuration in Open-id authentication. I have created the connection in Auth.Providers along ...
- 141