Questions tagged [open-id-connect]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
-1
votes
2answers
35 views

How to resolve "You can’t delete this auth provider as an authentication method because your org or Experience Cloud site is currently using it"?

How can Auth. Providers be removed from Experience Cloud sites? When I attempt to delete my OpenID Auth. Provider in my Sandbox, I am receiving the following error: You can’t delete this auth ...
0
votes
0answers
32 views

Custom claims and OpenID Connect Auth. Provider

Is it possible to return a non-standard claim value in the Open ID Connect Auth. Provider in Salesforce? I set up an Auth. Provider using Open ID Connect in Salesforce, and I have set up a User Info ...
-2
votes
1answer
38 views

Salesforce Single Logout (SLO) configuration with multiple relying party

In one of the Salesforce implementation I am working on, a single Connected App is being used for Single-Sign-On (Community users) for multiple relying parties (using OpenId protocol). SSO is working ...
1
vote
0answers
22 views

How to set Custom Message when throwing Exception from RegistrationHandler

I successfully integrated an Open Id connector(via Auth. Provider) with our Salesforce environment, we can log in successfully. But sometimes you should not get access because you don't have the right ...
0
votes
1answer
33 views

How to add nonce & state to OpenID based Named Credential

I'm working on an integration using a named credential with an OpenID auth. provider. I'm getting a nonce_is_missing response when running the authentication flow (during save of the named credential)....
0
votes
1answer
30 views

Remote_Id_Length: Remote ID limit is 128 characters

Does anyone know if there is a plan to increase the length of the identifier field to match the OpenId specs? Configuring an Auth. Provider using eIDAS (https://en.wikipedia.org/wiki/EIDAS) as the ...
0
votes
1answer
119 views

OpenID Connect AWS Cognito - ERROR: No_OpenId_Response

Overview Currently using AWS Cognito User Pools as Identity Provider using OpenID Connect for logging in a Salesforce Community. I'm currently getting a similar issue with this post OpenID Connect - ...
1
vote
0answers
29 views

Lock custom attributes of an connected app in subscriber organization

I have a connected app (openid connect) that is configured to include custom attributes in the id token. The connected app defines custom attributes (only salesforce standard fields like $Organization....
0
votes
1answer
50 views

How to save bearer token received from OpenID

Use case We are trying to implement a openID based authentication flow with Salesforce as the service provider. Post the successful authentication of a user we need to pass the bearer token received ...
0
votes
1answer
89 views

Salesforce Registration Handler Interface Logic

In Salesforce, when configuring an Auth. Provider, we can create and customize a Registration Handler Class implementing this interface there are two methods that need to be implemented: global User ...
2
votes
0answers
124 views

Open Id Connect Account Linking

For the OpenId Connect pros out there: Regarding the RegistrationHandler Interface in Salesforce. I have tried searching online for insight but I am having difficulty finding a specific answer for two ...
0
votes
0answers
58 views

External Data Source Named Principal - Will an OAuth 2.0 Auth Provider eventually require another login?

I am setting up an External Data Source to OData, using a Named Credential that is set up as "Microsoft Access Control Service" to call Azure Active Directory. The External Data Source is ...
2
votes
0answers
204 views

How to retrieve a current user's OpenID Connect ID token via apex?

Question: Is there any method for retrieving the current user's OpenId Connect (OIDC) Id Token via apex? Background Context / Goal: My goal is to set up Single logout for a salesforce community that ...
1
vote
0answers
254 views

Single Logout (SLO) for Salesforce Community using OIDC and Okta

Background Context & Goal: Our end goal is to allow users to log in and log out of a salesforce community using okta credentials (via an openid auth. provider). When customers logout of the ...
0
votes
2answers
78 views

Using MultiStaticResourceCalloutMock [duplicate]

I am working on a class that makes a callout to a third party API. The third party API needs to be authenticated with a OpenID Connect Auth token. So, in my class, I am making a callout to the OpenID ...
0
votes
0answers
67 views

How to access JWT in registration handler using Auth provider (open id)

In our org we have an open Id auth provider setup that works fine along with the registration handler. The only issue is we are receiving only the email currently from the provider in the auth....
3
votes
1answer
473 views

Salesforce as an OpenID Connect provider with Azure B2C as a Relying Party [closed]

I am working on a prototype to do federated authentication through Azure AD (AAD) B2C. I have successfully linked my prototype to a separate Azure AD tenant using OpenID Connect and have it working. ...
0
votes
1answer
174 views

Salesforce Marketing Cloud SSO setting with OpenID Connect

I'm trying to set up Marketing cloud Single-sign-on. I'm not allowed to use SAML. I'll need to config the SSO via Open Id Connect. Is there anyone can give me some idea how to do it? Just quick ...
1
vote
1answer
766 views

Post-logout redirect in OpenID Connect

When I log into my application with Salesforce as OpenID Connect Provider (OP), I am able to do so. But, when I try and log out of my application, I am logged out of Salesforce and then redirected to ...
0
votes
1answer
45 views

AuthToken using Open Id Connect

We use a third party provider for SSO using OpenId Connect. We use the accessToken for the logged in user when making API calls for user session validation. When we do an Auth.AuthToken.getAccessToken(...
3
votes
0answers
173 views

Including SSO in a managed package

We have a Salesforce Managed Package, and we'd like to use it to provide access to a non-Salesforce service (in this case Tableau). The ISVForce Guide indicates that you can package SAML SSO config in ...
0
votes
0answers
52 views

ID Token from OpenId Connect

We are using OpenId Connect for SSO into a Community with an external Identity Provider. It is easy to get the Access Token returned via AuthToken.getAccessToken. Is there any way get the ID Token (...
2
votes
0answers
1k views

OpenID error: No_Oauth_Token unauthorized_client

I am following this doc to implement an external authentication provider. So far I was able to be redirected to their site, authenticate there and be sent back to SF. However, when I am sent back to ...
1
vote
1answer
200 views

OpenID connect is not returning EMail id, Address and Phone number from Salesforce

I am working on the Implementation of Salesforce as an identity provider using OpenId Connect authentication method. I am using Auth0 to test this. I have mentioned Scope in Auth0 - id openid profile ...
1
vote
0answers
49 views

Salesforce iOS Remote Hybrid SDK works incorrect with SSO

We're using Salesforce iOS Remote Hybrid SDK in our app, version 7.1.2, that is shared for different clients, and it works ok with simple oAuth2 flow. However, started from Spring 2020 release, it's ...
0
votes
1answer
2k views

OpenID Connect - ID Token vs Access Token

I have setup a connected app with the "openid" scope. Using the web server flow, my callback is able to get the Open-ID JWT from "id_token", generated by Salesforce. My API has no problem validating ...
1
vote
1answer
1k views

How to force logout an user session from Partner Community

I have a partner community where we have two auth providers. One is being Auth1 and other is Auth2. We had Auth1 in place for long time and as maintenance cost is getting higher, we have moved to ...
0
votes
3answers
2k views

Add custom claims to OpenID Connect id token - Web Server Authentication flow

We are using Keycloak to generate OpenID Connect id tokens, now they want to use Salesforce Identity to do that. We have some custom claims in the id token returned by Keycloak that we are not able to ...
0
votes
1answer
71 views

Can we avoid navigating to Azure Ad login screen when we configure SSO with Azure AD as ID provider

I have to configure Single Sign using Azure AD for our salesforce community as Identity provider and Salesforce being the service provider, I want to use Open id Connect. I want check with the forum ...
3
votes
1answer
529 views

Apex callout to an OpenID Connect endpoint protected by PKCE code challenge

I'm trying to write Apex code that'll call an external API. The API is using OpenID Connect for authentication, meaning I'll have to first give consent in order to get an authorization code, then ...
1
vote
0answers
53 views

OAuth Flow required every day. Otherwise Callout fails with 401

In a customer org, Api calls are made using a NamedCredential using an OpenIdConnect AuthProvider. I didn't configure this but my own code fails with 401 Unauthorized. When I going to the ...
1
vote
1answer
987 views

OpenID Connect - adding custom attributes (claims) to id token

I'm having trouble getting a custom claim attribute to come through in the id_token. I've got the scope set to openid and I've added the custom attribute to the Connected App (tenantId). I also tried ...
2
votes
1answer
339 views

OpenID Connect single logout

I have a connected application (web site) that is using Salesforce as an authentication provider (OpenID Connect). And I'd like the logout on my site to work as a "single logout" - it should also log ...
0
votes
1answer
164 views

Salesforce1 Mobile SSO with OpenID Connect, possible?

Reading through the SSO possibilities, I found nothing related to SalesforceApp SSO with the OpenID Connect I got documentation related only to implementation with SAML Is is possible by any chance ...
0
votes
2answers
87 views

Error while logging into salesforce using Google Oauth

We have our Org connected with google using open-id configuration. When User tries to log in to Salesforce using Google, the system checks for the user's gmail id in slaesforce user profile and if it ...
1
vote
0answers
73 views

Setting up an external OIDC auth provider with Salesforce

I have always integrated a SAML IDP with Salesforce and I'm trying OIDC now. I have created a Salesforce OIDC app in my IDP. I took the clientID and clientSecret, and then created a Auth. Provider in ...
0
votes
1answer
324 views

OpenId access token does not work for rest api

I want to use OpenId for Salesforce authentication. I have done the following: created an auth provider (like in this tutorial: https://help.salesforce.com/articleView?id=sso_provider_sfdc.htm&...
1
vote
0answers
183 views

id_token not returned in JWT Bearer Token OAuth Flow

As per the JWT Bearer token documentation The id_token will be return if there is a pre-existing approval for the openid. I have existing approvals for openid for the user. Am I missing something in ...
0
votes
1answer
928 views

Redirect to Authentication Provider Page instead of salesforce login page

I have created an open id connection between external authentication provider and salesforce. Now the requirement is when my domail url is entered in browser, it has to redirect to authentication ...
0
votes
1answer
2k views

Users need to login using External Authentication Provider [duplicate]

I have a requirement where users need to log in to salesforce using external authentication provider. The configuration in Open-id authentication. I have created the connection in Auth.Providers along ...
4
votes
3answers
3k views

Oauth 2.0 Client Credentials - Custom Auth Provider

I am building out a Salesforce Connect customer adapter to translate rest responses into external data objects. To authenticate these requests, I would like to use Oauth 2.0's client credentials flow ...
2
votes
0answers
143 views

OpenID Single Sign On - Change Authentication Flow

I have an Auth Provider created with OpenID and everything is working good. But, I would like to change the Authentication Flow from web server to user-agent Source: https://help.salesforce.com/...
1
vote
1answer
291 views

Where is the certificate for Open Id Connected App in Salesforce?

I have created a connected app and used scope -"Allow access to your unique identifier (openid)". I am expecting a "id token" which would be a JWT token. But where from would I get the digital ...
1
vote
0answers
520 views

Missing unique Third party identifier

I am trying to configure Salesforce to use my custom Identity provider(Based on Identity server 3) as oAuth Provider similar to Google. I am able to successfully achieve it but facing one issue with ...
1
vote
1answer
8k views

Salesforce No_Oauth_State, State not valid

I'm using Open Id for Salesforce, I followed the Doc from https://help.salesforce.com/articleView?id=sso_provider_azure.htm and could able to login to Salesforce using Azure AD credentials ...
0
votes
0answers
353 views

OpenId Connect Custom Attributes : Writing a test class for ConnectedAppPluginExample configured in connected apps?

How to write a test class for "ConnectedAppPluginExample", mentioned by salesforce, here -> https://developer.salesforce.com/docs/atlas.en-us.apexcode.meta/apexcode/apex_class_Auth_ConnectedAppPlugin....
3
votes
1answer
2k views

How does Salesforce handle or use the state parameter on an oauth callback?

Running into an issue with our Open ID Connect Authentication Provider. The current way our registration page has been implemented requires a unique identifier to be passed through the state parameter ...
0
votes
1answer
2k views

OpenID Connect - Bad Response

I've seen a few posts regarding this topic, however they do not appear to solve my issue. I also have a posting on the developer forum. I'm setting up our authentication provider to allow users to ...
2
votes
1answer
2k views

Get access token from OpenID Connect

I'm trying to use Keycoak as identity provider for SSO. Following salesforce help example , I managed to create the login page, redirection, and the user can login succesfulyy , however I wasn't ...
0
votes
0answers
79 views

Authenticate user to Salesforce based on pre Desktop authentication

I am using OpenID connect flow to authenticate to Salesforce community using a third party Identity provider service. I have configured all settings in Salesforce and it is working fine when initiated:...