Questions tagged [open-id-connect]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
4
votes
2answers
525 views

Open Id Connect Network Activation

I have configured a salesforce instance to use Google for user Authentication via Open Id Connect. This is for users with full Salesforce licenses to login to Salesforce. When I log in from a new ...
3
votes
2answers
2k views

How to refresh a token retrieved from the Auth.AuthToken class

A Salesforce instance is configured so that users can log in using OpenID Connect and their Google credentials. I am trying to access the token provisioned by the login via google to make callouts to ...
3
votes
1answer
106 views

Apex callout to an OpenID Connect endpoint protected by PKCE code challenge

I'm trying to write Apex code that'll call an external API. The API is using OpenID Connect for authentication, meaning I'll have to first give consent in order to get an authorization code, then ...
3
votes
1answer
119 views

Connected App to provide OpenID Connect

I've a web app which is protected via a login mechanism. There is requirement that we need to let some users login using their Salesforce credentials instead of creating accounts at the web ...
3
votes
1answer
353 views

How does Salesforce handle or use the state parameter on an oauth callback?

Running into an issue with our Open ID Connect Authentication Provider. The current way our registration page has been implemented requires a unique identifier to be passed through the state parameter ...
3
votes
0answers
617 views

OpenID Connect's Implicit Flow is available in Salesforce?

I'm trying to login to Salesforce by Implicit Flow using third-party OpenID Provider on localhost. After authentication and authorization on the OP, it responds Access Token and ID Token to ...
2
votes
1answer
1k views

OpenID Connect with custom IdP: AuthorizationError: No_Oauth_Token/Empty Response

Sorry for kicking this dead horse, I've seen this question asked before. The problem is that answers to it are of no use, it has nothing to do with the fact that it's a "localhost", until parties can ...
2
votes
0answers
69 views

OpenID Connect single logout

I have a connected application (web site) that is using Salesforce as an authentication provider (OpenID Connect). And I'd like the logout on my site to work as a "single logout" - it should also log ...
2
votes
0answers
107 views

OpenID Single Sign On - Change Authentication Flow

I have an Auth Provider created with OpenID and everything is working good. But, I would like to change the Authentication Flow from web server to user-agent Source: https://help.salesforce.com/...
2
votes
1answer
194 views

Salesforce OAuth Flow locale?

Trying to authenticate to a Salesforce community org (External Identity License) from an external application using OpenID / OAuth 2.0. Can the OAuth flow accept a language parameter in the header or ...
1
vote
3answers
1k views

Oauth 2.0 Client Credentials - Custom Auth Provider

I am building out a Salesforce Connect customer adapter to translate rest responses into external data objects. To authenticate these requests, I would like to use Oauth 2.0's client credentials flow ...
1
vote
1answer
128 views

Where is the certificate for Open Id Connected App in Salesforce?

I have created a connected app and used scope -"Allow access to your unique identifier (openid)". I am expecting a "id token" which would be a JWT token. But where from would I get the digital ...
1
vote
1answer
3k views

Salesforce No_Oauth_State, State not valid

I'm using Open Id for Salesforce, I followed the Doc from https://help.salesforce.com/articleView?id=sso_provider_azure.htm and could able to login to Salesforce using Azure AD credentials ...
1
vote
0answers
38 views

OAuth Flow required every day. Otherwise Callout fails with 401

In a customer org, Api calls are made using a NamedCredential using an OpenIdConnect AuthProvider. I didn't configure this but my own code fails with 401 Unauthorized. When I going to the ...
1
vote
0answers
49 views

Setting up an external OIDC auth provider with Salesforce

I have always integrated a SAML IDP with Salesforce and I'm trying OIDC now. I have created a Salesforce OIDC app in my IDP. I took the clientID and clientSecret, and then created a Auth. Provider in ...
1
vote
0answers
91 views

id_token not returned in JWT Bearer Token OAuth Flow

As per the JWT Bearer token documentation The id_token will be return if there is a pre-existing approval for the openid. I have existing approvals for openid for the user. Am I missing something in ...
1
vote
0answers
239 views

Missing unique Third party identifier

I am trying to configure Salesforce to use my custom Identity provider(Based on Identity server 3) as oAuth Provider similar to Google. I am able to successfully achieve it but facing one issue with ...
1
vote
1answer
2k views

Get access token from OpenID Connect

I'm trying to use Keycoak as identity provider for SSO. Following salesforce help example , I managed to create the login page, redirection, and the user can login succesfulyy , however I wasn't ...
1
vote
0answers
334 views

OpenID connect authentication

I am working on a Salesforce community usecase and for automatic user provisioning I am using an Identity provider for my OpendID connect flow. Everything is working fine, however there is a scenario,...
1
vote
0answers
198 views

OpenID Connect login returns Remote Error & ErrorDescription=427

To provide authentication via the external OAuth2 authorization server, I'm trying to configure Auth. Provider as an OpenID Connect type. After logging into the external server, I got an error page, ...
0
votes
1answer
44 views

How to force logout an user session from Partner Community

I have a partner community where we have two auth providers. One is being Auth1 and other is Auth2. We had Auth1 in place for long time and as maintenance cost is getting higher, we have moved to ...
0
votes
1answer
278 views

Redirect to Authentication Provider Page instead of salesforce login page

I have created an open id connection between external authentication provider and salesforce. Now the requirement is when my domail url is entered in browser, it has to redirect to authentication ...
0
votes
2answers
175 views

OpenID Oauth API Authentication

I have a connected an Application that is setup with the Oauth using an Open ID authentication provider server. The use case is a user logs into my website that uses the same authentication open ID ...
0
votes
1answer
83 views

Salesforce1 Mobile SSO with OpenID Connect, possible?

Reading through the SSO possibilities, I found nothing related to SalesforceApp SSO with the OpenID Connect I got documentation related only to implementation with SAML Is is possible by any chance ...
0
votes
2answers
42 views

Error while logging into salesforce using Google Oauth

We have our Org connected with google using open-id configuration. When User tries to log in to Salesforce using Google, the system checks for the user's gmail id in slaesforce user profile and if it ...
0
votes
1answer
463 views

Openid Connect - Add custom claim

Using OpenId Connect with Salesforce Identity as the IDP and I am trying to add a custom attribute encoded within the ID token. Is this possible? I can't find any documentation on the topic within ...
0
votes
1answer
127 views

About Communities- Portal User Error

I am using Google Open ID Connect to link up with Communities , I have configured everything as in the documentation , but I am getting the below error in the url: "Cannot create Portal user without ...
0
votes
3answers
30 views

Add custom claims to OpenId JWT Token - Web Server Authentication flow

We are using Keycloak to generate OpenId tokens, now they want to use Salesforce Identity to do that, the thing is that the have some custom claims in the JWT token that we are not able to include in ...
0
votes
0answers
20 views

Salesforce- Custom Open ID Auth. Providers- how to get query parameters from sso url that started the initiate method

Is there any way we can access the url that initiates the flow from the initiate(...) method on Auth.AuthProviderPluginClass so I can read any query parameters passed in with the auth provider sso url,...
0
votes
1answer
31 views

Can we avoid navigating to Azure Ad login screen when we configure SSO with Azure AD as ID provider

I have to configure Single Sign using Azure AD for our salesforce community as Identity provider and Salesforce being the service provider, I want to use Open id Connect. I want check with the forum ...
0
votes
0answers
30 views

OpenID connection return error

I am trying to create an OpenID Connect provider in my app to provide SSO into SF through ngrok tunnel Below is the url: https://na81.salesforce.com/_nc_external/identity/sso/ui/AuthorizationError?...
0
votes
0answers
37 views

Salesforce Open Id Connect - Profile Information

I have created a connected app in Salesforce. Using that connected app i am able to use the credentials of Salesforce for authentication in my external app. i can get most of the user information (e....
0
votes
1answer
127 views

OpenId access token does not work for rest api

I want to use OpenId for Salesforce authentication. I have done the following: created an auth provider (like in this tutorial: https://help.salesforce.com/articleView?id=sso_provider_sfdc.htm&...
0
votes
0answers
21 views

OpenId Connect Silent Renew being blocked by Remote Access Authorization Page

I've got a connected app inside of Salesforce using OpenID Connect with the implicit flow. When the process of SilentRenew kicks in the response back is not directed towards the redirect_uri stated in ...
0
votes
0answers
176 views

We can’t log you in because of the following error. For more information, contact your Salesforce administrator. NO_ACCESS: Unable to find a user

I have created a connection with Keycloak and am trying to log in to salesforce using the Keycloak's authentication. I have configured open id configuration using salesforce manual and also given the ...
0
votes
1answer
418 views

Users need to login using External Authentication Provider

I have a requirement where users need to log in to salesforce using external authentication provider. The configuration in Open-id authentication. I have created the connection in Auth.Providers along ...
0
votes
0answers
216 views

OpenId Connect Custom Attributes : Writing a test class for ConnectedAppPluginExample configured in connected apps?

How to write a test class for "ConnectedAppPluginExample", mentioned by salesforce, here -> https://developer.salesforce.com/docs/atlas.en-us.apexcode.meta/apexcode/apex_class_Auth_ConnectedAppPlugin....
0
votes
1answer
924 views

OpenID Connect - Bad Response

I've seen a few posts regarding this topic, however they do not appear to solve my issue. I also have a posting on the developer forum. I'm setting up our authentication provider to allow users to ...
0
votes
2answers
322 views

Dynamic Query Parameters in Auth Provider Endpoint

I am setting up an Auth Provider with an external service that implements OpenID Connect. Their endpoint requires a query parameter because their system uses tenant databases, and their users are not ...
0
votes
0answers
66 views

Authenticate user to Salesforce based on pre Desktop authentication

I am using OpenID connect flow to authenticate to Salesforce community using a third party Identity provider service. I have configured all settings in Salesforce and it is working fine when initiated:...
0
votes
1answer
2k views

OpenID Connect login returns No Oauth Token & Empty Response

Trying to create an OpenID Connect provider in my app to provide SSO into SF. I'm using a python library: pyoidc. However, I keep getting redirected to an error URL... https://na10.salesforce.com/...