Questions tagged [session]

A session is token that is returned after successful authentication. This is used to identify legitimate user.

56 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
10
votes
0answers
169 views

Cache.Session not honoring ttlSecs argument?

I'm using session cache and trying to set the TTL (lifetime) to 60 minutes. However it is expiring much more quickly (it appears to be using the default 5 minute expiry). The docs say TTLs is ...
5
votes
1answer
2k views

REST API using SessionId throws “not valid for use with the REST API” for Community users

Following are the steps I am doing: Get the Salesforce Session ID through SAML Handshake using SAML attributes Trigger REST API using that session ID curl https://my-communities.force.com/...
4
votes
0answers
440 views

Salesforce Bulk API v2.0 INVALID_SESSION_ID

Following the Salesforce Bulk API v2.0 documentation at: https://developer.salesforce.com/docs/atlas.en-us.api_bulk_v2.meta/api_bulk_v2/walkthrough_upload_data.htm https://developer.salesforce.com/...
4
votes
0answers
78 views

Multiple sfdc sessions in one http session

Can multiple access_tokens (salesforce sessionId's) be used on a single HTTP connection? Goal is to manage access tokens (fetched via oauth user/password flow on behalf of the end user) on ESB. Then ...
3
votes
1answer
539 views

How to expire our access token for testing?

As mentioned here, the "Session timeout" setting specifies the lifetime of our access token. However, when I set it up to timeout after 15min, it does not seem to happen. Also, the response we get ...
3
votes
0answers
5k views

INVALID_SESSION_ID: … Session not found, missing session hash:, Happening randomly

we are getting SOMETIMES following error messages when we call a custom SOAP WebService from Biztalk: INVALID_SESSION_ID: Invalid Session ID found in SessionHeader: Illegal Session. Session not ...
3
votes
0answers
324 views

SSO with multiple domains. How to create Community Sessions for one portal user in salesforce?

There is multiple domains for the communities in the org. User have to be able to have an opportunity to log in into all communities via one. Example : Communities A,B. From external site_X User_1 ...
3
votes
0answers
451 views

How to retain sessionId within Live Agent

We're implementing a Salesforce LiveAgent chat for our website, and we want the chat to appear in the bottom right corner of the page, not a popup. My question is: is this even possible while ...
3
votes
0answers
99 views

Secure communication between InstallHandler and third party application

During the installation of our package we need to fetch data (related to the installer organization) from a third party system (integration part of our solution). Like stated in the documentation ...
2
votes
0answers
53 views

How to display profile picture on external website

I'm trying to display the profile picture on another website (photo url is something like https://c.na87.content.force.com/profilephoto/1234W000000ABCD/F. I have a sid token returned by oauth. There'...
2
votes
0answers
219 views

Accessing Connected App From Visualforce

I'm developing an application which integrates with another services API. This API requires a SAML token to provide authentication. I've created a connected app, and from an execute anonymous call if ...
2
votes
1answer
493 views

Removing password/session settings from profiles to allow org defaults to apply to all users

Has anyone managed to remove profile session/password settings to allow the org defaults to apply to all users? Can't seem to remove session timeout to "none" on the profile UI, it only allows you to ...
2
votes
0answers
175 views

Setting Session-Based Permissions via Connected App

Here's my use case: We have API-only users who authenticate using the OAuth 2 web server flow and access SF via a ConnectedApp . At the time of auth / refresh, we want to activate a session-based ...
2
votes
0answers
565 views

Invalid session using SOAP API

I'm using SOAP API to read some info from my org. The call flow is typical and work well for my other orgs: login (using old style username/password), set session id and server url then call describe. ...
2
votes
1answer
117 views

Maintaining session using web server oauth

I am using canvas app and have java code at backend. We are integrating using web server oauth. I am using my java code to retrieve access token first time now i need to maintain the session , how ...
2
votes
0answers
151 views

Accessing Salesforce session via oAuth maintains session across browsers

I am using oAuth 2.0 Web server flow to connect to Salesforce org and get the Access token and refresh token. I use the following URL to access a visualforce page that resides within the Salesforce ...
2
votes
0answers
695 views

Calculate Session duration / length

Salesforce provides login history, but not log-out history or session timeout history... This has me stumped on how to calculate user session length! Is there a way to calculate when the user logged ...
2
votes
0answers
214 views

Changing session timeout behaviour?

In force.com session timeout are handled by server sending a redirect and setting the location header to a page in force domain. This will cause a re-challenge and re-authentiation. Is it possible to ...
1
vote
0answers
56 views

Enabling session setting “Lock sessions to the IP address from which they originated” and My Domain breaks PageReference.getContent()

After enabling My Domain and the "Lock sessions to the IP address from which they originated", calls to PageReference.getContent() fail with a 403 refused connection error. Is our only ...
1
vote
0answers
87 views

Reload Visualforce page on session lost

Im trying to reload a Visualforce page when session is lost, due to another login, and sessionId created in a different browser tab. I have code that makes constant calls to the controller methods, ...
1
vote
1answer
22 views

need to avoid firing trigger on perticular api invocation

I have written one trigger which fires on account create and update,but there is one API which creates/update account and if creation/updation is through that API i don't need to fire trigger. Please ...
1
vote
0answers
857 views

Iframe with Windows Authentication in Internet Explorer

Having some real problems getting a Visualforce page to work with Internet Explorer 11. I have the following Visualforce Page: <apex:page controller="MyController"> <iframe frameborder=...
1
vote
0answers
30 views

Getting error “No session Id received from SFDC”. Does anything changed in Spring/Winter releases?

We have integrated SAP and Salesforce system where customer data is being pushed from SAP to Salesforce. We have used Bulk API for this purpose. The issue is, the Bulk API throws the error below, ...
1
vote
0answers
143 views

Custom login/registration pages for force.com site

Hello! I am developing a website as an online shop, and I encountered a problem with login and registration. I created portal with Authenticated Website license, which is assigned to site. I enable ...
1
vote
0answers
138 views

API.Session_ID not invalidated after user has logged out from salesforce

I need some help on understanding the salesforce session behavior. I created a web tab pointing to .NET application which is opened within salesforce in Iframe. I'm passing the API.Session_ID value in ...
1
vote
1answer
59 views

Security Review expectations on Logout Configuration

Our app did not pass Security Review because "The logout function doesn't perform correctly the removal of session data server-side." Our application uses the popular Devise gem (Ruby on Rails) to ...
1
vote
0answers
28 views

Session is not getting renewed

Some facts about our implementation: There is 10 seconds frequency to access the SFDC web service. We create a singleton session at the start of the app. We implemented the SessionRenewer ...
1
vote
0answers
121 views

Is it possible to login into different communities(multiple domains) from one apex controller?

Is it possible to login into different communities(multiple domains) from one controller? Is it possible to use Site.login() for this or there are different ways to do this? Issue is that SSO doesnt ...
1
vote
0answers
66 views

Session setting expiring for VF

In Sales Force Service Cloud the session is set to expire 15 min. However the session does not expiring after 15 min, and no time-out pop-up screen appears, but directs to the Dashboard when we ...
1
vote
0answers
99 views

Can you log out a user from multiple domains ? (expire all sessions)

Our customer portal is available in multiple languages, all of them have their own domain and allow the user to switch languages. Currently, when a user logs out, we take the user to https://company....
1
vote
0answers
196 views

Customize Salesforce session timeout popup page

Is it possible to customize salesforce session timeout page to include time remaining to continue session and add a logo by nullifying the salesforce default logo. I have searched on this topic but ...
1
vote
0answers
956 views

Can an API user be set inactive automatically? API returned “cannot reparent record” for active user

I have a web application that uses the Salesforce API to create Contact, Account, Opportunity records. We set up an administrator user with full permissions to use as the Oauth login user, and I use ...
1
vote
0answers
484 views

Community New user set password issue

I create a new user through postman with required inputs(Username, Password, sample1 etc...), once user registered successfully then i need to get a user session through SOAP UI probably am getting ...
1
vote
0answers
85 views

Getting sessionId while scheduling job

I am scheduling a job in which i need to pass session Id. How can i get session id of user at that point. system.schedule('Test process 10 past', '0 10 * * * ?', new TestSchedule(UserInfo....
1
vote
0answers
363 views

Is there a way to set the URL of the session timeout redirect?

I am playing around building a hybrid app that wraps the Salesforce1 UI in the Mobile SDK. It's a local app in that the first page of my app is a splash page that runs locally in iOS -- localhost[...
1
vote
0answers
2k views

How to create a costume login page using session

I am working on Login page "costume VF page" that will check the username and password in "User" standard object. Is there anyway provided by salesforce to check the username and password then ...
1
vote
0answers
444 views

Weird visual force page issue on force.com site

We have a force.com site which has a 50 step form. I login as portal user in say the first tab of the browser and let us say i am at page5. Now i create a new tab in chrome and go to the home page and ...
0
votes
0answers
48 views

How can I access a High Assurance Session in an Async Apex context?

Has anyone worked with a high assurance session requirement and async apex? I need to query the Security Health Check objects during an async process (the query happens in a queueable). If "View ...
0
votes
0answers
44 views

Cant logout of lightning community

I just set up a Lightning Community. It has an, "out of the box" user profile menu. Unauthenticated users just see a "Log In" menu option that when clicked takes them to the ...
0
votes
0answers
23 views

REST service INVALID_SESSION_ID only it's actually valid

We're using an XmlHttpRequest to allow users in our Community to upload files. let xhr = new XMLHttpRequest(); xhr.open('POST', targetUrl, true); xhr.setRequestHeader('Accept', '*/*'); xhr....
0
votes
0answers
31 views

How to Renew Visualforce Page Session with JSforce

I have a visualforce page that is running with jsforce. I use it to query, create, update and deleted records in my page without reloading the page. For a longer period or idle time, I started to ...
0
votes
0answers
12 views

How to create and manage session for sites for force.com in Salesforce

We have created a portal to login to the sites for the customer. We are managing the credential(username and password) on the third party website. When I open this link anywhere it shows that the ...
0
votes
0answers
31 views

User login “mix-up” when using lightning out in external site

I have met serious security problem when developing lightning out components and using them in external resource. This is out workflow: We authenticate in SF org as 'admin' user with OAuth2 and get ...
0
votes
0answers
47 views

Make a Session using Apex code

I am wondering if there is any out-of-the-box functionality to make a Session for a specific User using Apex code. What I mean is this: I would create an Apex method, pass a UserID as a parameter, ...
0
votes
1answer
318 views

How to enforce session timeout in Native-iOS App

I am using SF Mobile SDK version 5.2. I am only using the sdk for authentication and authorization of SF users of our organization. Once a user is authenticated from the salesforce, he can use the app....
0
votes
0answers
82 views

Session timeout and session valid discrepancy

I have salesforce on a TV as a Dashboard and right now I'm having troubles with the session. I set my configuration for 24 hours timeout on Session Settings, for the whole org, but if I log and look ...
0
votes
0answers
90 views

Discerning a Production SessionId cookie from a Sandbox one

I'm trying to explore the browser's cookies and identify the Production SessionId. The thing is when i retrieved all the cookies filtered by sid, which is how they're called, I recieved over 30 (...
0
votes
1answer
19 views

Identifying multiple requests from force.com sites (without Authentication)

I have built a REST API client to a third party application and I am exposing the VF page to everyone in my org without having them to login to my salesforce application. I need to maintain a session ...
0
votes
1answer
223 views

Rest Call to Salesforce

I am new Salesforce. I am trying to hit the below URL through the Rest client and I am passing the User name and Password as Basic Auth. https://github--staging.cs70.my.salesforce.com/services/...
0
votes
0answers
1k views

How to get the same Session ID when using VisualForce Page to run the Apex Class

I'm getting a different Session ID value when I use my VisualForce Page to run my Apex Class. Before that I been testing my codes using the Developer's Console and I could get my Chart from Salesforce ...