6 votes
Accepted

Oauth 2.0 Client Credentials - Custom Auth Provider

I've written a custom authprovider which I've shared "as-is" on Github. It implements both the Client Credentials and JWT Bearer variant (without a certificate). Feel free to fork from it. https://...
user avatar
5 votes

OpenID Connect with custom IdP: AuthorizationError: No_Oauth_Token/Empty Response

Just wanted to note that I've managed to acquire a response from Salesforce's support. They confirmed that in their current implementation of OpenID Connect client it will reject self-signed ...
user avatar
  • 81
3 votes

Salesforce Marketing Cloud SSO setting with OpenID Connect

Marketing Cloud doesn't support OpenID Connect. SSO is only possible using SFMC's SAML 2.0 implementation.
user avatar
  • 7,706
3 votes
Accepted

How to force logout an user session from Partner Community

Check out AuthSession object. Just deleting the records of all the active users from this object, will end their session and they have re-login again at which time they will login using Auth2 ...
user avatar
  • 7,521
2 votes

Salesforce No_Oauth_State, State not valid

The reason you're seeing this error is because of the way you're implemented the use of the OAuth State attribute in your Controller (it doesn't belong there as part of string that's a constant). From ...
user avatar
  • 40.3k
2 votes

Oauth 2.0 Client Credentials - Custom Auth Provider

Salesforce Premier Support has stated: The Custom Auth provider set up in Salesforce would not allow you to enter client credentials and login. The two posts below also confirm this: Custom ...
user avatar
  • 1,808
2 votes

Redirect to Authentication Provider Page instead of salesforce login page

Go to Setup > (Company Settings | Domain Management) > My Domain, edit the Authentication Configuration section, and uncheck all settings except for the provider you want to use. Salesforce will then ...
user avatar
  • 430k
2 votes

Apex callout to an OpenID Connect endpoint protected by PKCE code challenge

You'll need to roll your own client that implements the oAuth authorization code flow with PKCE extension. As you found out, Named Credential won't help you. The common wisdom is that tokens should be ...
user avatar
  • 6,127
2 votes
Accepted

OpenID Connect - adding custom attributes (claims) to id token

I am able to get custom attributes in the id_token upon enabling Include Custom Attributes as explained in the release notes Following is what I get when I try the flow using https://openidconnect....
user avatar
  • 36
2 votes
Accepted

Salesforce as an OpenID Connect provider with Azure B2C as a Relying Party

The OpenID Connect protocol in brief: The RP (Client) sends a request to the OpenID Provider (OP). The OP authenticates the End-User and obtains authorization. The OP responds with an ID Token and ...
user avatar
  • 6,127
2 votes
Accepted

How often does Salesforce change the keys at https://login.salesforce.com/id/keys?

I cross-posted this question to https://trailhead.salesforce.com/en/trailblazer-community/feed/0D54S00000GzB9Z and received the following answer from Sam Rosen, a Director on the Salesforce Identity ...
user avatar
  • 2,092
1 vote
Accepted

Salesforce Single Logout (SLO) configuration with multiple relying party

Since nobody responded yet therefore answering my own question for other's benefit. Based on my analysis what I learnt is that just by selecting 'openid' scope in the OAuth based Connected App doesn't ...
user avatar
  • 709
1 vote
Accepted

OpenID connect is not returning EMail id, Address and Phone number from Salesforce

On the Salesforce side in the connected app (docs): openid is the only scope needed under Selected OAuth scopes Select Configure ID Token and check Include Standard Claims On the client side (Auth0),...
user avatar
  • 6,127
1 vote

OpenID Connect - ID Token vs Access Token

Access token and ID token are two different animals. The former is used for authorizing API calls, the latter is used for authentication of end-user by your application/client. You cannot use an ID ...
user avatar
  • 6,127
1 vote
Accepted

Salesforce1 Mobile SSO with OpenID Connect, possible?

Yes, it is possible to use SSO with OpenID connect. Follow these steps to configure OpenID connect external auth provider: https://developer.salesforce.com/docs/atlas.en-us.mobile_sdk.meta/mobile_sdk/...
user avatar
1 vote

Error while logging into salesforce using Google Oauth

This question is already ask in my knowledge. Please do research before asking question. check this: https://stackoverflow.com/questions/50509667/sign-in-with-google-temporarily-disabled-for-this-app
user avatar
1 vote

Users need to login using External Authentication Provider

You need to Modify the app settings and set the app domain (or Home Page URL) to Salesforce. Please follow below steps from the link below. https://help.salesforce.com/articleView?id=...
user avatar
  • 13.3k
1 vote

Oauth 2.0 Client Credentials - Custom Auth Provider

Well, if you want to bypass the mandatory PageReference, you could redirect directly to the callback url created in your Auth Provider, example: global PageReference initiate(Map<string,string> ...
user avatar
1 vote

Where is the certificate for Open Id Connected App in Salesforce?

Use the published public keys to verify the signature in the response is a valid Salesforce signature. http://releasenotes.docs.salesforce.com/en-us/spring14/release-notes/...
user avatar
  • 2,061
1 vote

How does Salesforce handle or use the state parameter on an oauth callback?

Not an ideal solution, but it does solve the issue. Given the user is authenticated, the user can be redirected into the application. Given Salesforce directs the user to the error page, the error ...
user avatar
  • 1,844
1 vote

Connected App to provide OpenID Connect

There could be some other simple way to achieve this but i think one possible way could be by extending ConnectedAppPlugin class.Here you can restrict access.See below image where you can provide this ...
user avatar
  • 5,714
1 vote
Accepted

Openid Connect - Add custom claim

I'll answer my own question. This is part of the Winter 2016 Salesforce release.
user avatar
  • 193
1 vote

OpenID Oauth API Authentication

If I understand correctly, you want capture form data from a logged in user of your website into Salesforce. Am I right, if yes, then you can do web to lead kind of an integration. But however if ...
user avatar
1 vote

OpenID Oauth API Authentication

Probably you are looking for this. This has illustrated all the list of steps that would allow you get connected to OpenID oauth2 salesforce auth. https://help.salesforce.com/apex/HTViewHelpDoc?id=...
user avatar
1 vote
Accepted

About Communities- Portal User Error

Community Users needs a Contact (linked to a valid Contact). So you have to do something like in the createUser method: Account acc = new Account(Name = data.lastname); insert acc;//you can also ...
user avatar
1 vote

How to refresh a token retrieved from the Auth.AuthToken class

I know this post is old, but it still pops up as one of the most relevant results for this issue. It would appear that in addition to the best response, the following parameter is now optimal: ...
user avatar

Only top scored, non community-wiki answers of a minimum length are eligible