6 votes
Accepted

Oauth 2.0 Client Credentials - Custom Auth Provider

I've written a custom authprovider which I've shared "as-is" on Github. It implements both the Client Credentials and JWT Bearer variant (without a certificate). Feel free to fork from it. https://...
Bobby White's user avatar
4 votes

Remote ID limit is 128 characters

I don't think the length of the identifier field can be increased. I'd recommend upvoting this Idea on IdeaExchange platform so that Salesforce Product team can prioritize it. This being a platform ...
Swetha Maddali's user avatar
3 votes
Accepted

How often does Salesforce change the keys at https://login.salesforce.com/id/keys?

I cross-posted this question to https://trailhead.salesforce.com/en/trailblazer-community/feed/0D54S00000GzB9Z and received the following answer from Sam Rosen, a Director on the Salesforce Identity ...
Rob's user avatar
  • 2,122
3 votes
Accepted

OpenID Connect - adding custom attributes (claims) to id token

I am able to get custom attributes in the id_token upon enabling Include Custom Attributes as explained in the release notes Following is what I get when I try the flow using https://openidconnect....
Gurjeet's user avatar
  • 46
3 votes

Salesforce Marketing Cloud SSO setting with OpenID Connect

Marketing Cloud doesn't support OpenID Connect. SSO is only possible using SFMC's SAML 2.0 implementation.
Macca's user avatar
  • 8,196
3 votes
Accepted

How to force logout an user session from Partner Community

Check out AuthSession object. Just deleting the records of all the active users from this object, will end their session and they have re-login again at which time they will login using Auth2 ...
RedDevil's user avatar
  • 7,793
2 votes

Salesforce No_Oauth_State, State not valid

The reason you're seeing this error is because of the way you're implemented the use of the OAuth State attribute in your Controller (it doesn't belong there as part of string that's a constant). From ...
crmprogdev's user avatar
  • 40.9k
2 votes

Oauth 2.0 Client Credentials - Custom Auth Provider

Salesforce Premier Support has stated: The Custom Auth provider set up in Salesforce would not allow you to enter client credentials and login. The two posts below also confirm this: Custom ...
S.B.'s user avatar
  • 2,069
2 votes

Redirect to Authentication Provider Page instead of salesforce login page

Go to Setup > (Company Settings | Domain Management) > My Domain, edit the Authentication Configuration section, and uncheck all settings except for the provider you want to use. Salesforce will then ...
sfdcfox's user avatar
  • 487k
2 votes

Add custom claims to OpenID Connect id token - Web Server Authentication flow

I found a way to include custom attributes in the JWT token from the Connected App programatically. Connected App plugin: https://developer.salesforce.com/docs/atlas.en-us.apexcode.meta/apexcode/...
andres.bravo's user avatar
2 votes

Add custom claims to OpenID Connect id token - Web Server Authentication flow

Your understanding is correct. Out of the box, you can receive an OpenID Connect id token if you request openid scope but you have limited control over non-standard claims in this token. If you need ...
identigral's user avatar
  • 7,459
2 votes

Add custom claims to OpenID Connect id token - Web Server Authentication flow

You may be able to set custom claims via the JWT Class if you are creating your own Authentication Provider in Salesforce.
Bryan Anderson's user avatar
2 votes

Apex callout to an OpenID Connect endpoint protected by PKCE code challenge

You'll need to roll your own client that implements the oAuth authorization code flow with PKCE extension. As you found out, Named Credential won't help you. The common wisdom is that tokens should be ...
identigral's user avatar
  • 7,459
2 votes
Accepted

Salesforce Single Logout (SLO) configuration with multiple relying party

Since nobody responded yet therefore answering my own question for other's benefit. Based on my analysis what I learnt is that just by selecting 'openid' scope in the OAuth based Connected App doesn't ...
LakhanP's user avatar
  • 791
2 votes
Accepted

Salesforce Registration Handler Interface Logic

Salesforce creates a link automatically when creating user. When you go to the User Page (via Setup) to a User who has logged in via the Auth Provider/SSO, you'll see there is a link in Third-Party ...
nesnaj713's user avatar
  • 228
2 votes
Accepted

Salesforce as an OpenID Connect provider with Azure B2C as a Relying Party

The OpenID Connect protocol in brief: The RP (Client) sends a request to the OpenID Provider (OP). The OP authenticates the End-User and obtains authorization. The OP responds with an ID Token and ...
identigral's user avatar
  • 7,459
1 vote
Accepted

UserInfo: protecting access token (GET vs POST)

The UserInfo resource is specified in OpenID Connect (OIDC) Core: 5.3.1. UserInfo Request The Client sends the UserInfo Request using either HTTP GET or HTTP POST. The Access Token obtained from an ...
identigral's user avatar
  • 7,459
1 vote

Open Id Connect Account Linking

(2A)Will they automatically be linked to the existing community user & what is the mechanism behind it? If the user logs in the first time, the answer is no, you need to have custom logic in your ...
Jun Liu's user avatar
  • 29
1 vote
Accepted

OpenID connect is not returning EMail id, Address and Phone number from Salesforce

On the Salesforce side in the connected app (docs): openid is the only scope needed under Selected OAuth scopes Select Configure ID Token and check Include Standard Claims On the client side (Auth0),...
identigral's user avatar
  • 7,459
1 vote
Accepted

OpenID Connect - ID Token vs Access Token

Access token and ID token are two different animals. The former is used for authorizing API calls, the latter is used for authentication of end-user by your application/client. You cannot use an ID ...
identigral's user avatar
  • 7,459
1 vote
Accepted

Salesforce1 Mobile SSO with OpenID Connect, possible?

Yes, it is possible to use SSO with OpenID connect. Follow these steps to configure OpenID connect external auth provider: https://developer.salesforce.com/docs/atlas.en-us.mobile_sdk.meta/mobile_sdk/...
Murali Pamidi's user avatar
1 vote

Error while logging into salesforce using Google Oauth

This question is already ask in my knowledge. Please do research before asking question. check this: https://stackoverflow.com/questions/50509667/sign-in-with-google-temporarily-disabled-for-this-app
Aladin Banwal's user avatar
1 vote

Users need to login using External Authentication Provider

You need to Modify the app settings and set the app domain (or Home Page URL) to Salesforce. Please follow below steps from the link below. https://help.salesforce.com/articleView?id=...
sfdc's user avatar
  • 13.6k
1 vote

Oauth 2.0 Client Credentials - Custom Auth Provider

Well, if you want to bypass the mandatory PageReference, you could redirect directly to the callback url created in your Auth Provider, example: global PageReference initiate(Map<string,string> ...
Mathieui Beausoleil's user avatar
1 vote

Where is the certificate for Open Id Connected App in Salesforce?

Use the published public keys to verify the signature in the response is a valid Salesforce signature. http://releasenotes.docs.salesforce.com/en-us/spring14/release-notes/...
krigi's user avatar
  • 2,201
1 vote

How does Salesforce handle or use the state parameter on an oauth callback?

Not an ideal solution, but it does solve the issue. Given the user is authenticated, the user can be redirected into the application. Given Salesforce directs the user to the error page, the error ...
zainogj's user avatar
  • 1,854
1 vote

Connected App to provide OpenID Connect

There could be some other simple way to achieve this but i think one possible way could be by extending ConnectedAppPlugin class.Here you can restrict access.See below image where you can provide this ...
Mr.Frodo's user avatar
  • 5,804
1 vote
Accepted

Openid Connect - Add custom claim

I'll answer my own question. This is part of the Winter 2016 Salesforce release.
Fitz's user avatar
  • 193
1 vote

OpenID Oauth API Authentication

If I understand correctly, you want capture form data from a logged in user of your website into Salesforce. Am I right, if yes, then you can do web to lead kind of an integration. But however if ...
Srinivas Koduru's user avatar
1 vote

OpenID Oauth API Authentication

Probably you are looking for this. This has illustrated all the list of steps that would allow you get connected to OpenID oauth2 salesforce auth. https://help.salesforce.com/apex/HTViewHelpDoc?id=...
Pranay Jaiswal's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible