14 votes

What is the best way to get security token of a API Only user?

In the UI - change API only user profile to another non-api only user profile. Log in, reset security token. The IP range(s) on the profile assigned to the non-API User must allow your IP or you will ...
user avatar
  • 497
14 votes

Unable to see the Reset Security Token in my Salesforce org

Most likely it is because you are currently accessing from an IP that is within the Trusted IP Ranges (Setup -> Administer -> Security Controls -> Network Access) and Salesforce hides that option in ...
user avatar
9 votes
Accepted

How can I avoid Salesforce expiring my password and/or token without warning?

Your token didn't expire, your password did. As an administrator, you can make a Permission Set with the Password Never Expires permission, and assign it to your user account (affects only yourself), ...
user avatar
  • 433k
6 votes
Accepted

Is there a zero-downtime way to rotate the server credentials used by force-wsc?

A properly written force-wsc app (or any other SOAP-based application) won't immediately be affected by password change; this is because a session remains valid even if the username or password for ...
user avatar
  • 433k
6 votes

What is the best way to get security token of a API Only user?

Use the Log In as Another User feature to log as the 'API Only' user Reset the security token while logged in as the 'API Only' user
user avatar
  • 937
6 votes
Accepted

How to skip entering security token in force.com deploy action

If you set your IP address to trusted then you don't need to use the security token when accessing Salesforce via the APIs. See: Set Trusted IP Ranges for Your Organization What is my IP address and ...
user avatar
6 votes
Accepted

JWT Bearer Token flow for Community: Invalid Token

I ended up finding what was causing the error. In the doc that I mentioned in my question they were suggesting the use of https://community.force.com/customers as the token endpoint. But in Configure ...
user avatar
  • 143
5 votes

Salesforce Sandbox Security Token

Here is the workaround: When you have trusted IP ranges enabled, you won't see the reset token link if you're logged in from an address in a trusted range. To get around this, we use the below ...
user avatar
  • 343
5 votes

Salesforce Sandbox Security Token

From Knowledge Article Common Questions about Security Tokens: https://help.salesforce.com/HTViewSolution?id=000003783 Q: When I go to Setup | My Personal Information, I do not see Reset My ...
user avatar
  • 10.4k
4 votes

Session expiry in Salesforce - Session timeout value for Connected Apps

If you read properly in the link you have provided, The expires_in attribute is given on the call back URL and not as web service response. Even if you get expires_in there is still a catch. The ...
user avatar
4 votes

How to know the current security token

From within Salesforce, you are not able to. You can either go through the emails sent to you and try to retrieve the Token or if you stored it somewhere else, retrieve it from there. Otherwise, you ...
user avatar
  • 19.3k
4 votes
Accepted

How to find out the security token in the org?

Please check in your profile level,Any "IP restriction" applied for your profile.In that case also it will not show security token to you Usually we will find security Token like this: Yourname→ ...
user avatar
  • 2,254
4 votes
Accepted

Can we reset security token using SFDX CLI?

Generating a password for the user (force:user:password:generate) should automatically send you an email with the security token. There's no separate command for this in the CLI. You would use the UI ...
user avatar
  • 433k
4 votes
Accepted

split userPassword and securityToken

You should not be authenticating with a username and password when integrating a remote service. Instead, implement OAuth, using either the Web Server flow or the JWT flow. Storing and transmitting ...
user avatar
  • 86.8k
4 votes

Can we automate Security Token reset for automated testing?

If you specify Trusted Networks, or enforce IP Restrictions on a profile, you won't ever need a Security Token from those IP addresses. This can be much easier to handle as long as you have static IP ...
user avatar
  • 433k
3 votes
Accepted

Storing OAuth Credentials

Okay, so you can actually update the OAuth Token for a Named Credential using the Metadata API. If you install the Apex Wrapper Salesforce Metadata API, you can push the new token with an additional ...
user avatar
  • 143k
3 votes

Call metadata API during package install

If the user installing the application has API access then you can certainly call Metadata API provided you create Remote site settings. The visualforce merge field or userinfo.getsessionId() can be ...
user avatar
3 votes

Salesforce Sandbox Security Token

maybe because your organization restricts the IP addresses from which you can log in, in that case you wont have reset security token option.
user avatar
  • 1,141
3 votes

How to avoid consequences of sandbox security token refresh - Eclipse IDE projects

Security tokens will match what's in production after a sandbox refresh. To avoid people needing to update their credentials after a refresh you'll need to continue to use the production password / ...
user avatar
3 votes
Accepted

How to determine the correct 'audience' and 'uri' when using OAuth 2.0 JSON Web Token (JWT) Bearer Token Flow

You only need audience for the oauth 2.0 JWT bearer token flow and for the salesforce sandbox the value is always https://test.salesforce.com . You don't need uri for this flow .The below document ...
user avatar
2 votes
Accepted

How to avoid consequences of sandbox security token refresh - Eclipse IDE projects

Basically I have written about this in my blog about Salesforce: http://patlatus.wordpress.com/2014/08/29/salesforce-use-force-com-without-security-token/ Also shortly explain solution here. So, if ...
user avatar
  • 13.3k
2 votes

Trouble after Resetting Password and Security Token

If your token gets reset often you can also whitelist your IP by going to Security Controls -> Session Managment and get your IP ->Then go to Network Access and Add your IP in there` It gets ...
user avatar
  • 4,327
2 votes
Accepted

WSDL Enterprise API: sessionSecondsValid 0 while logging from a certain machine

It sounds like your prod box is using an older API version where the sessionSecondsValid property didn't exist (and so you'd see the default of 0 in your code).
user avatar
  • 7,830
2 votes

Can't get Mule Studio Salesforce connector to connect, verified SF login and Security Token

If you use the the 6.0 connector, the problem is your studio + ESB version. I was having the same with the Studio of October and ESB v.3.5.2. Solution: - Studio 5.0.1 - ESB 3.6 EE
user avatar
  • 21
2 votes

Using different token for one license in salesforce

Not only is there no way to determine a user based on a token in Salesforce, sharing a user between multiple people may be in violation of your contract with salesforce, and will cause complications ...
user avatar
  • 433k
2 votes
Accepted

Where to store access key for Quickbooks integration

Store it on a Named Credential. It has an OAuthToken field which you can merge into your callouts without ever needing to know its value. And in fact you won't be able to read the value after you set ...
user avatar
  • 143k
2 votes
Accepted

Journey Builder Custom Activity: How to secure the UI endpoint url?

You can secure access by using "useJwt": true in each of your activity arguments as documented here and here: When your application is called, Marketing Cloud posts the encoded JWT to the activity'...
user avatar
  • 15.6k
2 votes
Accepted

I have an API User id and secret. Do I have everything I need to get an API Token?

Sounds like you need to designate an API user: Admin My Users click on the user's name Edit check the API user checkbox Save Once the user has been designated, you can assign API permissions: Admin ...
user avatar
2 votes
Accepted

Can I use the oAuth access_token to get the final segment in the web service URL?

You should not assume that the 15-character ID at the beginning will always exist in an access token. In fact, you should not assume the access token is anything other than a series of characters that ...
user avatar
  • 433k
2 votes
Accepted

Apex, HttpRequest, Named Credentials

Try this. It is not an elegant way to solve this problem, but perhaps it should work. Create a Named Credential. Select Identity Type as "Named Principle". Authentication Protocol as "...
user avatar
  • 1,967

Only top scored, non community-wiki answers of a minimum length are eligible