Oauth Authorization flows in Salesforce | Web Server flow | JWT Bearer token flow
Vložit
- čas přidán 21. 07. 2024
- 1- Creating Connected App and Managing Connected App usage
2- Oauth Web Server flow (walkthrough with postman)
3- Oauth JWT Bearer token flow (walkthrough with postman)
4- Oauth JWT Bearer token flow (apex code walkthrough to integrate one salesforce org to another using JWT Bearer flow)
0:00 Introduction
1:48 Connected App
2:32 How to created Connected App
8:20 Change Connected App Policy
14:10 View OAuth Usage
17:57 Oauth WebServer flow
19:35 Step Involved in WebServer flow
19:55 Demo
24:00 walkthrough with postman
28:00 JWT Bearer token flow Introduction
30:57 JWT Structure
33:24 Oauth JWT Bearer token flow walkthrough with postman
45:31 apex code walkthrough to integrate one salesforce org to another using JWT Bearer flow
1:01:00 Named Credential
NO ONE HAS DONE A BETTER JOB OF EXPLAINING THIS THAN YOU. THANK YOU SO MUCH. YOU HAVE UNMYSTIFIED THIS FOR ME.................
Glad it helped you
Very informative, E2E, I had tough times understanding named credentials, certifications, JWT related concepts, this cleared all. thanks a lot.
Excellent quality. Very well explained
Very helpful, so much informative. No one has explained better then Debarun Sengupta.
Glad it was helpful!
Incredibly well explained demo. Great work!
Thanks
Very nicely explained. This information is pure gold!!
Glad you think so!
This is one of the best session for JWT found for SF. Very well and point to point explained. Very well done Debarun. Thanks for this session.
Glad it was helpful!
csr is cert signing request using which you request the actual cert (crt) file from a CA (cert authority). You mentioned even csr also as certificate which is incorrect but overall a super good explanation of material
No explanation can be better than this, the presentation has one of the best brevity.
Thanks for making this video. Great work & keep it up.
Glad it helped!
Thank you! This material was utterly perfect!
You're very welcome!
Nice explanation. And your work to host interesting developer sessions is awesome. Thanks for that.
Thanks
Wonderfully explained. Thanks for taking time to put this video
Glad you liked it
Thank you so much for this, you literally saved my job with this
Glad I could help!
Excellent explanation with execution, it's worked
Thanks for the Video
Glad it helped
Awesome session. Very easy to understand
Glad to hear that
Great explanation, it helped me a lot. Thank you!
Glad it helped! Stay connected we are coming with all oAuth Flow soon in FEB
Great explanation! -Thank you so much.
Glad it was helpful!
Thanks for this helpful session!
Glad it was helpful! Keep watching
Wonderful Session!!
Thank you kindly
Exactly what I was looking for. Thanks a lot!
Great to hear!
Nicely Explained. Thanks!
Glad it was helpful! Please like and share
well-structured video, good job
Keep watching
A very good video. I recommend this!
Glad you enjoyed it!
This is the best tutorial video I have ever seen. You absolutely nailed it.🙏
Glad it was helpful!
Thank you. Excellent post on this topic.
Glad you enjoyed it!
nice explanation with demo, AS i am looking for JWT implementation reference. thanks to Apexhours and team
Glad it was helpful!
Great video! Helped me with my poc :)
Glad it helped!
Thank you so much.
Debarun Sengupta you explain every concepts in detail and that too really well.
Please do more sessions like this.Thank you so much.
Glad that you liked it.
Glad that you liked it.
Awesome explanation
Glad you liked it
Excellent Explanation
Glad it was helpful!
How can we use this procedure for post requests? On attempting, the request body was showing as null in the destination environment where the request was sent
Nice Video !!!
Thanks for the visit
Hi have a question regarding the release update that is related to oauth "Enforce OAuth Scope for Lightning Apps". This release update says that this update enforce the scope of an Oauth token used to authenticate a Lightning app.This change prevent a Lightning app from using Oauth token with unintended permission. I am confused with this release update about the unintended permission. What does it mean???
well explained.
Thanks Keep watching
I need to use this flow to verify guest user from the community site from only one org..does it work?
While importing .jks file I am getting following error "The data you were trying to access could not be found. It may be due to another user deleting the data or a system error. If you know the data is not deleted but cannot access it, please look at our support page".
It is very helpful and nicely demonstrated. Can you add another video about how to add additional custom claims in JWT authentication in the connected app side?
Great suggestion!
I am getting Error in "Oauth JWT Bearer token flow walkthrough with postman" can someone help me?
grant_type = urn:ietf:params:oauth:grant-type:jwt-bearer
here is the error:
{
"error": "invalid_grant",
"error_description": "expired authorization code"
}
Please guide me, i am getting following error..when i run from postman then it is working fine but if from any other domain it is giving following error
Access to fetch at '@t from origin 'www.mywebsite.com' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: It does not have HTTP ok status.
I have already added the domain into CORS setting in salesforce.
How many times the "Nothing but" is used in this video?
Why we don't use client secret for Authorization?
Thank you so much its very useful video. I have a question can we integrate Pardot using JWT Bearer token flow?
Glad you like. Not sure about pardot
you have done it in a way that it is extremely difficult to understand, for one who is trying to learn.
Can we have a video/session on different grant types flows as well? Is there anyways we can put questions to Apex Hours team?
Coming Soon. Keep posted your question
Great explanation. Very useful video. Is the access token different from Session Id or both are same?
access token is used to access the application
This is the best video I found explaining JWT in detail within Salesforce. But I have a question. Why not generate a self-signed certificate within Salesforce instead of importing it from Java Keystore. Isn't it basically the same thing. With the button 'Self-signed certificate' you bypass all the hassle of creating a certificate and then converting to JKS format. Also I am wondering if you import from Java keystore its only the certificate, but what about the private key. Doesn't Salesforce need private key to create jwt in auth header.
JWT needs x509 certificate. Hence CLI was used to convert the file format to jks to import into salesforce
Thanks for helping Debarun
Great explanation could you please let me know if I want to get information of second org Salesforce then I need to create connected app in second org and named credentials on first org?
We will create one session on same topic soon
Brilliant tutorial just shy of perfection because you forgot to show us one very crucial step due to which it took me hours to figure out why I was getting error. For someone who directly jumps to JWT authorization flow, you should mention how to perform prior approval of client app. Otherwise we'll get an error in Post request "user hasn't approved this consumer".
Thanks for feedback
How will I get the Slides presented here ?
check here www.apexhours.com/oauth-authorization-flows-in-salesforce/
Hi Debarun Sengputa You absolutely nailed it (y) great job.. I have a question can we use JWT to integrate with third party (API Gateway) to Salesforce?
Thanks
Yes possible for server to server use case...i have seen it in apigee gateway
Thank you @debarun sengupta
This video is really helpful. Thanks for the content.
But I'm facing error while converting pem file to jks file in the 3rd cmd "keytool -keystore //servercert.jks -changealias -alias 1 -destalias salesforcetest"
Error I'm facing: Illegal option: -
Please help me on this.Thanks.
You must have Jre installed in your computer to run keytool commands
I am not able to get the references slide.
Can you please share the link
Check apex hours blog post for same
Can you create a video to Use External Data Source With Auth Provider sending Azure JWT token in Header for another server to get data .This would be a great help.
Soon