USER PASSWORD FLOW

 

 USER PASSWORD FLOW

 API Authentication mechanism for Salesforce System 

Salesforce APIs are authenticated. These APIs are accessible through the OAuth 2.0 Password authentication flow. 

• {Domain} maybe

• Test.salesforce.com --> Sandbox

• Login.salesforce.com --> production

API URL: https://{Domain}/services/oauth2/token 

Access Mechanism: OAuth2.0. 

Request Method: POST 

Request from third party : 

Request from Third Party System
Attribute Name	Value	Type
grant_type	password (should be as it is)	String
username	TBD	String
password	TBD (if required append Security Token)	String
client_id	TBD	String
client_secret	TBD	String

Success Response from Salesforce: 

Response from Salesforce
Attribute Name	Description	Type
access_token	Access token that acts as a session ID that the application uses for making requests. This token should be protected as though it were user credentials.	String
signature	Base64-encoded HMAC-SHA256 signature	String
issued_at	When the signature was created, represented as the number of seconds since the Unix epoch (00:00:00 UTC on 1 January 1970)	String
instance_url	Identifies the Salesforce instance to which API calls are sent	String
id	Identity URL	String

Error Response from Salesforce:

Response from Salesforce
Attribute Name	Description	Type
error	Error code (unsupported_response_type/  invalid_client_id/ invalid_request/  invalid_client_credentials / invalid_grant/  inactive_user/ inactive_org/ rate_limit_exceeded)	String
error  description	Error Description	String