USER PASSWORD FLOW
API Authentication mechanism for Salesforce System Salesforce APIs are authenticated. These APIs are accessible through the OAuth 2.0 Password authentication flow.
- Test.salesforce.com --> Sandbox
- Login.salesforce.com --> production
API URL: https://{Domain}/services/oauth2/token
Access Mechanism: OAuth2.0.
Request Method: POST
Request from third party :
Request from Third Party System |
|
Attribute Name | Value | Type |
grant_type | password (should be as it is) | String |
username | TBD | String |
password | TBD (if required append Security Token) | String |
client_id | TBD | String |
client_secret | TBD | String |
Success Response from Salesforce:
Response from Salesforce |
|
Attribute Name | Description | Type |
access_token | Access token that acts as a session ID that the application uses for making requests. This token should be protected as though it were user credentials. | String |
signature | Base64-encoded HMAC-SHA256 signature | String |
issued_at | When the signature was created, represented as the number of seconds since the Unix epoch (00:00:00 UTC on 1 January 1970) | String |
instance_url | Identifies the Salesforce instance to which API calls are sent | String |
id | Identity URL | String |
Error Response from Salesforce:
Response from Salesforce |
|
Attribute Name | Description | Type |
error | Error code (unsupported_response_type/ invalid_client_id/ invalid_request/ invalid_client_credentials / invalid_grant/ inactive_user/ inactive_org/ rate_limit_exceeded) | String |
error description | Error Description | String |
