OAuth articles
9 articles · Connected apps, the OAuth flows, and token handling.
Salesforce Webhook Integration With JWT Bearer Flow
Salesforce has no inbound webhook listener, so third-party callbacks need a small service in front of the org. Building...
unsupported_grant_type: Fixing Apigee JWT Integration
The unsupported_grant_type error in Apigee usually comes down to how the OAuthV2 policy reads request headers against...
Box.com Salesforce Integration: Apex Backend Guide
How to wire Salesforce up to Box.com in Apex: secure authentication, the file upload patterns that hold up, and error...
External Client App for Headless 360 MCP: Scopes and Setup
Headless 360's MCP server needs an External Client App with the mcp_api scope, refresh_token, and API v67.0 or later....
Unattended Sandbox User Token Generation for CI/CD
Pulling access tokens for a pile of sandbox test users is a common CI/CD snag when the tests have to run as specific...
What is OpenID Connect? The Developer Interview Answer
Ever get confused between OAuth and OIDC during an interview? This post explains OpenID Connect as the identity layer...
Salesforce OAuth Explained: Secure Your API Integrations
Most of us copy and paste Salesforce OAuth settings and hope for the best, but OAuth is what holds your integrations...
Salesforce Connected App: Secure Your API Integrations
Think of a Salesforce Connected App as a digital ID card for your external software. It is your control panel for...
Connect Salesforce to Google Sheets: Apex or Connector
Two ways to connect Salesforce to Google Sheets: a Sheets add-on that a person drives, or an Apex REST callout through...