We have recently update ECA authentication for Salesforce, here the problem is, it is asking for re authenticate every time. does any have similar problem and the solution for this?
This is expected behaviour if you exceed active refresh token limit as per announcement
Salesforce limits active refresh tokens to five per user per External Client App.
Important Considerations for ECA Authentication
Please refer Announcement: Salesforce External Client App is now Available
Hi @shaffusailpoint
This is a common and known issue encountered when migrating the SailPoint Salesforce connector over to the required External Client App (ECA) framework. Have you tried the below given setting in the salesforce?
Log into Salesforce as an Administrator.
Navigate to Setup → External Client Apps → External Client App Manager.
Edit your configured ECA and look for OAuth Scopes.
Ensure you explicitly add the scope:(refresh_token, offline_access).
Disable the “Enable Refresh Token Rotation” setting, save the configuration, and allow Salesforce time to propagate the change. Then re-authenticate the connection in SailPoint ISC to ensure the updated configuration takes effect.
in Salesforce target system?
yes if you don’t have access to salesforce then ask application team to do that.
Hi, working with the salesforce admin I didn’t see an option to disable the “Enable Refresh Token Rotation”. Does anyone have a screenshot maybe on where we should look at? Thank you in advance.
@Deepak_Chaudhary We asked the Salesforce System Admin to update the above-mentioned settings in salesforce lower environment, but he is unable to update. In the Salesforce UI it is mentioned as “These Settings are hidden for installed apps”
