Salesforce OAuth issue Added OAuth2TokenURL, Added Password+SecurityToken

IdentityIQ (IIQ) IIQ Discussion and Questions
1

Which IIQ version are you inquiring about?

[8.4, p3]

Please share any images or screenshots, if relevant.

[

image
image1108×498 20.2 KB

image
image847×430 14.5 KB

Please insert images here, otherwise delete this section]

Please share any other relevant files that may be required (for example, logs).

```

‘<?xml version='1.0' encoding='UTF-8'?>

<!DOCTYPE Application PUBLIC "sailpoint.dtd" "sailpoint.dtd">

<Application connector="sailpoint.connector.ForceConnector" created="" featuresString="SEARCH, ENABLE, PROVISIONING, DIRECT_PERMISSIONS, SYNC_PROVISIONING, PASSWORD" icon="internetIcon" name="Salesforce_Test"  type="Salesforce">
  <Attributes>
    <Map>
      <entry key="OAuth2TokenURL" value="https://company--isdev.sandbox.my.salesforce.com/services/oauth2/token"/>
      <entry key="PublicGroupIdentityAttributeAsDeveloperName">
        <value>
          <Boolean>true</Boolean>
        </value>
      </entry>
      <entry key="Sailpoint UI - Request Form">
        <value>
          <Boolean></Boolean>
        </value>
      </entry>
      <entry key="afterProvisioningRule"/>
      <entry key="audience"/>
      <entry key="auth_type" value="OAuth2"/>
      <entry key="beforeProvisioningRule"/>
      <entry key="clientId" value="......................"/>
      <entry key="clientSecret" value="........................."/>
      <entry key="compositeDefinition"/>
      <entry key="createContacts">
        <value>
          <Boolean></Boolean>
        </value>
      </entry>
      <entry key="customTimeOut"/>
      <entry key="encrypted" value="clientSecret, private_key, privateKeyPassword, refreshToken"/>
      <entry key="excludeFrozen">
        <value>
          <Boolean></Boolean>
        </value>
      </entry>
      <entry key="grant_type" value="Password"/>
      <entry key="includeInJoiner">
        <value>
          <Boolean></Boolean>
        </value>
      </entry>
      <entry key="isActive">
        <value>
          <Boolean></Boolean>
        </value>
      </entry>
      <entry key="issuer"/>
      <entry key="nativeChangeDetectionAttributeScope" value="entitlements"/>
      <entry key="nativeChangeDetectionAttributes"/>
      <entry key="nativeChangeDetectionEnabled">
        <value>
          <Boolean></Boolean>
        </value>
      </entry>
      <entry key="nativeChangeDetectionOperations"/>
      <entry key="password" value="....................="/>
      <entry key="privateKeyPassword" value="........"/>
      <entry key="private_key_to_update"/>
      <entry key="refreshToken" value=".............."/>
      <entry key="serverUrl" value="https://company--isdev.sandbox.my.salesforce.com/services/Soap/u/61.0/05h"/>
      <entry key="sessionId" value="................"/>
      <entry key="subject"/>
      <entry key="sysDescriptions">
        <value>
          <Map>
            <entry key="en_US"/>
          </Map>
        </value>
      </entry>
      <entry key="templateApplication" value="Salesforce Template"/>
      <entry key="url" value="https://test.salesforce.com/services/Soap/u/"/>
      <entry key="user" value="Test.admin@company.com"/>
    </Map>
  </Attributes>
  <Owner>
    <Reference class="sailpoint.object.Identity" id="6466b2809" name="3738928272"/>
  </Owner>


Share all details about your problem, including any error messages you may have received.

*[*Problem Statement:
I am attempting to onboard a Salesforce Sandbox application using OAuth2 (Password Grant). While the connection is successful when using Basic Authentication, switching to OAuth2 results in the following error:

[ InvalidConfigurationException ] [ Possible suggestions ] Verify that Username and Password are correct. [ Error details ] Failed to generate access token for invalid Username and Password.

Key Details:

  • Postman Success: The same Client ID, Client Secret, Username, and Password (appended with Security Token) work perfectly in Postman to generate an access token.

  • Credentials: I am using the format Password+SecurityToken in the password field.

Troubleshooting performed so far:

  1. Added OAuth2TokenURL to XML: Manually added <entry key="OAuth2TokenURL" value="https://salesforce.com"/> (and also tried the domain-specific sandbox URL) to the Application XML in the Debug page.]
2

Hi @Abhilash_77 - since you switched auth types, go into the XML and delete the sessionId and the serverUrl lines. This should clear out the cached values and allow it to grab the token.

image