Skip to main content

Salesforce troubleshooting

This topic describes errors you may encounter when using the Salesforce adapters, and possible resolutions. Many authentication errors relate to the Manual OAuth flow selected with the OAuth Authorization Flows property and the configuration of the corresponding Connected App or External Client App in Salesforce (see Salesforce Connected Apps and External Client Apps).

Exception

Resolutions

invalid_grant

Returned with the JWT_BEARER flow when the token is not accepted. Verify the JWT signature: confirm that the certificate registered in the Salesforce app matches the keystore specified in JWT Keystore Path and JWT Certificate Name, and that the token has not expired.

user hasn't approved this consumer

The user has not been pre-authorized for the app. In the Salesforce app's OAuth policies, set Permitted Users to Admin approved users are pre-authorized, and assign the appropriate profile or permission set to the user specified in the Username property.

no client credentials user enabled

The app is not configured for the client credentials flow. Verify that the OAuth Authorization Flows property matches the flow the Salesforce app is configured for (JWT_BEARER or CLIENT_CREDENTIALS), and that the Client Credentials Flow is enabled in the app's OAuth policies with a run-as user assigned.

REQUEST_LIMIT_EXCEEDED

The Salesforce org's API request limit has been reached. Increase the adapter's Polling Interval property, reduce Thread Pool Size (Thread Pool Count in some adapters) to match your Salesforce Concurrent API Request Limit, or contact Salesforce to raise your API limits (see Salesforce Developer Limits and Allocations Quick Reference).

Application halts when the access token expires

When Auto Auth Token Renewal is False, the application halts when the token specified in Auth Token expires, and you must update the token before restarting. For production environments, set Auto Auth Token Renewal to True and configure one of the Manual OAuth flows so that the adapter renews the token automatically.