topic RE: Salesforce API skills; Error in "GetTokenActive" in authenticate credential process in Digital Exchange

Salesforce API skills; Error in "GetTokenActive" in authenticate credential process

Navitha — Mon, 08 Mar 2021 13:06:00 GMT

Hi,

When I am running "GetTokenActive" step in authenticate page, I am getting the below error.

------------------------------
Navitha K
------------------------------

RE: Salesforce API skills; Error in "GetTokenActive" in authenticate credential process

ewilson — Tue, 09 Mar 2021 16:13:00 GMT

Hi Navitha,

Can you confirm that you're running the test process available from the DX? If so, can you also confirm that the Authenticate stage, just before the GetTokenActive stage returned a successful response? In other words you received an access token and instance URL value?

Cheers,

------------------------------
Eric Wilson
Director, Partner Integrations for Digital Exchange
Blue Prism
------------------------------

RE: Salesforce API skills; Error in "GetTokenActive" in authenticate credential process

Navitha — Wed, 10 Mar 2021 13:22:00 GMT

Hi Wilson,

Thank you for the response.

I am running the test process which is available from the DX.
In the Authenticate stage, I am getting http status code as 200 and also instance URL value. But when I am running GetTokenActive stage, it is getting failed.

------------------------------
Navitha K
------------------------------

RE: Salesforce API skills; Error in "GetTokenActive" in authenticate credential process

ewilson — Wed, 10 Mar 2021 15:38:00 GMT

Ok, so according to what I've seen on various Salesforce.com forums the 401 error with "invalid_client" indicates that SFDC believes the Client ID and/or Client Secret you're passing in is invalid. I would verify that what was copied into the Salesforce Grant credential in Credential Manager, for the Consumer Key and Consumer Secret properties, are correct values. Make sure there's no additional white space at the beginning or end of the values.

An additional step you can take to verify those values is to go into System -> Objects -> Web API Services and open the Salesforce Authentication service definition. Click on the Salesforce Token Introspection action and check the flags next to Enable Request Data Output Parameter and Disable Sending of Request. After that, go back to your test process (make sure to click the reload button if it was already open so it picks up the changes in the Web API) and double-click on the GetTokenActive stage. Go to the Outputs tab and create a new data item for the Request Data output. Then run the process and see what the request includes in the body. It should look something like this:

token=[Access Token]&client_id=[Consumer Key]&client_secret=[Consumer Secret]&token_type_hint=[token_type_hint]

Compare the values of Consumer Key and Consumer Secret with your credential from SFDC.

Cheers,

------------------------------
Eric Wilson
Director, Partner Integrations for Digital Exchange
Blue Prism
------------------------------

RE: Salesforce API skills; Error in "GetTokenActive" in authenticate credential process

Navitha — Thu, 11 Mar 2021 03:25:00 GMT

After checking those flags in Salesforce Token Introspection and running the test process, it is giving the below error in GetTokenActive stage.

------------------------------
Navitha K
------------------------------

RE: Salesforce API skills; Error in "GetTokenActive" in authenticate credential process

ewilson — Thu, 11 Mar 2021 13:43:00 GMT

Hmm, that's interesting, but I verified I get the same error on my side. That's the first time I've seen BP throw a fit when setting those values. My only guess is that it's still trying to execute the custom code tied to processing the Response - which it shouldn't.

Anyway, back to the issue at hand. One thing I noticed in my copy of the test process is that no value was set for the input Login URL on the GetTokenActive stage. Can you confirm that you've set the value for that to [Instance URL] ?

Cheers,

------------------------------
Eric Wilson
Director, Partner Integrations for Digital Exchange
Blue Prism
------------------------------

RE: Salesforce API skills; Error in "GetTokenActive" in authenticate credential process

Navitha — Thu, 11 Mar 2021 15:47:00 GMT

No value has been set for the input Login URL

------------------------------
Navitha K
------------------------------

RE: Salesforce API skills; Error in "GetTokenActive" in authenticate credential process

ewilson — Thu, 11 Mar 2021 16:03:00 GMT

Ok. Rollback the two changes you made in the Web API service definition, and then set the value of the Login URL item on the GetTokenActive stage to [Instance URL] and see how that works.

Cheers,

------------------------------
Eric Wilson
Director, Partner Integrations for Digital Exchange
Blue Prism
------------------------------

RE: Salesforce API skills; Error in "GetTokenActive" in authenticate credential process

Navitha — Thu, 11 Mar 2021 16:54:00 GMT

After setting the value of the login URL item in GetTokenStage to [Instance URL] also, it is showing as invalid credentials.

I also tried with the login value to https://login.salesforce.com but still it is showing the error.

------------------------------
Navitha K
------------------------------

RE: Salesforce API skills; Error in "GetTokenActive" in authenticate credential process

Navitha — Thu, 11 Mar 2021 16:55:00 GMT

In the Expiry data item, I am getting the value as 1/1/1970 12.00.01 AM. It is not showing the current date.

------------------------------
Navitha K
------------------------------

RE: Salesforce API skills; Error in "GetTokenActive" in authenticate credential process

ewilson — Thu, 11 Mar 2021 17:14:00 GMT

You're talking about right here?

If so, can you show the definition of the Get Token Expiry stage. It should look like this:

Lastly, what does your Salesforce Token credential definition look like?

Ultimately, the expiry date at the top of the flow shouldn't cause a problem because it will be set lower in the flow once you have a valid authentication. Look at the stages after GetTokenActive.

Cheers,

------------------------------
Eric Wilson
Director, Partner Integrations for Digital Exchange
Blue Prism
------------------------------

RE: Salesforce API skills; Error in "GetTokenActive" in authenticate credential process

Navitha — Thu, 11 Mar 2021 17:22:00 GMT

Yeah, it is same as shown. still getting the error as invalid credentials.

------------------------------
Navitha K
------------------------------

RE: Salesforce API skills; Error in "GetTokenActive" in authenticate credential process

ewilson — Thu, 11 Mar 2021 17:53:00 GMT

I'm about out of ideas. Ultimately the error response is being returned from Salesforce.com, so we know you're getting there. However, Salesforce doesn't like the credentials you're providing. You are getting an HTTP 200 response from the Authenticate stage, just before GetTokenActive, correct? And the values for Response Content, SFDC Access Token, and Instance URL data items are being populated?

------------------------------
Eric Wilson
Director, Partner Integrations for Digital Exchange
Blue Prism
------------------------------

RE: Salesforce API skills; Error in "GetTokenActive" in authenticate credential process

Cech.Jan — Thu, 11 Mar 2021 17:58:00 GMT

Hi I was fighting with this issue few weeks later, and this setting works form me, maybe it will help you:

Use 2 credentials:

Salesforce Authentication (for password and username)(GRANT):

*Consumer Key and Consumer Secret you can find in SF under your API Account

Salesforce Token (for secured tokens from SF) (TOKEN):

*this works only as temp envelop for saving Expiry and Instance URL params, no credentials (username and password) set in this

In Web API - Salesforce authentication check this setting on "Common Authenticatiuon" - there must be set Credentilas where you have stored Expiry and Instance URL - In my case its named Salesforce Token UAT

In process:
1. Authenticate

2. Get Active Token

Sorry for long post, but sometimes picture can say more then words.

Jan

------------------------------
Jan Čech
Senior RPA Specialist
VWFS
Europe/London
------------------------------

RE: Salesforce API skills; Error in "GetTokenActive" in authenticate credential process

Navitha — Fri, 12 Mar 2021 11:28:00 GMT

Hi,

Thank you for your response.
In additional to the above settings you have mentioned, I have checked the expires in salesforce grant and salesforce token.

After checking that in credentials, the process is running successfully without error.

------------------------------
Navitha K
------------------------------

RE: Salesforce API skills; Error in "GetTokenActive" in authenticate credential process

Navitha — Fri, 12 Mar 2021 11:30:00 GMT

Thank you Wilson and Jan for your responses

------------------------------
Navitha K
------------------------------