Authentication

Fielo PLT REST API uses a Salesforce's OAuth 2.0 protocol to allow users to securely access data without revealing user's credentials (username and password). All endpoints require secure HTTP (HTTPS).

📘

Authentication v. Authorization

There is a difference between Authentication and Authorization:

• Authentication: Proving correct identity.
• Authorization: Allowing a certain action.

An API might authenticate you but not authorize you to make a certain request.

Before you start

Here you have some steps to know before you start the OAuth2.0 process:

• Set up your application as a connected app in the Salesforce organization.
• Determine the correct Salesforce OAuth endpoint for your connected app to use.
• Authenticate the connected app user via one of several different OAuth 2.0 authentication flows. An OAuth authentication flow defines a series of steps used to coordinate the authentication process between your application and Salesforce. Supported OAuth flows include:
• Web server flow, where the server can securely protect the consumer secret.
• User-agent flow, used by applications that cannot securely store the consumer secret.
• Username-password flow, where the application has direct access to user credentials.

Next steps

After successfully authenticating the connected app user with Salesforce, you will receive an access token which can be used to make authenticated REST API calls. Click here for details.