Skip to main content

#Appexchage Apps25 人がディスカッション中

I'm trying to link a namespace to my Dev Hub org so I can build a second-generation (2GP) managed package. When I click Link Namespace on the Namespace Registries tab, the OAuth popup immediately returns:

error=invalid_request&error_description=missing required code challenge   

The popup is the internal Environment Hub authorization flow (the redirect URL ends in /environmenthub/soma-callback.apexp). It looks like the flow requires a PKCE code_challenge that it isn't sending.

What I've already tried:

  • "Require Proof Key for Code Exchange (PKCE) for Supported Authorization Flows" is OFF in both the Dev Hub org and the namespace org (Setup > OAuth and OpenID Connect Settings).
  • Reproduced in Chrome and Firefox, with third-party cookies allowed and popup blockers disabled.
  • Confirmed no other Salesforce sessions were open in the browser.

Environment:

  • Both orgs are Developer Edition, instance USA1044, created August 2026.
  • Dev Hub and "Enable Unlocked Packages and Second-Generation Managed Packages" are enabled on the hub org.
  • The namespace is registered in the separate (non-Dev-Hub) org.

Has anyone hit this since the Summer '26 PKCE enforcement? Is there a connected-app or Environment Hub setting I'm missing, or is a support case the only way to link the namespace?   

1 件の回答
0/9000

Hey ya'll! I am looking for a document signing/generating solution/app for Salesforce that is low cost but good. I wanted to use SDocs, because we have used it before, but it turns out that it doesn't work with Professional edition.   

Does anyone have another suggestion?   

My client has Adobe PDF (not Sign), but I could suggest she upgrades fi that is the best solution. I am needing this, ultimately, to be able to be part of a button that can generate a contract, and another that can generate an invoice, pulling in merge fields, etc.

Thank you for your suggestions!   

1 件の回答
0/9000

We have been using the Unsubscribe app successfully in our organization for many years without issue.  Just recently, I have been receiving error messages, stating:    The record passed to the flow was neither a lead nor a contact.  

 

This link has only been used in our templates on the contact object, and I am not sure why it is suddenly failing.    The error email is also not passing the recordid or email, so I am not able to determine where it is coming from.  Has anyone encountered this issue?       

1 件の回答
  1. 8月3日 12:24

    Hi @Maria Smachetti The error indicates that the flow is receiving a record that isn't a Lead or Contact, or the record ID isn't being passed correctly. Since this started recently, check whether any email templates, flows, or automation were updated and verify that the unsubscribe link is still passing the correct Contact ID. Also review the flow debug logs to identify which record is triggering the error. If everything looks correct, check for updates to the Salesforce Labs app or contact Salesforce Support, as it may be a recent issue with the package.

0/9000

This is regarding the recent salesforce notification on the blocking of uninstalled connected apps in the org.     How do we find out if such an app(uninstalled connected app found under the Connected Apps OAuth Usage as per the guidelines) has been currently in use?  Is it decided by the LastUsedDate field from the OAuthToken object?     Appreciate your help! 

5 件の回答
0/9000

 

I'm trying to install the

Field Service Dashboards Salesforce Labs package, but the installation fails with the following error:

Our org originally had 5 dynamic dashboards. We reduced the count to 4, but the installation still fails with the same error.

Could anyone confirm how many dynamic dashboards this package creates during installation? Also, is there a version of the package that installs the dashboards as standard (run as a specific user) instead of dynamic dashboards?

1 件の回答
  1. 8月3日 11:51

    Hi @Kalaiarasi Rajendhran The installation is likely failing because the package creates additional dynamic dashboards, causing your org to exceed the allowed limit. Even after reducing your existing dashboards, the package may still require more dynamic dashboard slots than are available. Check your org's dynamic dashboard limit and the package documentation to confirm the number of dashboards it installs. If you need standard dashboards instead, see if the package provides an alternate version or contact the package owner, as the dashboard type cannot be changed during installation.

0/9000

We're trying to install your package (AppExchange listing ID: a0N300000016ZsfEAE) into our Salesforce org and the install fails with:

Package url - https://appexchange.salesforce.com/appxListingDetail?listingId=a0N300000016ZsfEAE

(AppExchange Dashboard Pack for Sales, Marketing and Service) 

 

CustomField(Account.Data_Quality_Score__c)

You referenced an unsupported field type called "Text (Encrypted)" using the following field: LEN

CustomField(Contact.Data_Quality_Score__c)

You referenced an unsupported field type called "Phone (Encrypted)" using the following field: LEN

Context: Our org has Shield Platform Encryption enabled on Account.Phone and Contact.Phone (deterministic encryption) for HIPAA/PHI compliance, and we can't disable it. It looks like your Data_Quality_Score__c formula field calls LEN() on Phone, and Salesforce formulas can't reference encrypted fields — so the deploy is rejected.

Questions:

  1. Is there a package version or install option that excludes Phone (or other Shield-encryptable fields) from the Data_Quality_Score__c formula?
  2. Can we install first and customize/rebuild that formula afterward (a post-install config or "advanced install" mode)?
  3. Do you offer (or plan to offer) an Apex/Flow-based version of this scoring logic instead of a formula field, since Apex in system context can read encrypted values with proper permissions?
  4. Have other customers with Shield Platform Encryption hit this same conflict — and how was it resolved?

We'd prefer not to disable encryption on Phone, even temporarily, given compliance requirements.

Thanks, 

 

#Salesforce Labs  #Appexchage Apps

1 件の回答
  1. 7月31日 18:01

    Hi Ravi, 

     

    This is a hard platform limitation, not something specific to this package's install options — formula fields (including LEN() and any other function) simply cannot reference a field with Shield Platform Encryption enabled, regardless of encryption type (deterministic or probabilistic). There's no install mode, package version, or config toggle that can bypass this, since it's enforced at the metadata/formula-compilation level by the platform itself, not by the package. 

     

    Answering your questions directly: 

     

    1. No install option can exclude Phone from the formula while keeping the field itself unchanged — the formula field's definition is fixed at package build time. Since it's a Salesforce Labs package (community-supported, not a vendor with a support team), there's no "encrypted-field-safe" variant to switch to; you'd need to modify the metadata yourself post-install (see #2). 

     

    2. Yes — this is your real path forward. Since this is an unmanaged or lightly-managed Labs package (most Labs apps are), you should have edit access to the Data_Quality_Score__c formula after install. Deploy the package, then immediately edit that formula field to remove the LEN(Phone) reference (or rebuild the scoring logic to exclude Phone entirely). If the package is a managed package and the field is locked, you won't be able to edit it at all — worth confirming which type it is before installing. 

     

    3. Apex can read encrypted field values only if the running user has "View Encrypted Data" permission — it does NOT bypass encryption for everyone, and even Apex referencing encrypted fields in a SOQL WHERE clause or certain operations has platform restrictions (you can query and return encrypted field values to permitted users, but can't do things like LIKE filtering on ciphertext for probabilistic encryption). So an Apex/Flow version could work for LEN()-style logic, but only for users granted View Encrypted Data — it's not a clean drop-in replacement without also managing that permission carefully. This isn't something you can get "from the package" as-is; it'd require custom rebuilding of the Data_Quality_Score__c logic in Apex. 

     

    4. This is a well-known Shield Platform Encryption conflict for any formula field on Account/Contact.Phone or similar PII fields — anyone using Shield Encryption commonly hits this with any AppExchange package (Labs or paid) that includes formula fields referencing standard PII fields. The typical resolution is exactly what's in #2: install, then manually rebuild/adjust the offending formula fields to exclude the encrypted field, since there's no vendor-side fix that works universally across different customers' encryption configurations. 

     

    Practical recommendation 

    Since this is a Labs package (no formal support team, as you may already know from prior threads on this), your fastest path is: 

    - Check if it's managed or unmanaged (Setup > Installed Packages, or check the AppExchange listing type) 

    - If unmanaged: install, then edit Data_Quality_Score__c to remove the Phone reference and replace it with a non-encrypted proxy (e.g., checking Phone <> null via a different mechanism, or scoring based on other non-encrypted fields only) 

    - If managed and the field is locked: you likely can't fix it directly — you'd need to clone the package's dashboard/report logic into your own custom fields that reference a non-encrypted proxy field instead

0/9000

I want to install a Field Service Dashboard package from AppExchange. 

However, when I try to install the package, it redirects me to the login page. Whether I use the custom domain URL or change the URL to 

test.salesforce.com

, after logging in, I receive the following error . 

Thanks in advance!!

Field Service Dashboard Package Installation Error

 

 

 

#Appexchage Apps

6 件の回答
  1. 2025年5月7日 5:54

    Hi Kavya, 

     

    It seems you are trying to install this in Sandbox if I am not wrong. 

    So you need to click on tryIt button then only you will be able to install in Sandbox. 

     

    Hi Kavya, It seems you are trying to install this in Sandbox if I am not wrong. So you need to click on tryIt button then only you will be able to install in Sandbox.

     

    Screenshot 2025-05-07 112428.png

     

     

     

0/9000

Hi all, 

 

I posted a similar followup to a years-old question asked by someone else, but I need some clarity from the community. 

 

Our use case:  When we implemented Salesforce back in 2012/2013 we had several custom objects related to the Contact.   These are read-only, for reporting/viewing purposes only.  A scheduled integration/automation "pushes" recent changes (audited on the database server level) from our Student Information System to these custom objects (they send upsert OR delete calls via SOAP API, based on a calculated "external ID" key field). 

 

As can be expected, for various reasons we have had data become "out of sync" or "stale" in relation to our SIS.  I have been making a strong push to move to External Objects.   This would provide real-time viewing of the related data from our SIS.  I coded an oData 2.0 data source from scratch to expose the tables/views and the related external objects.  I was able to consume the oData service in Salesforce "External Data Sources."  I modified the resulting external objects as needed (field length, type, lookup relationships, etc.).   I added the related lists to Contact page layouts.   All was looking great. 

 

Then the issue of reporting came up.  Some associates report on this data, and filter on it.   ONe of thse custom objects is called "Service Indicator."  

 

In our Environment, EnrollmentRx is our "main" App Exchange package and their primary object is "Application".   This object has a lookup relationship to Contact - a master/detail relationship to be exact.   So one contact can have many applications.  Contact is required. 

 

Auto-created Report type: Applications with Contacts.   

 

So with the custom object, which also had a master/detail relationship with Contact, the team was able to create a new report type Applications with Contacts with Service Indicators.  A must have B, B must have C.  The team also created reports with filters like "Application Status = Enrolled" and "Service indicator Code = XXX".  This would produce a report of only applications with that status, only service indicators with that code, tied together by the Contact relationship. 

 

Now they tried creating a new report type with the external object (call it Ext Service Indicator) as the C record instead.   Again, the same way A must have B and B must have C.  Things looked promising at first - the Application Status filters worked as normal, as did any other filters on Contact or Application. 

  However, filters on Ext Service Indicator are not applied before the "join" is done behind the scenes.  So if there are ANY Ext Service Indicator records related to the Contact, a row will be returned in the report, with null/placeholder values for any of the Ext Service Indicator fields in the report. 

 

This is clearly different than how the filters work with "regular" custom objects.   I tried modifying the Contact lookup on the external object to be indirect lookup, or a "regular" lookup (we do store the SFDC ContactID in our SIS when we first pull over the applicant/application data from Salesforce).  It made no difference. 

 

I was thinking there must be a way to make this work.   We can't do master/detail lookups/relationships on external objects - unless there is something I missed and if so please let me know if I am wrong.   Here are some other alternatives I tried: 

 

Ext Service Indicator as primary object ("A" record) in report type:  I can't use Contact or Application as the B record as ther is no parent/child relationship.   So I included Contact fields via the Contact lookup, and then Applciation records via the "Active Application" lookup on the Contact (this is not optimal but I wanted to see what would happen).   This returned an error because the row count for the various subsets was too high. 

 

Joined report - Report type Ext Service Indicator the only object.   Tried joining the Applications with Contacts report type, and also just the Contact report type.   Apparently there is no common field, though both have a lookup to Contact. 

 

I am at a loss and short of creating separate external objects that match specific subsets of pre-filtered values, which would be nightmarish to maintain, I cannot think of any workable solution.      I had advocated for external objects for a long time and the college was willing to give it a shot.   Now I find myself needing to explain yet one more "quirk" preventing adoption.  We are charged for storage space for copying data into custom objects, so external objects would allow us to delate that data and free up some storage space.   This was another "selling" point on my part.   We do not want to store duplicate/copied data in our CRM unless absolutely necessary. 

 

I am honestly at a point where my only recommendation to the team is to report directly from our SIS or some other external reporting tool if possible, unless anyone here has been able to find a workaround to filtering on external objects when they are not the "A" record in the report definition.   Or if you have some up with some way to use joined reports in a way that enforces filters on external objects and correctly links the two and knocks out non-matching rows (by definition, in my example, all Applications with have a Contact, and all Service Indicators will have a Contact).  I am a bit concerned when I read that even if I had a joined report it would still be similar to an "outer join" so I had to start with Ext Service Indicator as the primary object and put me right back in the same quandry. 

 

I look forward to hearing from any of you who have found a workable solution, using the delivered Report Type / Reports functionality in Salesforce.   Purchasing third-party analytics/reporting tools from the App Exchange is not an option for us, just FYI. 

 

Thanks so much for any insights you may have, and pointers as to what I am doing incorrtectly if applicable.  I think the issue is there is not a "master-detail" relationship as I think that would only make sense with real objects (as there are rules that concern deleting parents will delete children, etc. and this really would not apply to externally-hosted data). 

 

Peace, 

Jim  

 

#Appexchage Apps  #Reporting  #Reports & Dashboards

2 件の回答
  1. 7月26日 19:07
0/9000

We created a Developer Edition org as our AppExchange Security Review test org. It has the reviewed package installed and configured, with:

  • One System Administrator user.
  • One Salesforce Standard User for testing the normal-user permission flow.
  • Sample test records only.

We plan to provide both user credentials through the Security Review Wizard. However, logging in from a new browser triggers device activation and sends an OTP to the users’ registered email addresses, even though MFA is disabled.

How should we provide this org to Salesforce reviewers so they can log in independently without contacting us for the email OTP? Is there an approved setup for reviewer access to a Developer Edition org?    

1 件の回答
  1. 7月26日 16:37

    Hi Zinzalian, 

     

    Salesforce Security Reviewers don't have a special mechanism to bypass device activation or email OTP

    for a Developer Edition org. If a login is considered to be from a new or unrecognized device, Salesforce may require identity verification even when MFA is disabled, as device activation is a separate security feature. 

     

    The usual approach for AppExchange Security Review is to: 

     

    • Provide the test org credentials (admin and standard user) through the Security Review Wizard.
    • Ensure the user accounts have valid, accessible email addresses.
    • If reviewers encounter a one-time device activation challenge, be prepared to assist by providing the verification code.
    • Include any special login instructions or known prerequisites in the review notes so the reviewers know how to access the org.

    There isn't a documented, reviewer-specific configuration that disables email OTP or grants Salesforce reviewers trusted access to a Developer Edition org. If you need a way for reviewers to log in without manual OTP assistance, it's best to open a case with the AppExchange Security Review team and ask whether they have an approved process for your submission.

0/9000

Hello!    Is there a URL link shortner that i can use in Salesforce that will automatically shorten url links after a user pastes a url into a text field?    Looking for an automated solution that doesnt require manual shortening before copying and pasting into a field. (this is specifically for Sharepoint links)    Thanks!     @Steve Molis

2 件の回答
0/9000