7.2.25.1 How to authenticate / authorize ADvendio for OAuth

Challenge:

As an Administrator you are planning to use the ADvendio Booking Calendar Lightning and Inventory Forecast features, in order to automate your business flows and be more efficient but you are getting the following error or are working on the setup:

Error: Error create JWT access token

Solution:

Don’t worry, this message doesn’t mean there is a problem, but just that you need to allow the ADvendio Gateway to access your data for our features to work.

If you have the Connect module implemented you can just continue with the steps described here: https://advendio.atlassian.net/wiki/spaces/SO/pages/2861105153

Which data is accessed?

The ADvendio Gateway will only access Salesforce data that is required for its features. This mainly covers ADvendio objects such as Media Campaigns or Campaign Items.

We will not access any personal user information such as address, email or date of birth.

To configure this, you need to do the following:

Change the ADvendio connected app settings

  • Go to the Salesforce Setup and look for the ‘Manage Connected Apps’ section.

 

  • Click the ‘Edit’ button next to the connected app called: ADvendio Connector.

  • You will be directed to a setup page where you can see a list of permitted users. Select the option ‘Admin approved users are pre-authorized

 

This now changed the ADvendio connection, so that users won’t authorize themselves, but the Admin chooses which users are authorized.

Assign ADvendio Connected App permissions

The next step is to grant access permissions to the required users for the ADvendio-connected app. This can be achieved through Permission Sets or User Profiles.

As an example, we demonstrate here how to perform the process for Permission Sets:

  • When editing your permission set, open ‘Assigned Connected Apps’

  • Now you see a list of all Connected Apps. Select ADvendio and Move ADvendio from the left list to the right list to enable it for the permission set.

  • Continue to save the permission set and assign it to the users, who need to access ADvendio connect.

 

App_ACCESS_DENIED Error

If you activate the Admin authorization as described above, some users might receive the following error message:

 

Connected Apps OAuth Usage

Something went wrong!

Error: OAUTH_APP_ACCESS_DENIED user is not admin approved to access this app. Please get in touch with your System Administrator for further support.

This means, that the user does not have the required permission to use the connected app ADvendio. Please check your Profile and Permission Set settings.

ADvendio Connected Apps (Remove legacy app)

When reviewing the setup, you might see there are two connected apps:

  • ADvendio

  • ADvendio Connector

Starting Version 2.169, ADvendio Connector will be the app to use. The legacy ADvendio Connected App will be deprecated and not relevant anymore.

Due to Salesforce limitations, it is currently not possible to completely remove the legacy ‘ADvendio' app, however it will not be used or accessed by any of our package components anymore, so it should have no negative impact on business and performance.

We recommend to use the action ‘block’ in order to block all users from further accessing the connected app ‘ADvendio’