Access Authorization Troubleshooting: Salesforce OAuth error¶
1 min read
The essence of the issue: after clicking on the “Salesforce Account” button to run RGES Add-In a Salesforce OAuth error OAUTH_APPROVAL_ERROR_GENERIC occurs:
It only happens if API use is enabled for the user in Salesforce.
The issue’s cause: the OAUTH_APPROVAL_ERROR_GENERIC error may occur on user logon if the user’s Profile in Salesforce is restricted by IP range limits. That also blocks any connections from Connected Apps.
To resolve the issue, first adjust Salesforce restricted IPs configuration for the concerned Profile, to ensure that the range includes the actual IP the user attempts a logon from, e.g. one outside of the corporate network:
1. Open Salesforce Setup, type Profiles in the Quick Find box and select Profiles
2. Expand relevant Profile’s settings by clicking on its name
3. On the Profile settings page, click Login IP Ranges to check and adjust the restrictions
If that does not help, also try changing Connected Apps restrictions to Relaxed:
By default, IP Relaxation is set to “Enforce IP restrictions” for any Connected Apps, this prevents RGES usage from unexpected IPs. To set “Relax IP restrictions”:
1. Open Salesforce Setup, type connected apps in the Quick Find box and select Manage Connected Apps
2. Select Revenue Grid for Salesforce and click Edit in the Action column
3. In the IP Relaxation field, select Relax IP restrictions
