function readOnly(count){ }
Starting November 20, the site will be set to read-only. On December 4, 2023,
forum discussions will move to the Trailblazer Community.
+ Start a Discussion
Benj BayfieldBenj Bayfield 

INVALID_LOGIN exceptions with IP restrictions

We have an AppExchange package which uses IFrames and connects to salesforce from our web server via the partner wsdl.

 

Most customers use the combination of username/password/security token to authenticate. However, one client uses IP restrictions on the User Profile, and doesn't enter their security token.

 

I have tested this both on profile restrictions and on organization-wide restrictions, and this seems to work for me with my test profiles. However, the client's attempts are always greeted with:

INVALID_LOGIN: Invalid username, password, security token; or user locked out.

 

The client tells me that the IP address is entered correctly, the API is enabled, they are entering their credentials correctly and that their account is not locked out.

 

Are there any other factors in play that I haven't thought of? They are a big client, and I really need this to work for them.

SuperfellSuperfell

Have them look at whats reported in login histor for the failed attempt.

Vinita_SFDCVinita_SFDC

Hello,

 

I would suggest you to check login history of any of the user where you will find the reson for login failure. As per me following could be the reasons:

 

1) IP of the user is not listed in IP ranges defined.

2) User are login out of Business hours defined for the Org.