Skip to content

Commit fa44970

Browse files
committed
S2S TSGs
1 parent 4f88a75 commit fa44970

4 files changed

Lines changed: 154 additions & 1 deletion

File tree

Lines changed: 53 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,53 @@
1+
---
2+
title: Access denied for this user error when accessing Salesforce with server-to-server flow
3+
description: Resolves an error that occurs due to invalid permissions of the connected app in Salesforce.
4+
ms.date: 05/12/2025
5+
author: sbmjais
6+
ms.author: shjais
7+
ms.custom: sap:CRM Permissions and Configurations\CRM Settings
8+
---
9+
10+
# "Access denied for this user" error when accessing Salesforce with server-to-server flow
11+
12+
This article helps you troubleshoot and resolve the "Access denied for this user" error when you access Salesforce with server-to-server flow.
13+
14+
## Who is affected?
15+
16+
| Requirement type |Description |
17+
|---------|---------|
18+
|**Client app** | Copilot for Sales Outlook add-in |
19+
|**Platform** | Web and desktop clients |
20+
|**OS** | Windows and Mac |
21+
|**Deployment** | User managed and admin managed |
22+
|**CRM** | Salesforce |
23+
|**Users** | All users |
24+
25+
## Symptoms
26+
27+
When a user tries to access Salesforce with server-to-server flow, the following error message is displayed.
28+
29+
> Access denied for this user.
30+
31+
The related error message reads "User doesn't have admin permission to access the connected app."
32+
33+
## Cause
34+
35+
During Salesforce server-to-server flow setup, a connected app is deployed to the Salesforce organization. The connected app is associated with an integration user. An access token is retrieved with the credentials of the connected app. The error occurs when the integration user is not approved to access the connected app.
36+
37+
## Resolution
38+
39+
To resolve this issue, you must fix the connected app configuration in Salesforce.
40+
41+
1. Sign in to Salesforce CRM as an administrator.
42+
1. Go to **Setup** > **Platform Tools** > **Apps** > **Connected Apps** > **Managed Connected Apps**.
43+
1. On the **Connected Apps** page, select **Copilot for Sales Connected App**.
44+
1. Under **Custom Connected App Handler**, ensure that the value of **Run As** is set to **Copilot for Sales Integration User**.
45+
1. Go to **Administration** > **Users** > **Users** and confirm that the profile of the integration user is **CopilotForSalesIntegrationProfile**.
46+
47+
Also, check is there were unintended changes made to the connected app configuration. If yes, revert the changes to the original configuration.
48+
49+
## More information
50+
51+
If your issue is still unresolved, go to the [Copilot for Sales - Microsoft Community Hub](https://techcommunity.microsoft.com/t5/viva-sales/bd-p/VivaSales) to engage with our experts.
52+
53+
[!INCLUDE [Third-party disclaimer](../../includes/third-party-disclaimer.md)]
Lines changed: 47 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,47 @@
1+
---
2+
title: Server-to-server authorization failed error when accessing Salesforce with server-to-server flow
3+
description: Resolves an error that occurs due to invalid secret of the connected app in Salesforce.
4+
ms.date: 05/12/2025
5+
author: sbmjais
6+
ms.author: shjais
7+
ms.custom: sap:CRM Permissions and Configurations\CRM Settings
8+
---
9+
10+
# "Server-to-server authorization failed" error when accessing Salesforce with server-to-server flow
11+
12+
This article helps you troubleshoot and resolve the "Server-to-server authorization failed" error when you access Salesforce with server-to-server flow.
13+
14+
## Who is affected?
15+
16+
| Requirement type |Description |
17+
|---------|---------|
18+
|**Client app** | Copilot for Sales Outlook add-in |
19+
|**Platform** | Web and desktop clients |
20+
|**OS** | Windows and Mac |
21+
|**Deployment** | User managed and admin managed |
22+
|**CRM** | Salesforce |
23+
|**Users** | All users |
24+
25+
## Symptoms
26+
27+
When a user tries to access Salesforce with server-to-server flow, the following error message is displayed.
28+
29+
> Server-to-server authorization failed.
30+
31+
The related error message reads "Couldn't get client credentials to access Salesforce.".
32+
33+
## Cause
34+
35+
During Salesforce server-to-server flow setup, a connected app is deployed to the Salesforce organization. The connected app is associated with an integration user. An access token is retrieved with the client ID and the secret of the connected app. The error occurs when the secret is invalid.
36+
37+
## Resolution
38+
39+
To resolve this issue, contact Microsoft support and provide the following information:
40+
- If the connected app "Copilot for Sales Connected App" was updated accidentally.
41+
- If the connected app is still available, get the client ID of the connected app.
42+
43+
## More information
44+
45+
If your issue is still unresolved, go to the [Copilot for Sales - Microsoft Community Hub](https://techcommunity.microsoft.com/t5/viva-sales/bd-p/VivaSales) to engage with our experts.
46+
47+
[!INCLUDE [Third-party disclaimer](../../includes/third-party-disclaimer.md)]
Lines changed: 47 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,47 @@
1+
---
2+
title: Trouble connecting to Salesforce error when accessing Salesforce with server-to-server flow
3+
description: Resolves an error that occurs due to invalid client ID of the connected app in Salesforce.
4+
ms.date: 05/12/2025
5+
author: sbmjais
6+
ms.author: shjais
7+
ms.custom: sap:CRM Permissions and Configurations\CRM Settings
8+
---
9+
10+
# "Trouble connecting to Salesforce" error when accessing Salesforce with server-to-server flow
11+
12+
This article helps you troubleshoot and resolve the "Trouble connecting to Salesforce" error when you access Salesforce with server-to-server flow.
13+
14+
## Who is affected?
15+
16+
| Requirement type |Description |
17+
|---------|---------|
18+
|**Client app** | Copilot for Sales Outlook add-in |
19+
|**Platform** | Web and desktop clients |
20+
|**OS** | Windows and Mac |
21+
|**Deployment** | User managed and admin managed |
22+
|**CRM** | Salesforce |
23+
|**Users** | All users |
24+
25+
## Symptoms
26+
27+
When a user tries to access Salesforce with server-to-server flow, the following error message is displayed.
28+
29+
> Trouble connecting to Salesforce.
30+
31+
The related error message reads "Couldn't get Client ID for access token retrieval from Salesforce. The connected app might be misconfigured.".
32+
33+
## Cause
34+
35+
During Salesforce server-to-server flow setup, a connected app is deployed to the Salesforce organization. The connected app is associated with an integration user. An access token is retrieved with the client ID and the secret of the connected app. The error occurs when the client ID is invalid.
36+
37+
## Resolution
38+
39+
To resolve this issue, contact Microsoft support and provide the following information:
40+
- If the connected app "Copilot for Sales Connected App" was deleted accidentally.
41+
- If the connected app is still available, get the client ID of the connected app.
42+
43+
## More information
44+
45+
If your issue is still unresolved, go to the [Copilot for Sales - Microsoft Community Hub](https://techcommunity.microsoft.com/t5/viva-sales/bd-p/VivaSales) to engage with our experts.
46+
47+
[!INCLUDE [Third-party disclaimer](../../includes/third-party-disclaimer.md)]

support/sales-copilot/toc.yml

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,8 +2,10 @@
22
href: welcome-sales-copilot.yml
33
- name: CRM permissions and configurations
44
items:
5+
- name: '"Access denied for this user" error'
6+
href: crm-permissions-and-configurations/access-denied-sf-ss.md
57
- name: '"Align missing fields" error'
6-
href: crm-permissions-and-configurations/align-missing-fields-error.md
8+
href: crm-permissions-and-configurations/align-missing-fields-error.md
79
- name: Can't update records due to missing record access in Salesforce CRM
810
href: crm-permissions-and-configurations/missing-record-update-edit-access.md
911
- name: Can't update records due to missing object access in Salesforce CRM
@@ -24,8 +26,12 @@
2426
href: crm-permissions-and-configurations/no-column-error.md
2527
- name: Salesforce CRM users can't view, edit, or save data in Copilot for Sales
2628
href: crm-permissions-and-configurations/salesforce-permission-error.md
29+
- name: '"Server-to-server authorization failed" error'
30+
href: crm-permissions-and-configurations/auth-failed-sf-ss.md
2731
- name: '"This contact already exists" error when creating a CRM record'
2832
href: crm-permissions-and-configurations/duplicate-record-error.md
33+
- name: '"Trouble connecting to Salesforce" error'
34+
href: crm-permissions-and-configurations/trouble-connect-sf-ss.md
2935
- name: You don't have permission for this error
3036
href: crm-permissions-and-configurations/no-admin-exists-error.md
3137
- name: Outlook side panel

0 commit comments

Comments
 (0)