Setting Up OpenSSL and Creating a JWT Connected App in Salesforce

Step 1: Download and Install OpenSSL

1. Download OpenSSL: Download OpenSSL from the official website or a trusted source.
2. Install OpenSSL: Follow the installation instructions and install OpenSSL on your system.
3. Set Environment Variable PATH:
   • Include the OpenSSL binary path C:\Program Files\OpenSSL-Win64\bin in your system’s PATH environment variable.

Step 2: Configure OpenSSL and Generate Keys

1. Set OPENSSL_CONF Path:

2. Generate an RSA Private Key: Execute the following command to generate a private key (server.pass.key):

3. Create a Key File: Convert server.pass.key to server.key (your RSA private key):

4. Request and Generate a Certificate Signing Request (CSR):

During execution, provide the following information:

• Country Name: IN
• State or Province Name: Rajasthan
• Locality Name: Jaipur
• Organization Name: Techmatrix
• Organizational Unit Name: TMX
• Common Name: (Leave blank)
• Email Address: youremail@gmail.com

5. Generate the SSL Certificate:

Step 3: Create a JWT Connected App in Salesforce

3.1 Create the Connected App

1. Navigate to Setup:
   • Go to Setup in Salesforce.
   • Search for “Connected Apps” and click Setting Up OpenSSL and Creating a JWT Connected App in Salesforce“New Connected App.”
2. Fill in the Details:
   • Name: Provide a name for the app.
   • Email: Provide your email address.
   • Enable OAuth Settings:
     • Callback URL: http://localhost:1717/OauthRedirect
     • Check “Use Digital Signature” and upload the server.crt file created earlier.
     • Select OAuth Scopes:
       • Manage user data via APIs (api)
       • Manage user data via Web browsers (web)
       • Perform requests at any time (refresh_token, offline_access)
3. Save the App.

3.2 Admin Approvals

1. Go to Setup -> Manage Apps -> Connected Apps.
2. Click Manage against your connected app.
3. Set Permitted Users to Admin approved users are pre-authorized.
4. Save the changes.

3.3 Assign Access

1. Go to Setup -> Manage Users -> Profiles or Permission Sets.
2. Select the profile or permission set (e.g., “Integration profile”).
3. Click Assigned Connected Apps and assign the connected app.

Step 4: Create a JWT Token

4.1 JWT Token Structure

1. Headers:

2. Payload:

3. Signature: Generate the signature using the server.key.

4.2 Tools for Testing

Use https://jwt.io/ to create and validate your JWT token. You can obtain the current timestamp from https://unixtimestamp.com.

Step 5: Obtain Access Token via Postman

1. HTTP Method: POST
2. URL: https://login.salesforce.com/services/oauth2/token
3. Headers:
   • grant_type: urn:ietf:params:oauth:grant-type:jwt-bearer
   • assertion: Provide the JWT token created in Step 4.

Step 6: Obtain Access Token via Apex

A JSON Web Token (JWT) is divided into three parts: Header, Payload, and Signature. Here’s a breakdown of each:

1. Header

The Header contains metadata about the token, such as the algorithm used for signing and the token type. Typically, it looks like this:

• alg: Specifies the algorithm for signing the token, e.g., HS256 (HMAC with SHA-256).
• type: Indicates the type of token, usually JWT.

2. Payload

The Payload carries the actual data that needs to be verified or shared. This section can include information like usernames, roles, or any other claims relevant to authentication or authorization. For example:

• The Payload is often called the “claims” section because it contains statements about an entity (e.g., a user) and additional metadata.

3. Signature

The Signature is the result of combining the Header and Payload with a secret key provided by the third-party system. This combination is then encoded using Base64.

Below is the apex code which can be used to generate the token:-

Summary

You have successfully set up OpenSSL, created an SSL certificate, configured a Salesforce-connected app, and generated a JWT token for authentication. Use Postman to validate and obtain access tokens for further integration.