Loading

Users Getting Frozen Due to OAuth Token Security Enhancement – Salesforce Voice (formerly Service Cloud Voice) REST API

Udgivelsesdato: Apr 30, 2026
Beskrivelse

Salesforce has introduced an OAuth token risk detection mechanism as part of an ongoing security improvement. In certain configurations, specifically orgs using Salesforce Voice (formerly Service Cloud Voice) REST API integrated via AWS Lambda "InvokeSalesforceRestApiFunction", this change may flag and revoke active OAuth tokens, causing the associated Salesforce User(s) to become frozen without any manual action.

 
 
How to identify if you are impacted:
  • Users in your org are unexpectedly frozen
  • Your Lambda function logs in AWS CloudWatch show the following API response from Salesforce:
{
"error": "invalid_grant",
"error_description": "authentication failure"
}
Løsning
This issue is currently under active review by Salesforce Product Engineering for a permanent fix.

In the meantime, a temporary opt-out is available. Please follow the steps below:

  1. Open a Salesforce Support case via the Salesforce Help Portal
  2. Reference this article and describe the symptoms (frozen users + invalid_grant errors in CloudWatch)
  3. Request the opt-out from the OAuth token auto-revocation feature for your org

 

Note: This opt-out is temporary (~1 month) and a permanent fix is actively being worked on. You'll be notified when it's available.
Vidensartikelnummer

005321430

 
Indlæser
Salesforce Help | Article