salesforce how to login with javascript without security token

Question

I used the following resource to create a custom login page for my application.

http://brianpeddle.com/2011/06/06/building-a-custom-salesforce-login/

However, if the user is in an untrusted network, this approach necessitates the creation of a security token for each user, which changes when the user resets their password.

How can I make it such that numerous users can log in from this page? The only thing I can think of right now is adding an extra input box where the user may enter the security token along with their login and password. I'm curious if Salesforce allows javascript to dynamically collect security tokens for each user.

Answer 1

OAuth2 is a security protocol that allows Salesforce users to access their data without having to enter their username and password into an untrusted application or deal with nefarious token management.

A guide on how to install OAuth2 for web sites is available from Salesforce. If you've never worked with OAuth2, it can be tough to get started, but there are lots of resources accessible.

I would also recommend testing the use of OAuth2 with something like Firefox's RESTClient plugin (or something similar) to get a feel for authenticating against Salesforce.

Hope this helps!

For more, check out the Salesforce Training here!