Salesforce JWT Bearer Flow

Generates RSA keypairs, builds JWT assertions, exchanges them for access tokens, and validates Salesforce org connections. Handles the full lifecycle of JWT bearer authentication for server-to-server integration.

When to Use

• Setting up a new Connected App with JWT bearer flow
• Generating RSA keypairs for Salesforce authentication
• Testing JWT bearer token exchange against any Salesforce org
• Troubleshooting "invalid_grant" or "user hasn't approved this consumer" errors
• Configuring integration users for BFF/API layers

Workflow

Step 1: Identify Target Org

# List authenticated orgs
sf org list