Authenticate using the SOAP login request

-

Login using the SOAP login request and from then on use the session token for making REST API requests.In this we need to pass Username and Password as credentials.Upon invocation, the API authenticates the credentials . It then returns the sessionId, the user ID associated with the logged-in username, and a URL that points to the Lightning Platform API to use in all subsequent API calls.If Salesforce returns a Login fault , try adding the security token at the end of the user’s password. 

The limit is 3,600 calls to login() per user per hour. Exceeding this limit results in a “Login Rate Exceeded” error. After reaching the hourly limit, Salesforce blocks the user from logging in. Users can try to log in again an hour after the block occurred.


Sample Code -

            HTTPRequest request = new HTTPRequest();
            String username = 'rpatnaik@docmation.com';
            String password = 'Docmation$30092';
            String organisationId = '00D3OXXXXXX8X7x';
            String loginXML = '';
            loginXML+= '<?xml version="1.0" encoding="UTF-8"?>';
            loginXML+= '<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:ns1="urn:partner.soap.sforce.com">';
            loginXML+= '<SOAP-ENV:Header>';
            loginXML+= '<ns1:LoginScopeHeader><ns1:organizationId>';
            loginXML+= organisationId;
            loginXML+= '</ns1:organizationId></ns1:LoginScopeHeader>';
            loginXML+= '</SOAP-ENV:Header>';
            loginXML+= '<SOAP-ENV:Body>';
            loginXML+= '<ns1:login>';
            loginXML+= '<ns1:username>'+username+'</ns1:username>';
            loginXML+= '<ns1:password>'+password+'</ns1:password>';
            loginXML+= '</ns1:login>';
            loginXML+= '</SOAP-ENV:Body>';
            loginXML+= '</SOAP-ENV:Envelope>';

            request.setEndpoint(config.Community_Base_URL__c+'/services/Soap/u/50.0');
            request.setMethod('POST');
            request.setHeader('SOAPAction', 'login');
            request.setHeader('Accept','text/xml');
            request.setHeader('Content-Type', 'text/xml;charset=UTF-8');
            request.setBody(loginXML);

            try{
                if(!Test.isRunningTest()){
                    HttpResponse response = new Http().send(request); 
                    sessionId = response.getStatusCode() == 200 ? getValueFromXMLString(response.getBody(), 'sessionId') : null;
                }
                else{
                    sessionId = '';
                }
               
            }catch(Exception e){

            }
        }
        System.debug( 'sessionId---'+sessionId);
        return sessionId;
    }

    public static string getValueFromXMLString(string xmlString, string keyField){
        String xmlKeyValue = '';
        if(xmlString.contains('<' + keyField + '>')){
            try{
                xmlKeyValue = xmlString.substring(xmlString.indexOf('<' + keyField + '>')+keyField.length() + 2, xmlString.indexOf('</' + keyField + '>'));   
            }catch (exception e){
                 
            }            
        }
        return xmlKeyValue;
    }

Response - 

<?xml version="1.0" encoding="UTF-8"?>
<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns="urn:tooling.soap.sforce.com" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<soapenv:Body>
    <loginResponse>
        <result>
            <metadataServerUrl>https://docmation.my.salesforce.com/services/Soap/m/41.0/00D8E00x009MIn</metadataServerUrl>
            <passwordExpired>false</passwordExpired>
            <sandbox>true</sandbox>
            <serverUrl>https://docmation.my.salesforce.com/services/Soap/T/41.0/00D8E0000009MIn</serverUrl>
            <sessionId>00D8xx0009MIn!AQUAQAKlWxxuowH_1DK7ic52WzqCrxgyDRaPsrr9L8JgGRpv7l5oBmVFJGSs2tsKuxWAPum7vT2IlM7AuGt7vf.qG.3M8R_</sessionId>
            <userId>0058E0000xxWmT4QAK</userId>
            <userInfo>
                <accessibilityMode>false</accessibilityMode>
                <chatterExternal>false</chatterExternal>
                <currencySymbol>£</currencySymbol>
                <orgAttachmentFileSizeLimit>5242880</orgAttachmentFileSizeLimit>
                <orgDefaultCurrencyIsoCode>GBP</orgDefaultCurrencyIsoCode>
                <orgDefaultCurrencyLocale>en_GB</orgDefaultCurrencyLocale>
                <orgDisallowHtmlAttachments>false</orgDisallowHtmlAttachments>
                <orgHasPersonAccounts>true</orgHasPersonAccounts>
                <organizationId>00D8x00009MInUAM</organizationId>
                <organizationMultiCurrency>false</organizationMultiCurrency>
                <organizationName>Docmation</organizationName>
                <profileId>00e580000xydBAAQ</profileId>
                <roleId>00E8E0000xbcdhUAA</roleId>
                <sessionSecondsValid>28800</sessionSecondsValid>
                <userDefaultCurrencyIsoCode xsi:nil="true"/>
                <userEmail>rpatnaik@docmation.com</userEmail>
                <userFullName>Raja Patnaik</userFullName>
                <userId>0058E000xWmT4QAK</userId>
                <userLanguage>en_US</userLanguage>
                <userLocale>en_GB</userLocale>
                <userName>rpatnaik@docmation.com</userName>
                <userTimeZone>Europe/London</userTimeZone>
                <userType>PowerPartner</userType>
                <userUiSkin>Theme3</userUiSkin>
            </userInfo>
        </result>
    </loginResponse>
</soapenv:Body>

But there is risk of encountering an error “LOGIN_RATE_EXCEEDED“

Comments

Post a Comment

Popular posts from this blog

Agentforce in Production: What Separates a Successful Deployment from an AI Demo

-
Image
This perspective comes from my real experience working on Salesforce projects where the challenge was not just building something that worked in a demo, but making sure it could survive real users, real data, real integrations, and real business expectations. In project environments, I have seen how quickly an impressive AI prototype can become difficult to scale if the foundation is not strong. Production success depends on more than prompt quality. It requires trusted data, clear use-case boundaries, secure actions, measurable outcomes, and a practical human handoff model. AI demos are easy to appreciate. A user asks a question. The agent responds naturally. It retrieves information, summarizes records, or performs an action. Everyone in the room sees the potential. Production is different. In production, customers ask incomplete questions. Data is messy. Knowledge articles conflict. APIs fail. Security rules matter. Escalations must work. Costs must be controlled. Business teams exp...
Read more

Introduction to Salesforce Agent Script: Build Predictable AI Agents

-
Image
Please visit here for more details - https://ayaninsights.com/guestblogs/introduction-to-agent-script/ In my latest blog, I introduce Salesforce Agent Script and explain how it helps teams build AI agents that are more predictable, controlled, and aligned with business processes. Large language models are flexible, but relying only on natural-language instructions can sometimes produce inconsistent results. Agent Script addresses this challenge by combining the conversational capabilities of an LLM with structured business logic. The blog explains how developers can use conditions, variables, actions, topics, and transitions to control how an Agentforce agent behaves. Agent Script supports familiar logic such as if/else conditions, value comparisons, sequential actions, and checks for missing data. I also cover its core structure, including system settings, configuration, global variables, languages, connections, and topic blocks. The start_agent topic acts as the entry point for each...
Read more

Salesforce Data Graphs - Best Practices, Limits & Guardrails — 2026 Edition

-
Image
Naming note : Salesforce has rebranded Data Cloud as Data 360. This post uses the new name; everything here applies to orgs still seeing the old label. What a Data Graph really is A Data Graph is a pre-computed, denormalized view of your customer data. You pick a primary Data Model Object (DMO) inside a Data Space, attach related DMOs, calculated insights, and segment memberships, and Data 360 joins all of that into a single read-only JSON blob per primary key. That blob is what gets queried - not the underlying tables - which is why Data Graphs can return sub-second responses even when the source data spans hundreds of millions of rows. High-level architecture: bounded inputs flow into a pre-computed graph, which many consumers read cheaply. There are two flavours, and the difference matters more than most teams realize on day one: • Near real-time Data Graph - the default. Refreshes on a schedule (every 30 minutes on Marketing Cloud data graphs, hourly, every 4 hours, daily, weekly,...
Read more