Re: Query for Salesforce API connection

gilmore_staci

I have gone through salesforce help and they believe the issue is on the power bi side so checking here.

I have an external client app set up to api connect salesforce to power bi. this is the code i'm using

its giving me a DataSource.Error: Web.Contents failed to get contents from 'https://caterpillar.my.salesforce.com/services/oauth2/token' Bad Request error.

Am I missing something?

let
    // 1. Define Salesforce API credentials
    SalesforceUrl = "https://*Client*.my.salesforce.com",
    ClientId = "ClientKey",
    ClientSecret = "clientsecret",
    
    // 2. Request the OAuth2 Access Token
        TokenResponse = Json.Document(Web.Contents(SalesforceUrl & "/services/oauth2/token", [
        Content = Text.ToBinary("grant_type=client_credentials&client_id=" & ClientId & "&client_secret=" & ClientSecret),
        Headers = [#"Content-Type"="application/x-www-form-urlencoded"]
    ])),
    AccessToken = TokenResponse[access_token],

    // 3. Query the data using REST API (SOQL)
    DataResponse = Json.Document(Web.Contents(SalesforceUrl & "/services/data/v60.0/query", [
    Query =  [q="SELECT Id, Name, Email FROM User WHERE Profile.Name = 'System Administrator'"],
    Headers = [#"Authorization" = "Bearer " & AccessToken]
    ])),
    
    // 4. Parse the results into a table
    Records = DataResponse[records],
    Table = Table.FromList(Records, Record.FieldValues, {"Id", "Name", "Email"})
in
    Table

Prince0011

Hi,

Bad Request on the token endpoint almost always means Salesforce is rejecting the request itself (not a Power BI connectivity issue), so I'd look at these first:

1. Check the Connected App is actually set up for Client Credentials Flow This is the most common gotcha — just having a Client ID/Secret isn't enough. In Salesforce Setup, on your Connected App, you need "Enable Client Credentials Flow" explicitly turned on under OAuth settings, and there needs to be a "Run As" user assigned to it. If that's not configured, you'll get a Bad Request even with correct credentials.

2. Try capturing the actual error body, not just the status Right now you won't see Salesforce's actual error message because Power Query throws before you can inspect the response. Add ManualStatusHandling = {400} to your Web.Contents options so you can capture the response body:

TokenResponse = Web.Contents(SalesforceUrl & "/services/oauth2/token", [
    Content = Text.ToBinary("grant_type=client_credentials&client_id=" & ClientId & "&client_secret=" & ClientSecret),
    Headers = [#"Content-Type"="application/x-www-form-urlencoded"],
    ManualStatusHandling = {400}
]),
ResponseText = Text.FromBinary(TokenResponse)

Then just output ResponseText on its own to see what Salesforce is actually telling you (usually something like invalid_client_id or unsupported_grant_type which narrows it down immediately).

3. Double check there's no IP restriction issue If the Connected App or your Salesforce org has IP allowlisting/login IP ranges enforced, requests coming from Power BI's service (if this is going through the Power BI service rather than just Desktop) can get blocked at a level that also shows up as a generic Bad Request.

4. Confirm you're not mixing up Consumer Key/Secret with something else Sounds basic, but worth confirming ClientId/ClientSecret in your code are the actual Consumer Key and Consumer Secret from the Connected App's "Manage Consumer Details" page, not the connected app's Salesforce record Id or anything else.

Once you get the actual error text back from step 2, that'll tell you exactly which of these it is rather than guessing. Post that response back if you're still stuck and it'll be much easier to pin down.

gilmore_staci

@Prince0011

#1 box is checked and user assigned is an api only salesforce integrated user

#2 i added the code to my query, cleared permissions and now when it asks how to connect it doesn't like the Anonymous i was using before. Says its can't authenticate with the credentials provided

#3 this is a desktop connection, does the IP still apply?

#4 I re-entered the key and secret, using the copy button on salesforce instead of copy and pasting

Any suggestions on #2?

Murtaza_Ghafoor

@gilmore_staci

A 400 Bad Request from the Salesforce OAuth token endpoint typically specifies that the request is not properly formed rather than a Power BI issue.

Here are a few things to verify:

Ensure you're using the correct token endpoint for your org (production vs. sandbox), for example:

Production: https://login.salesforce.com/services/oauth2/token

Sandbox: https://test.salesforce.com/services/oauth2/token

If using a My Domain URL, confirm it's configured to accept OAuth token requests.

Check from Postman

Test the same OAuth request using Postman or cURL. If it also returns 400 Bad Request, the issue is with the OAuth request or Salesforce configuration rather than Power BI.

If this helps, ✓ Mark as Kudos | Help Others