Skip to main content
Level 2
September 30, 2026
Question

Salesforce + Workfront Fusion PKCE Connection issue

Hi, 

I am doing a POC where I am connecting my Trial Salesforce Account with Adobe Fusion. I am using latest PKCE feature in Fusion to connect with Salesforce.

Reason is:
Salesforce latest API version enabled PKCE by default for all Oauth requests and it is grayed out so we can’t change it. Older connected apps will work without any issue but newly created app will not work with PKCE settings. If we want to disabled this feature we need to conenct with Salesforce Customer support serice. 

After creating Salesforce External Client app will all required settings and callback URL. I am getting below error:

{"detail":"Connection failed.","message":"The request failed due to failure of a previous request.","code":"SC424","statusCode":424,"suberrors":[{"message":"Function 'randomBytes' not found!","name":"IMLError"}]}

If anyone has any idea about this issue please let me know. 

Please remember it is happening with a newly created Salesforce App not the older or existing app. 

Thanks!

9 replies

AniMh1
Community Manager
Community Manager
September 30, 2026

Hi, Thanks for the detailed write-up, and for confirming that this only happens with the newly created Salesforce External Client App.
Can you please submit a product issue with support ticket? The team is taking a look to fix the error. In the meanwhile to help speed up that process, can you please provide a scenario link where you experience the problem? 

Translate
Level 2
September 30, 2026

I am not able to create support ticket. I don’t have permission to do that. I will wait for your team to  respond on this post. Please let me know if you need more details from me. Thanks!

Translate
AniMh1
Community Manager
Community Manager
October 1, 2026

The fix is in progress and will de deployed during today, I will update here once fully in production.

Translate
AniMh1
Community Manager
Community Manager
October 1, 2026

The issue is resolved and deployed to production. 

Translate
Level 2
October 1, 2026

Hi Now earlier issue has been resolved but I am getting another error:
error=invalid_scope&error_description=the+requested+scope+is+not+allowed
I am not sure what request parameters Fusion sending to salesforce but Salesforce throwing error. 

Error is : Invalid Scope
Description: The Requeste Scope is Not Allowed. 

Please validate. Thanks!

Translate
AniMh1
Community Manager
Community Manager
October 5, 2026

The scopes we send to the Salesforce are 

  • Full access (full)
  • Perform authentication requests at any time (refresh_token, offline_access)

These are required for the Fusion connector to function under the hood. So once you provide these scopes to the external application registered in the Salesforce which owns the client ID you use, the app will function as expected. 

Translate