Salesforce Security Setting Breaks CRM Connector
A specific Salesforce security setting will break the Brainshark managed package and you will see the error
"Brainshark could not load configuration information from Salesforce. - Could not load user information from Salesforce. Please try again later"
appear in the Brainshark Setup tab when installing the Brainshark CRM Connector for Salesforce.
To fix this error, check the following:
- In Setup > Quickfind search for "Session Settings"
- Click into "Session Settings" under Security Controls
- Is "Require HttpOnly attribute" checked off?
- If so, uncheck "Require HttpOnly attribute"
- Save
If you go back to the Brainshark Setup tab and refresh, you will no longer see this error.
Per Salesforce, "if you have a custom or packaged application that uses JavaScript to access session ID cookies, selecting Require HttpOnly attribute breaks your application. It denies the application access to the cookie."
Link to the Salesforce website with this information:
https://developer.salesforce.com/docs/atlas.en-us.securityImplGuide.meta/securityImplGuide/admin_sessions.htm