Webhook to create a SF task failing

[Shashank_Sharma]

Hi,

I'm trying to setup a webhook to create task in SF. I'm getting the 401 error. Error Message - "HTTP Error 401: Unauthorized access to URL".

I'm using the same SF user that is setup in the main Marketo-SF sync. Not sure what am I doing wrong here. Has anyone faced the same challenge and how did you fix it?

Thanks,

Shashank Sharma

[SanfordWhiteman]

Since you haven't provided your code (at least not that I can see in mobile view) it won't be possible to troubleshoot this.

[Shashank_Sharma]

Hi Sanford,

Here's the error screen containing the payload and the error details. Any insights on how to fix this would be really helpful!

Thanks,

Shashank Sharma

[SanfordWhiteman]

Well, "Session expired" is pretty clear here: this is not a public endpoint, and Salesforce expects you to transport an authentication token.  Otherwise, anybody could add tasks to any record in your db (you could deliberately create such a public endpoint, but it's not going to exist out-of-the-box).

I get the feeling you haven't thought through the OAuth token process. This is the reason OAuth + REST endpoints don't typically work with direct webhook calls (they require an intermediate hop to manage tokens).

[Shashank_Sharma]

Thanks for sharing the thoughts! Actually, I have another webhook for adding leads to SF campaign as a member, this works fine. Screenshot below:

I'm using the same approach to setup the task webhook and getting the 401 error. Not sure what I need to do differently to fix this!

[SanfordWhiteman · Accepted solution]

Then someone turned off the authentication requirement on the other endpoint. You should also look to see if there are any custom headers set up in the other webhook definition (Webhooks Actions >> Set Custom Header).

The HTTP 401 isn't being generated before Marketo makes the webhook call, it's the response to the webhook call.

I hope you aren't running a public endpoint that allows anyone to hit your Salesforce instance without auth.

[Shashank_Sharma]

Hi Sanford,

That  was it. The custom header was missing from my call. Thanks for pointing me into the right direction!

Thanks,

Shashank Sharma

[SanfordWhiteman]

Great!