Background

While assembling your reports you receive this error message:

Unable to refresh cache - Salesforce exception: The users password has expired, you must call SetPassword before attempting any other API operations

Resolution

Your Salesforce password has more than likely expired.  Even though you are logged into Salesforce, if you were to log out, you would probably be prompted to change your password.

Go ahead and log out of Salesforce, then follow these steps to update Assemblage to reference the new password for Salesforce:

Assemblage may utilize a firm's Salesforce system to collate various pieces of content by executing SOQL queries. This requires Assemblage to log into the Salesforce API.

Prior to 2026, Assemblage used SOAP to connect to Salesforce. This integration has been phased out, and we encourage using the modern OAuth integration moving forward.

Connecting Assemblage to Salesforce

Overview

Connecting Assemblage to Salesforce involves the following activities:

1. A Salesforce administrator registers an ‘External Client App’ in Salesforce and configured Assemblage to use that registration.  This is a one time activity that must be performed by a Salesforce administrator.

2. Each user then connects to the registered application by clicking Connect in the Assemblage Tools->Preferences->Salesforce connections screen.

If your Salesforce administrator has already created the app registration, all you need to do is click Connect!

Instructions for setting up an app registration

Note: This is a one-time registration, and must be performed by a Salesforce administrator.

1. In Salesforce, click the Settings gear, then Setup.
2. In Quickfind, search for and click ‘External Client App Manager’
3. Click New External Client App
4. Populate the following fields:
   
   - External Client App Name:  ‘Assemblage’
   - Contact email: your email address
   - Distribution State: Local
   
   
5. Open the ‘API (Enable OAuth Settings) pane and check the ‘Enable OAuth’ setting
6. Set the Callback URL:  https://oauth.trumpetinc.com/authenticated
7. Under OAuth Scopes, select the following scopes and click the ‘right arrow’ to move them into the ‘Selected OAuth Scopes’ panel:
   
   - Access the identity URL service (id, profile, email, address, phone)
   - Manage user data via APIs (api)
   - Perform requests at any time (refresh_token, offline_access)
   
   
8. Under Flow Enablement, check the 'Enable Authorization Code and Credentials Flow' checkbox
   IMPORTANT: Do NOT check ‘Require user credentials in the POST body for Authorization Code and Credentials flow’ checkbox
9. Under Security, UNcheck ‘Require Proof Key for Code Exchange (PKCE) extension for Supported Authorization Flows’
   Note: There should only be two settings checked (‘Require secret for Web Server Flow’ and ‘Require secret for Refresh Token Flow’
10. Click Create

This will create the app registration and display the new registration

1. In the app registration, click the Settings tab, then expand OAuth Settings
2. Click the ‘Consumer Key and Secret’ button - this will open a new tab verifying your identity.  Get the verification code (most likely from your email) and paste it into the form, then click Verify.
3. The Consumer Details screen will appear, which will include the Consumer Key and Consumer Secret values that you need to configure in Assemblage
4. In Assemblage, go to Tools->Preferences, Salesforce connection
5. Set the integration type to ‘Modern (OAuth)’
6. Copy/paste the Consumer key and Consumer secret where indicated
7. Click Connect
8. A browser window will open asking whether to want to allow access
9. Click Allow
10. Assemblage preferences will return and show ‘Salesforce connection is active’

You are now ready to use Salesforce integration on your machine.

For additional Assemblage users

1. When a user first uses a configuration that relies on Salesforce integration, they will receive an error message instructing them to go to Tools -> Preferences -> Salesforce connections, then click the Connect button.
2. That is all that is required for other users