Action Required: Mandatory Salesforce Sites security configuration update

Sorry, we didn't find any relevant articles for you.

Send us your queries using the form below and we will get back to you with a solution.

Why does NPC Processing fail with an INVALID_SESSION_ID error?

Overview

NPC Cloud users may receive the following error when Payments2Us processes Payment Txns through NPC Processing:

Program Area: 
NPCUtil.processFundraisingAPIResponse
Subject: 
Fundraising API response createGiftTransaction
Description: 
[{"message":"This session is not valid for use with the REST API","errorCode":"INVALID_SESSION_ID"}]

This error can prevent the affected Payment Txns from reaching Matching Complete.

Why I Get the Issue

During NPC Processing, Payments2Us calls the Salesforce Fundraising API and create the related Gift Transaction.

If the profile of the user who started the batch processor has Session Security Level Required at Login set to High Assurance, Salesforce prevents asynchronous Apex from using the session for REST API calls. This causes the Fundraising API call to fail and stops the Payment Txn from completing matching.

For more information, see Salesforce’s article: “High Assurance” Level Blocks Asynchronous Apex Processing.

Resolution

Update the session security settings for the affected profile or permission set.

  • Go to Setup > Profiles or Permission Sets.
  • Open the Profile or Permission Set assigned to the person who started the batch processor. 
  • Enable the Multi-Factor Authentication for User Interface Logins system permission. 
  • In the same Profile, locate Session Security Level Required at Login and set this value to None.
  • Save the changes.
  • Update the affected Payment Txns to NPC Processing Start.

NPC Processing should then run successfully and allow the Payment Txns to continue through matching.

Updated at August 20th, 2026

Was this article helpful?