Note — “External Client App”, never “Connected App”
Salesforce restricted the creation of classic “Connected Apps” starting with Spring ‘26, and recommends its replacement, the “External Client App”, for any new integration. If you search Salesforce’s documentation or forums and see “Connected App”, that’s the old name for the same mechanism — in your Setup today, the correct path is the one this section describes.
Requirements: admin permissions on your Salesforce org (section 2).
-
In your Salesforce, go to Setup → App Manager and press New External Client App.
-
Fill in the app’s name and basic details (your own business’s name, never a generic one).
-
In the OAuth section, enable the client credentials flow (“Client Credentials Flow”) and save.
-
Assign an integration user (“Run As” / integration user) to the app — the token the Platform uses will act with that user’s permissions inside your Salesforce, so their profile determines what the integration can read and write.
-
Copy the Consumer Key and Consumer Secret Salesforce generates for the app.
-
Also note down your My Domain URL — your org’s own address (shaped like
empresa.my.salesforce.com), visible under Setup → My Domain.
Warning — Treat the Consumer Key and Consumer Secret like a password
Anyone with access to these two values can get an access token to your org — a textual warning from Salesforce itself. Keep them with the same care as a password, and never share them outside this connection form.
Note — Verified against the official documentation
The steps in this section are verified against Salesforce’s REST API authentication guide (
developer.salesforce.com, authorization section) and the client credentials flow guide (help.salesforce.com), both consulted live on August 21, 2026 during this integration’s prior research — literal quotes: “Creating connected apps is restricted as of Spring ‘26 […] we recommend using external client apps instead” and “the client app exchanges its client credentials defined in the external client app — its consumer key and consumer secret — for an access token”. A retry of direct access to those same help pages today, September 5, 2026, for this round of manuals returned an incomplete load (help.salesforce.compages render with JavaScript and aren’t always reachable by automated tools) — the earlier live verification’s quote is kept rather than repeated without being able to confirm changes.