Enable
...
OAuth and API (Enable OAuth Settings)- Access Points+ Policies
...
...
Available
...
OAuth Scopes- https://help.salesforce.com/s/articleView?id=sf.remoteaccess_oauth_flows.htm&language=en_US&type=5
...
Primary and recommended one is full access.
...
Below are the pre-selected sections for O-Auth:
...
Require Proof Key for Code Exchange (PKCE) Extension for Supported Authorization Flows.
...
Require Secret for Web Server Flow.
...
Require Secret for Refresh Token Flow.
...
Issue JSON Web Token (JWT)-based access tokens for named users- this is not necessary, but it is advised to check this.
...
O-Auth recommended flow:
...
OAuth Endpoints (http://salesforce.com )
Establish Connection using
...
OAuth
The below-mentioned changes are required on the Connected App before establishing a Connection connection using Oauth OAuth method:.
Enable the client credentials flow using the following steps:
...
Create your connected app, Connected App and complete its basic information. 2.
Configure the necessary OAuth settings for the connected appConnected App.
Enable the client credentials flow for your connected appConnected App.
From Setup, in the Quick Find box, enter Apps, and then select App Manager.
Find your connected app, click, and then select Edit.
Under API (Enable OAuth Settings), select Enable Client Credentials Flow.
When you understand the security risks, accept the warning.
Save your changes.
Select an
...
Execution User for the Flow
Although there is no user interaction in the client credentials flow, Salesforce still requires you to specify an execution userExecution User. By selecting an execution userExecution User, you allow Salesforce to return access tokens on behalf of this user.NOTE
Permitted Users policies, such as All users may self-authorize and Admin approved users are pre-authorized, don’t apply to the execution user.
Steps to select an Execution User:
From the connected app Connected App detail page, click Manage.
Click Go to Edit Policies.
Under Client Credentials Flow, for Run As, click on search, and find the user that you want to assign the client credentials flow. For Enterprise Edition orgs, we recommend that you select an execution user who has the API Only User permission.
Save your changes.
