OAuth Settings

Enable OAuth and API (Enable OAuth Settings)- Access Points+ Policies

Available OAuth Scopes- https://help.salesforce.com/s/articleView?id=sf.remoteaccess_oauth_flows.htm&language=en_US&type=5
Primary and recommended one is full access.
Below are the pre-selected sections for O-Auth:
- Require Proof Key for Code Exchange (PKCE) Extension for Supported Authorization Flows.
- Require Secret for Web Server Flow.
- Require Secret for Refresh Token Flow.
- Issue JSON Web Token (JWT)-based access tokens for named users- this is not necessary, but it is advised to check this.
O-Auth recommended flow:
OAuth Endpoints (http://salesforce.com )

Establish Connection using OAuth

The below-mentioned changes are required on the Connected App before establishing a connection using OAuth method.

Enable the client credentials flow using the following steps:

Create your Connected App and complete its basic information.
Configure the necessary OAuth settings for the Connected App.
Enable the client credentials flow for your Connected App.
- From Setup, in the Quick Find box, enter Apps, and then select App Manager.
- Find your connected app, click, and then select Edit.
- Under API (Enable OAuth Settings), select Enable Client Credentials Flow.
When you understand the security risks, accept the warning.
Save your changes.

Select an Execution User for the Flow

Although there is no user interaction in the client credentials flow, Salesforce still requires you to specify an Execution User. By selecting an Execution User, you allow Salesforce to return access tokens on behalf of this user.

Permitted Users policies, such as All users may self-authorize and Admin approved users are pre-authorized, don’t apply to the execution user.

Steps to select an Execution User:

From the Connected App detail page, click Manage.
Go to Edit Policies.
Under Client Credentials Flow, for Run As, click on search, and find the user that you want to assign the client credentials flow. For Enterprise Edition orgs, we recommend that you select an execution user who has the API Only User permission.
Save your changes.