You are here:
Create Connected App
Create the connected app before creating the contact center.
Required Editions
This article applies to:
- Service Cloud Voice with Partner Telephony from Amazon Connect (Voice manually integrated with your Amazon Connect instance by importing the contact center definition XML file)
| View supported editions. |
Note Starting with the Spring '26 release, the creation of connected apps is disabled to
promote the adoption of External Client Apps (ECA). To create a connected app, you must
contact Customer Support. For more information, see this knowledge Article.
-
Get the Amazon Resource Names (ARN) for the
SalesforceVoiceIdp_OrgIdand<ContactCenterName>-SAMLRolerole from the AWS Identity and Access Management console.- Go to Identity and Access Management on AWS. In Access management, click Identity providers, and then select
SalesforceVoiceIdpto get the ARN. - Go to Identity and Access Management in AWS, and select ARN for
<ContactCenterName>-SAMLRole.
- Go to Identity and Access Management on AWS. In Access management, click Identity providers, and then select
-
Create the connected app in Salesforce.
- From Setup, in the Quick Find box, enter
External Client Apps, and then select Settings. - Turn on the Allow creation of connected apps option in the Connected Apps section.
- Click New Connected App.
- In the Basic Information section, specify the Connected App Name, API Name (this field is automatically populated), and Contact Email.
- In the Web App Settings section, leave the Start URL field empty.
- Select Enable SAML.
- In the Entity ID field, enter ContactCenterName.
- In the ACS URL field, enter
https://signin.aws.amazon.com/saml. - In the Subject Type field, select Persistent ID.
- In the Name ID Format field, select
urn:oasis:names:tc:SAML:2.0:nameid-format:persistent. - Save your work. The connected app is created.
- From Setup, in the Quick Find box, enter
-
Create custom attributes.
- In the Custom Attributes section, click New.
- In the Key field, enter
https://aws.amazon.com/SAML/Attributes/RoleSessionName. - In the Value field, enter
$User.Alias & '@' & $User.Id & '@' & $Organization.Id. - Save your work.
-
To create another customer attribute, click New.
- In the Key field, enter
https://aws.amazon.com/SAML/Attributes/Role. - In the Value field, enter the
SalesforceVoiceIdpARN and the<ContactCenterName>-SAMLRole, separated by a comma. For example,'{SalesforceVoiceIdp ARN}' &',' &'{<ContactCenterName>-SAMLRole role ARN}'. - Save your work.
- In the Key field, enter
- Click Manage. A page opens that contains the SAML Login Information section.
-
Click Manage Profiles.
- Select a profile from the list. For example, select System Administrator.
- Save your work.
- To set up OAuth between AWS Lambda and Salesforce, create another connected app, as described in Set Up OAuth in Your Service Cloud Voice Connected App.
- Set Up Custom Name Format for the User
If you do not set up a custom name format in the connected app, then the default name format is $User.Id & '@' & $Organization.Id.
Did this article solve your issue?
Let us know so we can improve!

