Create a Connected App for Mobile App Integration
A connected app is a primary means by which a mobile app connects to Salesforce. Although not required, you can use Salesforce Mobile SDK to build mobile applications as connected apps. These connected apps can access Salesforce OAuth services and call Salesforce REST APIs.
Required Editions
| Available in: both Salesforce Classic and Lightning Experience |
Connected Apps can be created in: Group, Essentials, Professional, Enterprise, Performance, Unlimited, and Developer Editions Connected Apps can be installed in: All editions |
| User Permissions Needed | |
|---|---|
| To read, create, update, or delete connected apps: | Customize Application AND either Modify All Data OR Manage Connected Apps |
| To update all fields except Profiles, Permission Sets, and Service Provider SAML Attributes: | Customize Application AND either Modify All Data OR Manage Connected Apps |
| To update Profiles, Permission Sets, and Service Provider SAML Attributes: | Customize Application AND Modify All Data AND Manage Profiles and Permission Sets |
| To rotate the consumer key and consumer secret: | Allow consumer key and secret rotation |
| To install and uninstall connected apps: | Customize Application AND either Modify All Data OR Manage Connected Apps |
| To install and uninstall packaged connected apps: | Download AppExchange Packages AND Customize Application AND either Modify All Data OR Manage Connected Apps |
See New connected apps can no longer be created in Spring ‘26 for more details.
For more information about Salesforce Mobile SDK, see Mobile SDK Development Guide.
- Create your connected app, and complete its basic information.
- Enable these OAuth
Settings:
- Enter a callback URL. Mobile SDK uses this URL to call back to your application during authorization. For Mobile SDK, this value must match the OAuth redirect URI specified in your app’s project configuration.
- Select the following OAuth scopes: Access and manage you data (api), Perform requests on your behalf at any time (refresh_token, offline_access), and Provide access to your data via the Web (web).
- Deselect Require Secret for Web Server Flow.
- Enter the mobile start URL to direct users to a specific location when the app is accessed
from a mobile device.If you don’t enter a mobile start URL, users are sent to the start URL defined under Web App Settings.If the connected app you’re creating is a canvas app, you can skip this field. The Canvas App URL field contains the URL that gets called for the connected app.
- Select PIN Protect if your app supports PIN protection. This setting
allows the admin to set the session timeout and PIN length for mobile applications after
installing the connected app.Salesforce Mobile SDK supports PIN protection. You can also implement it manually by reading the
mobile_policyobject from the user’s Identity URL. - For App Platform, specify the app platform, such as iOS.
- For Restrict to Device Type, specify the supported device form factors for the mobile app. If the app supports all form factors, don’t choose a value.
- For App Version, enter the version number of the mobile app.
- For Minimum OS version, enter the version required for the app.
- To confirm that this app is only for internal (non-public) distribution, select Private App . This setting is required because Apple doesn’t allow distribution of public mobile apps outside of its App Store.
- If the mobile app is private, specify the location of the Mobile App Binary file. The format of the file is IPA for iOS, and APK for Android.
- For iOS apps only:
- Specify the location of the Application Icon that is displayed while the app is being downloaded and installed on an iOS device.
- Specify the iOS Bundle Identifier. For iOS 7 and later, use the same bundle identifier that you used when developing the app in XCode. If you don’t, users see two app icons during installation.
- If the mobile connected app is a public app and you haven’t uploaded its binary file to
Salesforce, enter the app binary URL.
Note If you remove mobile integration from a new version of an existing connected app, mobile integration is removed from all versions of the app. For example, you publish a package containing version 1.0 of your connected app with mobile integration. You then remove mobile integration from the app, repackage it, and publish it as version 1.1. If a customer installs the earlier package with version 1.0, the connected app doesn’t contain mobile integration. - Enable push notifications, as needed. See Mobile Push Notifications.
- When you’ve configured all settings for your connected app, click Save.

