Manage Mobile Policies for a Connected App
Configure policies for mobile connected apps that enforce PIN protection. These policies include setting the length of the connected app’s PIN, and defining how long a session can be idle before requiring re-entry of the PIN.
Required Editions
| Available in: both Salesforce Classic and Lightning Experience |
Connected Apps can be created in: Group, Essentials, Professional, Enterprise, Performance, Unlimited, and Developer Editions Connected Apps can be installed in: All editions |
| User Permissions Needed | |
|---|---|
| To read, create, update, or delete connected apps: | Customize Application AND either Modify All Data OR Manage Connected Apps |
| To update all fields except Profiles, Permission Sets, and Service Provider SAML Attributes: | Customize Application AND either Modify All Data OR Manage Connected Apps |
| To update Profiles, Permission Sets, and Service Provider SAML Attributes: | Customize Application AND Modify All Data AND Manage Profiles and Permission Sets |
| To rotate the consumer key and consumer secret: | Allow consumer key and secret rotation |
| To install and uninstall connected apps: | Customize Application AND either Modify All Data OR Manage Connected Apps |
| To install and uninstall packaged connected apps: | Download AppExchange Packages AND Customize Application AND either Modify All Data OR Manage Connected Apps |
See New connected apps can no longer be created in Spring ‘26 for more details.
- From Setup, enter Connected Apps in the Quick Find box, then select Manage Connected Apps.
- Click Edit next to the connected app that you are configuring access for.
- Under Mobile Integration, select a time value for Require Pin after.
This value specifies how long the app can be idle before requiring re-entry of the PIN. The
time can be none (no locking), 1, 5, 10, and 30 minutes. This policy is only enforced if a
corresponding pin length is configured.The connected app is responsible for enforcing this policy. Apps written using the Salesforce Mobile SDK can enforce this policy, or the app can read the policy from the UserInfo service and enforce the policy.This policy doesn’t invalidate a user’s session. When the session expires due to inactivity, this policy only requires the user to enter a PIN to continue using the current session.
- Select a value for Pin Length. This value sets the length of the identification number sent for authentication confirmation. The length can be from 4 to 8 digits, inclusive.

