Loading
Salesforce now sends email only from verified domains. Read More
Identify Your Users and Manage Access
Table of Contents
Filter by (0)Add
Select Filters

          No results
          No results
          Here are some search tips

          Check the spelling of your keywords.
          Use more general search terms.
          Select fewer filters to broaden your search.

            Search all of Salesforce Help
            Search all of Salesforce Help
            Manage Third-Party Connected Apps

            You are here:

            1. Salesforce Help
            2. Docs
            3. Identify Your Users and Manage Access

            Manage Third-Party Connected Apps

            If your org uses third-party apps, such as those installed from the AppExchange, you can set security policies to control what data the third-party app can access from your org. You can also define who can use the third-party app. In addition to setting security policies to manage third-party apps, you can uninstall, and—when necessary—block these apps from the Salesforce org.

            Required Editions

            Available in: both Salesforce Classic and Lightning Experience

            Connected Apps can be created in: Group, Essentials, Professional, Enterprise, Performance, Unlimited, and Developer Editions

            Connected Apps can be installed in: All editions
            User Permissions Needed
            To read, create, update, or delete connected apps:

            Customize Application AND either

            Modify All Data OR Manage Connected Apps
            To update all fields except Profiles, Permission Sets, and Service Provider SAML Attributes:

            Customize Application AND either

            Modify All Data OR Manage Connected Apps
            To update Profiles, Permission Sets, and Service Provider SAML Attributes: Customize Application AND Modify All Data AND Manage Profiles and Permission Sets
            To rotate the consumer key and consumer secret: Allow consumer key and secret rotation
            To install and uninstall connected apps:

            Customize Application AND either

            Modify All Data OR Manage Connected Apps
            To install and uninstall packaged connected apps:

            Download AppExchange Packages AND Customize Application AND either

            Modify All Data OR Manage Connected Apps
            Note
            Note Connected apps creation is restricted as of Spring ‘26. You can continue to use existing connected apps during and after Spring ‘26. However, we recommend using external client apps instead. If you must continue creating connected apps, contact Salesforce Support.

            See New connected apps can no longer be created in Spring ‘26 for more details.

            As a third-party connected app consumer, you’re org installed the app from the AppExchange Marketplace or as a managed package from Salesforce or a third-party vendor’s website. You can only edit the app’s access policies, such as determining who can use the app and whether the app can access data from a remote location.

            Example
            Example For example, you install a third-party app that allows your org’s users to make travel reservations. By selecting the option Admin approved users are pre-authorized for the connected app, you can assign specific user profiles to the app. Only the users with this user profile can access the app. You can also set a refresh token policy to revoke the travel reservation app’s access to your Salesforce data after a set amount of time.

            Connected Apps Installed by Salesforce

            Some Salesforce client apps, such as the Salesforce mobile app and Salesforce for Outlook, are implemented as connected apps. Salesforce automatically installs them in your org.

            Salesforce distributes these client-type connected apps in two managed packages: The connected apps included in the package change with each release. Salesforce installs the package the first time a user accesses one of the apps.

            • Salesforce for Android and Salesforce for iOS
            • Salesforce for other mobile apps

            Salesforce packages appear in Setup under the Installed Packages List. See Installed Packages.

            The packages in the Installed Packages List

            Click a package name to see the list of components. The following are some components in the Salesforce Connected Apps package.

            The components of the Salesforce Connected Apps
            Note
            Note The Ant Migration Tool is a “wrapper” connected app that uses SOAP API to integrate with Salesforce. It still uses the connected apps framework to allow or deny users access to the apps in an org.

            The following are examples of components for the Salesforce mobile app and Chatter app packages.

            The components of the Salesforce1 and Chatter Apps

            To install or reinstall the Salesforce mobile app package for connected apps, you can install it from App Exchange.

            You can manage installed connected apps from the Connected Apps page. The connected apps that Salesforce installs appear in the list as installed by a managed package. They appear along with your other installed connected apps.

            Example of the list of connected apps
             
            Loading
            Salesforce Help | Article