View and Rotate the Consumer Key and Consumer Secret of a Connected App
Keep your connected apps secure by periodically changing your consumer key (client ID)
and consumer secret (client secret). To make sure that your existing integrations don’t break,
generate staged consumer details and share them with your connected app integrations. When
you're ready, apply the new consumer details.
Required Editions
Available in: both Salesforce Classic and
Lightning Experience
Connected Apps can be created in: Group, Essentials,
Professional, Enterprise, Performance, Unlimited, and
Developer Editions
Connected Apps can be installed in: All editions
User Permissions Needed
To read, create, update, or delete connected apps:
Customize Application AND either
Modify All Data OR Manage Connected
Apps
To update all fields except Profiles, Permission Sets, and Service Provider SAML
Attributes:
Customize Application AND either
Modify All Data OR Manage Connected
Apps
To update Profiles, Permission Sets, and Service Provider SAML Attributes:
Customize Application AND Modify All Data AND Manage Profiles and Permission
Sets
To rotate the consumer key and consumer secret:
Allow consumer key and secret rotation
To install and uninstall connected apps:
Customize Application AND either
Modify All Data OR Manage Connected
Apps
To install and uninstall packaged connected apps:
Download AppExchange Packages AND Customize Application AND either
Modify All Data
OR Manage Connected Apps
Note Connected apps creation is restricted as of Spring ‘26. You can continue to use existing
connected apps during and after Spring ‘26. However, we recommend using external client apps instead. If you must continue
creating connected apps, contact Salesforce Support.
To avoid issues with your integrations, keep track of your app's consumer details and
source org. Don't use a sandbox as the source org for a production app. If you delete or
refresh a sandbox, the app's consumer details can become unusable, breaking your
integrations.
From Setup, in the Quick Find box, enter Apps, and then select
App Manager.
Find the connected app, click , and then select View.
Next to Consumer Key and Secret, click Manage Consumer
Details.
You’re prompted to verify your identity using one of your registered methods. You
can view the consumer details page for up to 5 minutes before you’re prompted to verify your
identity again.
To generate new values for the consumer key and consumer secret, under Staged Consumer
Details, click Generate.
Each time you generate staged values for the consumer key and secret, you overwrite the
existing staged values. You can generate new staged values at any time. Staged values aren’t
valid until you apply them.
Share the staged consumer details with your connected app admins and
integrations.
When you’re ready to use the staged consumer details, click
Apply.
Warning You can’t revert this change. All existing access
and refresh tokens associated with the connected app are revoked when you apply the new
consumer details.
Click Apply again to accept the warning.
Immediately after you apply the new consumer details, you can experience up to 10
minutes of unstable behavior as the changes are propagated to the connected app and its
integrations. During this time, the old and new consumer details work intermittently. After
this 10-minute period, the new consumer details replace the previous values, and only the new
consumer details work.
Did this article solve your issue?
Let us know so we can improve!
Loading
Salesforce Help | Article
Cookie Consent Manager
General Information
Required Cookies
Functional Cookies
Advertising Cookies
General Information
We use three kinds of cookies on our websites: required, functional, and advertising. You can choose whether functional and advertising cookies apply. Click on the different cookie categories to find out more about each category and to change the default settings.
Privacy Statement
Required Cookies
Always Active
Required cookies are necessary for basic website functionality. Some examples include: session cookies needed to transmit the website, authentication cookies, and security cookies.
Functional Cookies
Functional cookies enhance functions, performance, and services on the website. Some examples include: cookies used to analyze site traffic, cookies used for market research, and cookies used to display advertising that is not directed to a particular individual.
Advertising Cookies
Advertising cookies track activity across websites in order to understand a viewer’s interests, and direct them specific marketing. Some examples include: cookies used for remarketing, or interest-based advertising.