Manage OAuth-Enabled Connected Apps Access to Your Data
All users can manage a OAuth-enabled connected app’s access to their Salesforce data from their personal settings. The apps that have permission to access Salesforce data are listed under advanced user details. Users can get information about each app and revoke the app’s access.
Required Editions
| Available in: both Salesforce Classic and Lightning Experience |
| Available in: All Editions |
| User Permissions Needed | |
|---|---|
| To manage, create, edit, and delete OAuth apps: | Manage Connected Apps |
OAuth-enabled connected apps are integrated with Salesforce, so they can access a subset of your Salesforce data after you explicitly grant each app permission.
Go to your personal settings to see which connected apps have permission to access your Salesforce data. Then revoke a connected app’s access, as needed.
In the OAuth Connected Apps section, you can:
- View information about each connected app that you’ve granted access to, the number of
times, and the last time the app attempted to access your information.
Note- A connected app can be listed more than once. Each time you grant access to an app, it obtains a new access token. Requests for refresh tokens increase the use count. Also, if an OAuth 2.0 connected app requests multiple tokens with different scopes, you see the same app multiple times.
- Even if the connected app failed to access your information because it couldn’t log in, the Use Count and Last Used fields are updated.
- Each connected app allows five unique approvals per user. After a fifth approval is made, the oldest approval is revoked. For OAuth 1.x, each issued access token counts as an approval and is listed as a separate entry in the table. For OAuth 2.0, the table lists each refresh token that counts as an approval. Other flows, such as user-agent flows, might also count as approvals. For consumers that use connected apps, avoid requesting OAuth 1.x access tokens or OAuth 2.0 refresh tokens more than once for each device. That way the limit of five unique approvals doesn’t impact your org.
- Click Revoke to revoke the app’s access. After you revoke the
app, it can no longer access your Salesforce data.
Important Revoke all access tokens for a particular app to prevent it from accessing your Salesforce data.
If the number of connected apps gets too large, it can cause timeout errors in the OAuth
Usage page. This timeout error blocks new connected apps from being installed. To install
a new connected app when the OAuth Usage page is experiencing timeout errors, manually
create the app approval URL with the app ID and the org ID:
/identity/app/AppInstallApprovalPage.apexp?app_id=App ID&app_org_id=Org
ID
For individual users, connected apps can be installed on the user’s OAuth usage detail page.

