Spiff: Salesforce Workato Connector Auth Changes

With new Salesforce Connected App Usage Restrictions being introduced in September 2025, any new connections between Workato and Salesforce may run into an error. To avoid errors, follow the instructions below when creating a new Workato connection with Salesforce.

Note: Existing connections and recipes of your customers are not affected, but please review the details below to ensure smooth setup of any new connections.

When creating a new Workato integration with Salesforce after the Connected App Usage Restriction Change, follow the below guidance:

• Your Salesforce Admin should double check that the Workato Connected App is installed correctly within the Connected Apps OAuth Usage section under Setup > Connected Apps OAuth Usage.
• If the app is showing as “Uninstall”, no additional action will need to be taken.

If the app is showing as “Install”, an Admin will need to follow one of the two options below:

• Option 1. Install the Connected App from the Connected Apps OAuth Usage page.
  • Open the Setup Menu in Salesforce and search for Connected Apps OAuth Usage.
  • Search for the Workato Connected App.
  • Click “Install” on the right side of the Connected App, follow the prompts, and configure OAuth Policies.
  • In Permitted Users, select the appropriate option for your org (e.g. All users may self Authorize).
• Option 2. Grant permissions for those users who will create connections:
  • If API Access Control is enabled in the org, assign “Use Any API Client“ permission.
  • If API Access Control is not enabled, assign “Approve Uninstalled Connected Apps”.