Create a Connected App in Salesforce for OAuth

To use OAuth to authorize the API call to Salesforce, set up a connected app in Salesforce. The connected app generates a consumer key and secret that you can store in the EventBridge connection in AWS.

1. From Setup, enter External Client Apps in the Quick Find box, then select Settings in the External Client App section.
2. Turn on Allow creation of connected apps, if it's off.
3. Click New Connected App.
4. Enter a name.
5. Enter your contact email.
6. Optionally, fill out other fields as outlined in Configure Basic Connected App Settings.
7. In the API (Enable OAuth Settings) section, select Enable OAuth Settings.
8. Select Enable for Device Flow.
   A callback URL isn’t used in the device flow. However, when this flow is enabled, the value for the callback URL defaults to a placeholder.
9. For OAuth scopes, select Manage user data via APIs.
10. Keep Require Secret for the Web Server Flow selected. This option requires the app’s client secret in exchange for an access token.
11. Keep Require Secret for Refresh Token Flow selected. This option requires the app’s client secret in the authorization request of a refresh token and the hybrid refresh token flow.
12. Select Enable Client Credentials Flow.
13. When you understand the security risks, accept the warning.
14. Save your changes.
15. Click Continue.
16. Click Manage Consumer Details.
    A new window opens and a verification code is sent to your registered email address.
17. After you verify your identity, note the consumer key and consumer secret.
18. Select an execution user for the client credentials flow.
    Although there’s no user interaction in the client credentials flow, Salesforce still requires you to specify an execution user. By selecting an execution user, you allow Salesforce to return access tokens on behalf of this user.

    

    Note Permitted Users policies, such as All users may self-authorize and Admin approved users are pre-authorized, don’t apply to the execution user.
    1. From Setup, in the Quick Find box, enter Apps, and then select Manage Connected Apps.
    2. Click the connected app you just created.
    3. Click Edit Policies.
    4. Under Client Credentials Flow, for Run As, click , and find the user who you want to assign the client credentials flow.
       For Enterprise Edition orgs, we recommend that you select an execution user who has the API Only User permission.
    5. Save your changes.