---
schema_version: "1"
id: 91a37a061c7c8ded901d0ce0e22e922d2de7c9d17c23f73b7428f3a5b2edeaab
title: Sending Session IDs in Outbound Messages Is Being Removed
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/release-notes/260-0-0/rn_api_session_id_outbound_messages.md
canonical_url: https://help.salesforce.com/s/articleView?id=release-notes.rn_api_session_id_outbound_messages.htm&release=260&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 9b9a3ecd1fea7d1b712e261c10e944ea5275074714bc584d8d89c7aa2c636af7
description: To align with modern security best practices, you can no longer send session IDs in outbound messages starting February 23, 2026. Instead, use OAuth to authenticate. When this change goes into effect, the new outbound message form won't include the option to send a session ID, the IncludeSessionId flag in the API will be ignored and set to FALSE, and the <sessionID></sessionID> element of an outbound message payload won't include a session ID.
products:
  - Cross Cloud Packages Solutions
release: "260"
---
# Sending Session IDs in Outbound Messages Is Being Removed

To align with modern security best practices, you can no longer send session IDs in outbound messages starting February 23, 2026. Instead, use OAuth to authenticate. When this change goes into effect, the new outbound message form won't include the option to send a session ID, the IncludeSessionId flag in the API will be ignored and set to FALSE, and the <sessionID></sessionID> element of an outbound message payload won't include a session ID.

**Where:** This change applies to Developer, Enterprise, Performance, and Unlimited editions.

**When:** The week of February 23, 2026.

**How:** Follow the guidance in [Authorize Apps with OAuth](https://help.salesforce.com/s/articleView?id=xcloud.remoteaccess_authenticate.htm&type=5&language=en_US) instead of using a session ID.