---
schema_version: "1"
id: b7fc3da5ac55078e3f01120be8c272c4d1b25e555dba4884f2633d28dec76c5b
title: AppExchange Partners
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/release-notes/260-0-0/rn_appexchange_partners.md
canonical_url: https://help.salesforce.com/s/articleView?id=release-notes.rn_appexchange_partners.htm&release=260&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: ad068bbe77622bd783bd391b022cb28f075edd6876d611233913c076ff4632bf
description: AppExchange partners must follow new security requirements for Connected App (CA) and External Client App (ECA) solutions to better protect integrations.
products:
  - Cross Cloud Packages Solutions
release: "260"
---
# AppExchange Partners

AppExchange partners must follow new security requirements for Connected App (CA) and External Client App (ECA) solutions to better protect integrations.

- **[Find Solutions Faster with the New AgentExchange](https://help.salesforce.com/s/articleView?id=release-notes.rn_appexchange_marketplace_unification.htm&release=260&type=5)**  
    Introducing the new AgentExchange, a unified destination for agents, apps, and experts across Salesforce and Slack. We’ve combined AppExchange, AgentExchange, and Slack Marketplace into a single solution engine to help you find and deploy tools faster. New semantic search capabilities and personalized recommendations within Agentforce Builder help you discover the right solutions for your specific business needs.
- **[Secure Your Connected App and External Client App Solutions](https://help.salesforce.com/s/articleView?id=release-notes.rn_appexchange_connectedapps_eca_security.htm&release=260&type=5)**  
    All AppExchange Partners must follow new security requirements for Connected App (CA) and External Client App (ECA) solutions to ensure the highest level of trust and security for Customer Data. These requirements apply to any Connected App or External Client App that is included or used in connection with a Partner Application, provided or created by the Partner, and in use by more than two customer production orgs. These updates include mandatory Proof Key for Code Exchange (PKCE) and Refresh Token Rotation (RTR) enablement to prevent authorization code interception and token theft. Implementing these standards ensures these CAs or ECAs meet the latest Salesforce security protocols and safeguard Customer Data. Failure to comply may result in the Partner Application’s AppExchange de-listing and/or Salesforce’s temporary or permanent suspension of the Partner Application’s interoperation with Salesforce’s services.
- **[Review and Comply with Connected App and ECA Security Requirements](https://help.salesforce.com/s/articleView?id=release-notes.rn_appexchange_ca_eca_additional.htm&release=260&type=5)**  
    To ensure the highest level of trust and security for Customer Data, Salesforce is further strengthening security controls. We’ve added two additional mandatory OAuth security requirements for Connected App (CA) and External Client App (ECA) solutions. These mandatory requirements must be implemented by partners by May 2026.
- **[Automate the Selling Lifecycle with the AgentExchange Go-To-Market App](https://help.salesforce.com/s/articleView?id=release-notes.rn_appexchange_gtm_app.htm&release=260&type=5)**  
    Provide a cohesive purchasing and billing journey for your customers by orchestrating the entire selling lifecycle within the Salesforce Platform. The Go-To-Market app reduces operational overhead by automating provisioning, payment collection, and payouts. Create compelling private offers with custom pricing to drive growth and shift your team’s focus from administration to innovation.
- **[Let Customers Request Private Offers Directly from Your AgentExchange Listing](https://help.salesforce.com/s/articleView?id=release-notes.rn_appexchange_requestprivateoffer.htm&release=260&type=5)**  
    Partners enrolled in the AgentExchange Partner Program can now turn on the Request Private Offer button on their AgentExchange listing. By selecting the button, customers can initiate a private offer conversation without leaving the marketplace. Providing a direct path for these requests increases lead generation and shortens the sales cycle.
- **[Expertise Tab Removed from Consultant Listings](https://help.salesforce.com/s/articleView?id=release-notes.rn_appexchange_expertise_tab_removed.htm&release=260&type=5)**  
    To stay current with the updated Salesforce Partner Program, we’re removing the Expertise tab from consultant listing pages and transitioning to the new Partner Finder (Navigator) experience.
- **[Speed Up Agentforce Listing Creation](https://help.salesforce.com/s/articleView?id=release-notes.rn_appexchange_nga.htm&release=260&type=5)**  
    Draft and publish your listings faster. When you upload a new solution, the Partner Console scans its agents, subagents, and actions to populate the listing. You can review and change the descriptions before you publish your listing. If you update to a new version, all your previous customizations stay exactly as they are.