---
schema_version: "1"
id: 92ffaadf0fab0c846693d146d3feb9b1aeb65f32a76345bae3f019853f19fa90
title: Migrate SAML-Enabled Connected Apps to External Client Apps
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/release-notes/260-0-0/rn_security_eca_saml_migration.md
canonical_url: https://help.salesforce.com/s/articleView?id=release-notes.rn_security_eca_saml_migration.htm&release=260&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: e9bbbdcc4a38ef8818d6f7a5e280896d9213a213f22ec781475de0d2c43184f0
description: Bring the improved usability and security of the external client apps framework to your SAML single sign-on (SSO) configurations. With a few clicks, you can now transform SAML-enabled connected apps into external client apps. After migration, you get an identical external app with all of your SAML configurations, while your old connected app remains in read-only mode.
products:
  - Cross Cloud Packages Solutions
release: "260"
---
# Migrate SAML-Enabled Connected Apps to External Client Apps

Bring the improved usability and security of the external client apps framework to your SAML single sign-on (SSO) configurations. With a few clicks, you can now transform SAML-enabled connected apps into external client apps. After migration, you get an identical external app with all of your SAML configurations, while your old connected app remains in read-only mode.

**Where:** This change applies to Lightning Experience and Salesforce Classic (not available in all orgs) in all editions.

**Why:** External client apps are a more secure, modern replacement for connected apps. We recommend that you use external client apps instead of connected apps whenever possible. Previously, the external client apps migration tool supported only the OAuth plugin. Now, you can migrate apps that use the SAML plugin.

**How:** In the App Manager, find your connected app and click **Migrate to External Client App**.