Update or delete a named credential, an external credential, or an external auth identity provider from Apex. Named credentials added to a managed package are now developer controlled and can’t be updated.
- Extend Your Custom Apps with the Ability to Update and Delete Named Credentials from Apex
You can now update or delete a named credential, an external credential, or an external auth identity provider from Apex. ISVs and partners that build managed package apps can use these new Apex methods for automated setup and more flexible management of external system integrations. If a customer uses a managed package that programmatically updates the endpoint URL for a named credential or any URL fields on its related external credential or auth identity provider, the Enabled for Callouts field on the named credential is turned off until an admin manually reviews and enables it. - Enhanced Security for Named Credentials in Managed Packages
By default, as of this announcement, named credentials added to a managed package are now developer controlled and can’t be updated. Therefore, subscribers (customers) can’t edit the named credentials after package installation. This change prevents malicious automation from silently changing the endpoint URL.