---
schema_version: "1"
id: 60f8dfead04e18b4d88d662930f1874813c5a74ca0581997e710f95627e5dddc
title: Named Credentials
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/release-notes/260-0-0/rn_security_named_credentials.md
canonical_url: https://help.salesforce.com/s/articleView?id=release-notes.rn_security_named_credentials.htm&release=260&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: a0f7a50a94bc32ff3475d655cad8ab4c041e4a777d1c980cdeb944c1b12c382b
description: Update or delete a named credential, an external credential, or an external auth identity provider from Apex. Named credentials added to a managed package are now developer controlled and can’t be updated.
products:
  - Cross Cloud Packages Solutions
release: "260"
---
# Named Credentials

Update or delete a named credential, an external credential, or an external auth identity provider from Apex. Named credentials added to a managed package are now developer controlled and can’t be updated.

- **[Extend Your Custom Apps with the Ability to Update and Delete Named Credentials from Apex](https://help.salesforce.com/s/articleView?id=release-notes.rn_security_named_credentials_update_delete_nc.htm&release=260&type=5)**  
    You can now update or delete a named credential, an external credential, or an external auth identity provider from Apex. ISVs and partners that build managed package apps can use these new Apex methods for automated setup and more flexible management of external system integrations. If a customer uses a managed package that programmatically updates the endpoint URL for a named credential or any URL fields on its related external credential or auth identity provider, the Enabled for Callouts field on the named credential is turned off until an admin manually reviews and enables it.
- **[Enhanced Security for Named Credentials in Managed Packages](https://help.salesforce.com/s/articleView?id=release-notes.rn_security_named_credentials_developer_controlled.htm&release=260&type=5)**  
    By default, as of this announcement, named credentials added to a managed package are now developer controlled and can’t be updated. Therefore, subscribers (customers) can’t edit the named credentials after package installation. This change prevents malicious automation from silently changing the endpoint URL.