---
schema_version: "1"
id: c01d7cadea7409f2b96895daf844480f9e254ab7d011f7ad8809091203371a88
title: Track Attempts to Use Uninstalled Connected Apps
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/release-notes/260-0-0/rn_security_track_blocked_apps.md
canonical_url: https://help.salesforce.com/s/articleView?id=release-notes.rn_security_track_blocked_apps.htm&release=260&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 7c4d1dd878165e24b04766ac1e5a7ac4e079f29807721552dbadc6787f9394fd
description: You can now track denied attempts to use connected apps that aren't installed in your org (uninstalled apps for short). By tracking these denied attempts, you can identify both legitimate and suspicious attempts to use uninstalled apps. You can decide whether to allow usage of the app or to block it entirely.
products:
  - Cross Cloud Packages Solutions
release: "260"
---
# Track Attempts to Use Uninstalled Connected Apps

You can now track denied attempts to use connected apps that aren't installed in your org (uninstalled apps for short). By tracking these denied attempts, you can identify both legitimate and suspicious attempts to use uninstalled apps. You can decide whether to allow usage of the app or to block it entirely.

**Where:** This change applies to Lightning Experience and Salesforce Classic (not available in all orgs) in all editions.

**Why:** To prevent unauthorized access to your data, Salesforce [automatically denies](https://help.salesforce.com/s/articleView?id=005132365&type=1&language=en_US) attempts to use uninstalled connected apps unless a user has the Approve Uninstalled Connected Apps user permission. This user permission is intended only for highly trusted users, like admins. As a result, non-admin users can be blocked from using uninstalled apps that have legitimate use cases. Now that you can track denied attempts, you can easily see when a user is stuck in this situation. To allow these users to access legitimate apps from trusted developers, install these apps.

By tracking denied attempts, you can also see if a threat actor is trying to use connected apps to get access to your org. To tighten security, block suspicious apps. Blocking a connected app ends all sessions and prevents further usage, even for users with the Approve Uninstalled Connected Apps user permission.

**How:** On the Connected Apps OAuth Usage page in Setup, review the Denied Attempts Due to Usage Restriction column. You can also review the date and time of the most recent denied attempt.

![Connected Apps OAuth Usage page with new columns "Denied Attempts Due to Usage Restriction" and "Last Denied Attempt Due to Usage Restriction."](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-salesforce_release_notes-260-0-0-production-enus/ba62a63b-6cd1-440e-8d24-e867afab0363/salesforce_release_notes/images/security/connected_app_oauth_usage.png)

#### See Also

- [_Salesforce Help_: Manage Current OAuth Connected App Sessions](https://help.salesforce.com/s/articleView?id=xcloud.connected_app_manage_current_sessions.htm&language=en_US)