---
schema_version: "1"
id: ad76834ce5419ae8ec3c23b0d29c0171907fb5cb863ca6d5dc3d97f7edbc84b2
title: Create Local External Client App for Manually Integrated Contact Centers
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/service/264-0-0/voice_create_connected_app.md
canonical_url: https://help.salesforce.com/s/articleView?id=service.voice_create_connected_app.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 8ea14b455f812d05aea603094c8364ba211f624372c09a4e0bdaa26403f97d7f
description: Create the external client app before creating the contact center.
products:
  - Service Cloud
  - Digital Engagement
release: "264"
---
# Create Local External Client App for Manually Integrated Contact Centers

Create the external client app before creating the contact center.

### Required Editions

This article applies to:

- Salesforce Voice with Partner Telephony from Amazon Connect (Voice manually integrated with your Amazon Connect instance by importing the contact center definition XML file)

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;"><a href="https://help.salesforce.com/s/articleView?id=service.voice_editions.htm&amp;release=264.0.0&amp;type=5" title="Learn about the user interfaces, editions, and add-ons that support Voice solutions by Salesforce.">View supported editions</a>.</td></tr></tbody></table>

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d82965e71">User Permissions Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d82965e71 ">To view the Amazon Contact Centers page:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d82965e71 ">Customize Application AND Manage Call Centers</td>

          </tr>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d82965e71 ">To create and manage a contact center:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d82965e71 ">Salesforce Voice Contact Center Admin</td>

          </tr>
        </tbody>
      </table>

1. Get the Amazon Resource Names (ARN) for the `SalesforceVoiceIdp_OrgId` and `<ContactCenterName>-SAMLRole` role from the AWS Identity and Access Management console.
    - Go to Identity and Access Management on AWS. In Access management, click **Identity providers**, and then select `SalesforceVoiceIdp` to get the ARN.
    - Go to Identity and Access Management in AWS, and select ARN for `<ContactCenterName>-SAMLRole`.
2. Create the external client app in Salesforce.
    - From Setup, in the Quick Find box, enter `External Client Apps`, and then select **External Client App Manager**.
    - Click **New External Client App.**. For more details, see [Create a Local External Client App](https://help.salesforce.com/s/articleView?id=xcloud.create_a_local_external_client_app.htm&language=en_US).
    - In the Basic Information section, specify the External Client App Name, API Name (this field is automatically populated), and Contact Email.
    - In the Web App Settings section, leave the **Start URL** field empty.
    - Select **Enable SAML**.
    - In the Entity ID field, enter ContactCenterName.
    - In the ACS URL field, enter `https://signin.aws.amazon.com/saml`.
    - In the Issuer field, enter your org's My Domain login URL, the standard issuer for your identity provider. If your SAML service provider requires a different value, specify it here.
    - In the Subject Type field, select **Persistent ID**.
    - In the Name ID Format field, select `urn:oasis:names:tc:SAML:2.0:nameid-format:persistent`.
    - Save your work. The external client app is created.
3. Create custom attributes.
    - In the Custom Attributes section, click **New**.
    - In the Key field, enter `https://aws.amazon.com/SAML/Attributes/RoleSessionName`.
    - In the Value field, enter `$User.Alias & '@' & $User.Id & '@' & $Organization.Id`.
    - Save your work.
4. To create another customer attribute, click New.
    - In the Key field, enter `https://aws.amazon.com/SAML/Attributes/Role`.
    - In the Value field, enter the `SalesforceVoiceIdp` ARN and the `<ContactCenterName>-SAMLRole`, separated by a comma. For example, `'{SalesforceVoiceIdp ARN}' &',' &'{<ContactCenterName>-SAMLRole role ARN}'`.
    - Save your work.
5. Assign user profiles to the external client app.
    - Click **Manage** to open your external client app policies.
    - Click **Manage Profiles**. For more details on access management, see [Configure External Client App Policies](https://help.salesforce.com/s/articleView?id=xcloud.meta_configure_external_client_app_policies.htm&type=5&language=en_US).
    - Select a profile from the list. For example, select **System Administrator**.
    - Save your work.
6. Set up OAuth. To set up OAuth between AWS Lambda and Salesforce, create another local external client app, as described in [Configure the External Client App OAuth Settings](https://help.salesforce.com/s/articleView?id=xcloud.configure_external_client_app_oauth_settings.htm&type=5&language=en_US).

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-service-support_channels-264-0-0-production-enus/f3c4b3d2-ff86-4f7c-9fe2-3d8b23d35109/images/icon_note.png)

Note You can edit the local external client app that you’ve created only from the External Client Apps Manager.

- **[Set Up Custom Name Format for the User](https://help.salesforce.com/s/articleView?id=service.voice_flex_custom_username.htm&release=264.0.0&type=5)**  
    If you do not set up a custom name format in the external client app or connected app, then the default name format is $User.Id & '@' & $Organization.Id.

#### See Also

- [Maintain Your Managed External Client App](https://help.salesforce.com/s/articleView?id=service.voice_managed_eca.htm&release=264.0.0&type=5 "When you create a contact center, Salesforce automatically generates a managed external client app (ECA) to handle your SAML single sign-on (SSO) authentication. Because Salesforce manages this external client app as part of your contact center provisioning, you can’t access or edit it from the External Client App Manager in Setup. Instead, manage all settings and policies for this app from your contact center settings.")