---
schema_version: "1"
id: d7b55257e3016de6ef8e1a7da4cd6cd22c5fc862c12193c8dd30477db60f8738
title: Pre-Authorize User App Access Through External Client App Policies
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/branded_apps_allow_deny_con_app.md
canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.branded_apps_allow_deny_con_app.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 0a0a7ccf39a82ae2b4d9e2c9cd086c3bea79590a4aa531087b8e9f55d9e3ff7d
description: Configure who can use your app by defining which users are pre-authorized. Users who are pre-authorized can bypass the Allow or Deny permission pop-up when accessing the app.
products:
  - Mobile App
  - Cross Cloud
release: "264"
---
# Pre-Authorize User App Access Through External Client App Policies

Configure who can use your app by defining which users are pre-authorized. Users who are pre-authorized can bypass the Allow or Deny permission pop-up when accessing the app.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col style="width:100%"></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Setup for Mobile Publisher available in: Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Setup for Mobile Publisher available in: production only (not sandbox)</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in Lightning Experience in: <strong>Enterprise</strong>, <strong>Performance</strong>, and <strong>Unlimited</strong> Editions</td></tr></tbody></table>

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d9664e66">User Permissions Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d9664e66 ">To create and modify a Mobile Publisher project:</td>
            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d9664e66 ">Manage mySalesforce Apps</td>
          </tr>
        </tbody>
      </table>

![Important](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-mysalesforce-264-0-0-production-enus/a39debb4-ddcf-4d21-ae97-ca8229316d3a/images/icon_important.png)

Important Almost all Mobile Publisher apps were moved to the External Client App framework in the Summer '25 release. If your app is one of a few still using Connected Apps, [refer to the help documentation](https://help.salesforce.com/s/articleView?id=xcloud.connected_app_overview.htm&type=5&language=en_US) for any customizations you need to make.

Admin approved users who are pre-authorized allows only users with the associated profile or permission set to access the app without first authorizing it. After selecting this option, manage profiles for the app by editing each profile’s External Client App Access list. Or manage permission sets for the app by editing each permission set’s External Client App list.

![Warning](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-mysalesforce-264-0-0-production-enus/a39debb4-ddcf-4d21-ae97-ca8229316d3a/images/icon_warning.png)

Warning If you switch from All Users may self-authorize to Admin-approved users are pre-authorized, anyone using the app loses access, unless a user’s permission authorizes the external client app specifically. In addition, if users have the Use Any API Client permission, they can access any external client app—even if its Permitted Users setting is set to Admin-approved users are pre-authorized. Be careful when using the Use Any API Client permission. As the name implies, you’re giving up your control over authorization.

1. From Setup, enter Mobile Publisher in the Quick Find box, then select **Mobile Publisher**.
2. In the External Client App Settings tab, select **Policy Configuration** for your app and click **Edit**.
3. Under OAuth policies, click the **Permitted Users** dropdown and select **Admin approved users are pre-authorized**.
4. Click **Save**.