Configure a Client Credentials Flow

To share information between two applications without any input from a user, use the OAuth 2.0 client credentials flow. In this flow, the client app exchanges its client credentials that are defined in the external client app for an access token. For this flow, you must specify an integration user to run the integration.

Required Editions

Available in: Lightning Experience

Available in: Professional, Performance, Unlimited, and Developer Editions

User Permissions Needed
To configure an external client app for OAuth 2.0 Client Credentials flow	Create, edit, and delete External Client Apps

To enable or disable an external client app plugin, you must first create or install an external client app on your Salesforce org.

Note Before you set up the Client Credentials flow, it’s important to understand its security risks. With this flow enabled, any person or app that has access to your external client app’s consumer key and consumer secret can get an access token. Maintain security by periodically changing your consumer secret, and if it becomes compromised, change it immediately. See Stage, Rotate, and Delete OAuth Credentials for a Local External Client App.

From Setup, in the Quick Find box, enter External Client Apps Manager, and then select External Client Apps Manager.
From the actions dropdown list, select Edit Settings for the external client app.
In the OAuth Settings section, select Enable OAuth.
Configure basic OAuth settings.
Select Enable Client Credentials Flow.
Save the settings.