---
schema_version: "1"
id: 59284670cd8710ce2f0c78193c4f23b887542c223979eba4b8149aa53ca9085b
title: Configure a Client Credentials Flow
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/configure_client_credentials_flow_for_external_client_apps.md
canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.configure_client_credentials_flow_for_external_client_apps.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 2e47891dfc1edae82e4d642e466c26123add97fd314d38a113ac4fcf4e862afb
description: To share information between two applications without any input from a user, use the OAuth 2.0 client credentials flow. In this flow, the client app exchanges its client credentials that are defined in the external client app for an access token. For this flow, you must specify an integration user to run the integration.
products:
  - Security
  - Cross Cloud
release: "264"
---
# Configure a Client Credentials Flow

To share information between two applications without any input from a user, use the OAuth 2.0 client credentials flow. In this flow, the client app exchanges its client credentials that are defined in the external client app for an access token. For this flow, you must specify an integration user to run the integration.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>Professional</strong>, <strong>Performance</strong>, <strong>Unlimited</strong>, and <strong>Developer</strong> Editions</td></tr></tbody></table>

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d10841e49">User Permissions Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d10841e49 ">To configure an external client app for OAuth 2.0 Client Credentials flow</td>
            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d10841e49 ">Create, edit, and delete External Client Apps</td>
          </tr>
        </tbody>
      </table>

To enable or disable an external client app plugin, you must first create or install an external client app on your Salesforce org.

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-identity-264-0-0-production-enus/699dab6f-8f1a-4662-b24f-6521d5b747f7/images/icon_note.png)

Note Before you set up the Client Credentials flow, it’s important to understand its security risks. With this flow enabled, any person or app that has access to your external client app’s consumer key and consumer secret can get an access token. Maintain security by periodically changing your consumer secret, and if it becomes compromised, change it immediately. See [Stage, Rotate, and Delete OAuth Credentials for a Local External Client App](https://help.salesforce.com/s/articleView?id=xcloud.eca_stage_oauth_credentials.htm&release=264.0.0&type=5 "Use the OAuth Staged Credentials Connect REST API endpoint to manage the OAuth key and secret for a local external client app. The API can be used to stage, view, rotate, or delete OAuth credentials.").

1. From Setup, in the Quick Find box, enter External Client Apps Manager, and then select **External Client Apps Manager**.
2. From the actions dropdown list, select **Edit Settings** for the external client app.
3. In the OAuth Settings section, select **Enable OAuth**.
4. Configure [basic OAuth settings](https://help.salesforce.com/s/articleView?id=xcloud.configure_external_client_app_oauth_settings.htm&release=264.0.0&type=5 "Configure the OAuth settings to set the structure of the local external client app.").
5. Select **Enable Client Credentials Flow**.
6. Save the settings.