External client apps can support OAuth 2.0 JSON Web Token (JWT) bearer flows using the
certificate field in the global OAuth settings file. A JWT flow authorizes servers to access data
without interactively logging in each time the servers exchange information.
Required Editions
| Available in: Lightning Experience |
| Available in: Professional, Performance, Unlimited, and
Developer Editions
|
| User Permissions Needed |
| To configure an external client app for OAuth 2.0 JWT Bearer Flows |
View all External Client Apps, view their settings, and edit their policies |
To configure a JWT bearer flow, you must first have an external client app on your Salesforce
org. See Create an External Client App.
- To create an X.509 certificate, follow the steps in OAuth 2.0 JWT Bearer Flow for Server-to-Server Integration.
- From Setup, in the Quick Find box, enter External Client Apps
Manager, and then select External Client Apps
Manager.
- From the actions dropdown list for the external client app that you want to configure,
select Edit Settings.
- In the OAuth Settings section, select Enable OAuth.
- Configure basic OAuth
settings.
- Select Enable JWT Bearer Flow.
- Select Upload Files and then choose the X.509 certificate.
- Save the settings.
- Create a JWT by following the steps in OAuth 2.0 JWT Bearer Flow for Server-to-Server Integration.
