After you create a connected app, you can specify the trusted IP ranges from which a user can log in. In addition, you can apply IP relaxation to all OAuth client apps, including apps that use OAuth and SAML for single sign-on.
Required Editions
| Available in: both Salesforce Classic and Lightning Experience |
|
Connected Apps can be created in: Group, Essentials, Professional, Enterprise, Performance, Unlimited, and Developer Editions Connected Apps can be installed in: All editions |
| User Permissions Needed | |
|---|---|
| To read, create, update, or delete connected apps: |
Customize Application AND either Modify All Data OR Manage Connected Apps |
| To update all fields except Profiles, Permission Sets, and Service Provider SAML Attributes: |
Customize Application AND either Modify All Data OR Manage Connected Apps |
| To update Profiles, Permission Sets, and Service Provider SAML Attributes: | Customize Application AND Modify All Data AND Manage Profiles and Permission Sets |
| To rotate the consumer key and consumer secret: | Allow consumer key and secret rotation |
| To install and uninstall connected apps: |
Customize Application AND either Modify All Data OR Manage Connected Apps |
| To install and uninstall packaged connected apps: |
Download AppExchange Packages AND Customize Application AND either Modify All Data OR Manage Connected Apps |
See New connected apps can no longer be created in Spring ‘26 for more details.
For more information about IP Relaxation, see Manage OAuth Access Policies for a Connected App.
- From Setup, enter Apps in the Quick Find box, then select App Manager.
- Locate the connected app, click
,
and then select View. - In the Trusted IP Range for OAuth Web Server Flow section, click New.
- For the start IP address, enter a valid IP address. For the end IP address, enter the same
or higher IP address.
Enter multiple, discontinuous ranges by clicking New.