After you create a connected app, you can make changes to it’s configuration. The actions that you can perform depend on the type of connected app. Use the App Manager to get a list of apps available in your org, including connected apps. From here, you can edit, reconfigure, or delete the connected app.
Required Editions
| Available in: both Salesforce Classic and Lightning Experience |
|
Connected Apps can be created in: Group, Essentials, Professional, Enterprise, Performance, Unlimited, and Developer Editions Connected Apps can be installed in: All editions |
Note Connected apps creation is restricted as of Spring ‘26. You can continue to use existing
connected apps during and after Spring ‘26. However, we recommend using external client apps instead. If you must continue
creating connected apps, contact Salesforce Support.
See New connected apps can no longer be created in Spring ‘26 for more details.
- Reconfigure a Connected App
You can reconfigure a connected app at any time to change the app’s description, logo, icon, or callback URL. You can update settings for OAuth, web apps, mobile apps, or canvas apps. - View and Rotate the Consumer Key and Consumer Secret of a Connected App
Keep your connected apps secure by periodically changing your consumer key (client ID) and consumer secret (client secret). To make sure that your existing integrations don’t break, generate staged consumer details and share them with your connected app integrations. When you're ready, apply the new consumer details. - Configure Trusted IP Ranges for a Connected App
After you create a connected app, you can specify the trusted IP ranges from which a user can log in. In addition, you can apply IP relaxation to all OAuth client apps, including apps that use OAuth and SAML for single sign-on. - Limit the Idle Refresh Token TTL in Connected Apps
For improved security, Salesforce requires a 30-day limit to the idle refresh token TTL (time-to-live). The idle TTL is the amount of time that an OAuth refresh token can be inactive before it expires. When a refresh token expires, the user or app must request a new access token. The idle TTL works as a sliding window: each time the token is used within the 30 day-period, its idle TTL resets. For flows that don't use refresh tokens, this control also caps the access token lifetime at 30 days from the last login date. - Add Custom Attributes to a Connected App
After you’ve created the connected app, you can add custom attributes. With custom attributes, you can get more information about a user’s identity like an address or job title. Custom attributes specify SAML metadata or specify OAuth parameters that are read at OAuth runtime. - Delete a Connected App
You can delete a connected app that you created. But if you delete a connected app, you can’t restore it. Don’t delete a connected app that’s associated with an active managed package.