---
schema_version: "1"
id: cb98ddbf2131b9e86dd07f8436d60227a4a897d4b35c12e5da2f9ae85e73383a
title: Manage Third-Party Connected Apps
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/connected_app_manage_third_party.md
canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.connected_app_manage_third_party.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 1e6d7ea522765fe26ff48c071b350f2972c1bf61babc0d2deabfe906d0ae75d0
description: If your org uses third-party apps, such as those installed from the AppExchange, you can set security policies to control what data the third-party app can access from your org. You can also define who can use the third-party app. In addition to setting security policies to manage third-party apps, you can uninstall, and—when necessary—block these apps from the Salesforce org.
products:
  - Security
  - Cross Cloud
release: "264"
---
# Manage Third-Party Connected Apps

If your org uses third-party apps, such as those installed from the AppExchange, you can set security policies to control what data the third-party app can access from your org. You can also define who can use the third-party app. In addition to setting security policies to manage third-party apps, you can uninstall, and—when necessary—block these apps from the Salesforce org.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition">
      <colgroup>
        <col>
      </colgroup>
      <tbody>
        <tr class="">
          <td class="slds-cell-wrap" style="vertical-align:top;">Available in: both Salesforce Classic and Lightning Experience</td>

        </tr>
        <tr class="">
          <td class="slds-cell-wrap" style="vertical-align:top;">
            <p>Connected Apps can be created in: <strong>Group</strong>, <strong>Essentials</strong>,
              <strong>Professional</strong>, <strong>Enterprise</strong>, <strong>Performance</strong>, <strong>Unlimited</strong>, and
              <strong>Developer</strong> Editions
            </p>
            <p style="margin-bottom:0;">Connected Apps can be installed in: All
              editions</p>
          </td>

        </tr>
      </tbody>
    </table> <table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
      <colgroup>
        <col style="width:50%">
        <col style="width:50%">
      </colgroup>
      <thead class="slds-text-title_caps ">
        <tr class="">
          <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d87120e83">User Permissions Needed</th>
        </tr>
      </thead>
      <tbody>
        <tr class="">
          <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d87120e83 ">To read, create, update, or delete connected apps:</td>

          <td class="slds-cell-wrap" style="vertical-align:top;" headers="d87120e83 ">
            <p>Customize Application AND either</p>
            <p style="margin-bottom:0;">Modify All Data OR Manage Connected
              Apps</p>
          </td>

        </tr>
        <tr class="">
          <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d87120e83 ">To update all fields except Profiles, Permission Sets, and Service Provider SAML
            Attributes:</td>

          <td class="slds-cell-wrap" style="vertical-align:top;" headers="d87120e83 ">
            <p>Customize Application AND either</p>
            <p style="margin-bottom:0;">Modify All Data OR Manage Connected
              Apps</p>
          </td>

        </tr>
        <tr class="">
          <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d87120e83 ">To update Profiles, Permission Sets, and Service Provider SAML
            Attributes:</td>

          <td class="slds-cell-wrap" style="vertical-align:top;" headers="d87120e83 ">Customize Application AND Modify All Data AND Manage Profiles and Permission
            Sets</td>

        </tr>
        <tr class="">
          <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d87120e83 ">To rotate the consumer key and consumer secret:</td>

          <td class="slds-cell-wrap" style="vertical-align:top;" headers="d87120e83 ">Allow consumer key and secret rotation</td>

        </tr>
        <tr class="">
          <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d87120e83 ">To install and uninstall connected apps:</td>

          <td class="slds-cell-wrap" style="vertical-align:top;" headers="d87120e83 ">
            <p>Customize Application AND either</p>
            <p style="margin-bottom:0;">Modify All Data OR Manage Connected
              Apps</p>
          </td>

        </tr>
        <tr class="">
          <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d87120e83 ">To install and uninstall packaged connected apps:</td>

          <td class="slds-cell-wrap" style="vertical-align:top;" headers="d87120e83 ">
            <p>Download AppExchange Packages AND Customize Application AND either</p>
            <p style="margin-bottom:0;">Modify All
              Data OR Manage Connected Apps</p>
          </td>

        </tr>
      </tbody>
    </table>

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-identity-264-0-0-production-enus/699dab6f-8f1a-4662-b24f-6521d5b747f7/images/icon_note.png)

Note Connected apps creation is restricted as of Spring ‘26. You can continue to use existing connected apps during and after Spring ‘26. However, we recommend using [external client apps](https://help.salesforce.com/s/articleView?id=xcloud.external_client_apps.htm&language=en_US) instead. If you must continue creating connected apps, contact Salesforce Support.

See [New connected apps can no longer be created in Spring ‘26](https://help.salesforce.com/s/articleView?id=005228017&type=1&language=en_US) for more details.

As a third-party connected app consumer, you’re org installed the app from the AppExchange Marketplace or as a managed package from Salesforce or a third-party vendor’s website. You can only edit the app’s access policies, such as determining who can use the app and whether the app can access data from a remote location.

![Example](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-identity-264-0-0-production-enus/699dab6f-8f1a-4662-b24f-6521d5b747f7/images/icon_example.png)

Example For example, you install a third-party app that allows your org’s users to make travel reservations. By selecting the option Admin approved users are pre-authorized for the connected app, you can assign specific user profiles to the app. Only the users with this user profile can access the app. You can also set a refresh token policy to revoke the travel reservation app’s access to your Salesforce data after a set amount of time.

## Connected Apps Installed by Salesforce

Some Salesforce client apps, such as the Salesforce mobile app and Salesforce for Outlook, are implemented as connected apps. Salesforce automatically installs them in your org.

Salesforce distributes these client-type connected apps in two managed packages: The connected apps included in the package change with each release. Salesforce installs the package the first time a user accesses one of the apps.

- Salesforce for Android and Salesforce for iOS
- Salesforce for other mobile apps

Salesforce packages appear in Setup under the Installed Packages List. See [Installed Packages](https://help.salesforce.com/articleView?id=distribution_installed_packages.htm&type=5&language=en_US).

![The packages in the Installed Packages List](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-identity-264-0-0-production-enus/699dab6f-8f1a-4662-b24f-6521d5b747f7/identity/images/managed_packages_preinstalled.png)

Click a package name to see the list of components. The following are some components in the Salesforce Connected Apps package.

![The components of the Salesforce Connected Apps](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-identity-264-0-0-production-enus/699dab6f-8f1a-4662-b24f-6521d5b747f7/identity/images/salesforce_package_apps_preinstalled.png)

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-identity-264-0-0-production-enus/699dab6f-8f1a-4662-b24f-6521d5b747f7/images/icon_note.png)

Note The Ant Migration Tool is a “wrapper” connected app that uses SOAP API to integrate with Salesforce. It still uses the connected apps framework to allow or deny users access to the apps in an org.

The following are examples of components for the Salesforce mobile app and Chatter app packages.

![The components of the Salesforce1 and Chatter Apps](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-identity-264-0-0-production-enus/699dab6f-8f1a-4662-b24f-6521d5b747f7/identity/images/salesforce1_package_apps_preinstalled.png)

To install or reinstall the Salesforce mobile app package for connected apps, you can install it from [App Exchange](https://appexchange.salesforce.com/listingDetail?listingId=a0N3000000B4cUuEAJ).

You can manage installed connected apps from the Connected Apps page. The connected apps that Salesforce installs appear in the list as installed by a managed package. They appear along with your other installed connected apps.

![Example of the list of connected apps](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-identity-264-0-0-production-enus/699dab6f-8f1a-4662-b24f-6521d5b747f7/identity/images/connapps_preinstalled.png)