Keep your connected apps secure by periodically changing your consumer key (client ID) and consumer secret (client secret). To make sure that your existing integrations don’t break, generate staged consumer details and share them with your connected app integrations. When you're ready, apply the new consumer details.
Required Editions
| Available in: both Salesforce Classic and Lightning Experience |
|
Connected Apps can be created in: Group, Essentials, Professional, Enterprise, Performance, Unlimited, and Developer Editions Connected Apps can be installed in: All editions |
| User Permissions Needed | |
|---|---|
| To read, create, update, or delete connected apps: |
Customize Application AND either Modify All Data OR Manage Connected Apps |
| To update all fields except Profiles, Permission Sets, and Service Provider SAML Attributes: |
Customize Application AND either Modify All Data OR Manage Connected Apps |
| To update Profiles, Permission Sets, and Service Provider SAML Attributes: | Customize Application AND Modify All Data AND Manage Profiles and Permission Sets |
| To rotate the consumer key and consumer secret: | Allow consumer key and secret rotation |
| To install and uninstall connected apps: |
Customize Application AND either Modify All Data OR Manage Connected Apps |
| To install and uninstall packaged connected apps: |
Download AppExchange Packages AND Customize Application AND either Modify All Data OR Manage Connected Apps |
See New connected apps can no longer be created in Spring ‘26 for more details.
To avoid issues with your integrations, keep track of your app's consumer details and source org. Don't use a sandbox as the source org for a production app. If you delete or refresh a sandbox, the app's consumer details can become unusable, breaking your integrations.
- From Setup, in the Quick Find box, enter Apps, and then select App Manager.
- Find the connected app, click
, and then select View. - Next to Consumer Key and Secret, click Manage Consumer
Details.
You’re prompted to verify your identity using one of your registered methods. You can view the consumer details page for up to 5 minutes before you’re prompted to verify your identity again.
- To generate new values for the consumer key and consumer secret, under Staged Consumer
Details, click Generate.
Each time you generate staged values for the consumer key and secret, you overwrite the existing staged values. You can generate new staged values at any time. Staged values aren’t valid until you apply them.
- Share the staged consumer details with your connected app admins and integrations.
- When you’re ready to use the staged consumer details, click Apply.
- Click Apply again to accept the warning.
Immediately after you apply the new consumer details, you can experience up to 10 minutes of unstable behavior as the changes are propagated to the connected app and its integrations. During this time, the old and new consumer details work intermittently. After this 10-minute period, the new consumer details replace the previous values, and only the new consumer details work.