---
schema_version: "1"
id: 25574b1f1c70023df2fd05b96f0764c669673d8757d0ad6c1199270dd5520b1d
title: Manage User Provisioning Requests
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/connected_app_user_provisioning_manage.md
canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.connected_app_user_provisioning_manage.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: ad1394ba0062d74dcb37436a7a38b0ace21695f18efd63452d42fe7736de385d
description: After you configure user provisioning for a connected app with the User Provisioning wizard, you can manage individual provisioning requests from the User Provisioning Requests tab and from the connected app’s detail page. If you included an approval process, you can set up user provisioning request sharing rules.
products:
  - Security
  - Cross Cloud
release: "264"
---
# Manage User Provisioning Requests

After you configure user provisioning for a connected app with the User Provisioning wizard, you can manage individual provisioning requests from the User Provisioning Requests tab and from the connected app’s detail page. If you included an approval process, you can set up user provisioning request sharing rules.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition">
      <colgroup>
        <col>
      </colgroup>
      <tbody>
        <tr class="">
          <td class="slds-cell-wrap" style="vertical-align:top;">Available in: both Salesforce Classic and
            Lightning Experience</td>

        </tr>
        <tr class="">
          <td class="slds-cell-wrap" style="vertical-align:top;">
            <p>Connected Apps can be created in: <strong>Group</strong>, <strong>Essentials</strong>, <strong>Professional</strong>,
              <strong>Enterprise</strong>, <strong>Performance</strong>, <strong>Unlimited</strong>, and <strong>Developer</strong>
              Editions
            </p>
            <p style="margin-bottom:0;">Connected Apps can be installed in: All editions</p>
          </td>

        </tr>
      </tbody>
    </table> <table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
      <colgroup>
        <col style="width:50%">
        <col style="width:50%">
      </colgroup>
      <thead class="slds-text-title_caps ">
        <tr class="">
          <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d41323e82">User Permissions Needed</th>
        </tr>
      </thead>
      <tbody>
        <tr class="">
          <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d41323e82 ">To manage user provisioning requests for connected apps:</td>

          <td class="slds-cell-wrap" style="vertical-align:top;" headers="d41323e82 ">View Setup and Configuration AND Manage Users</td>

        </tr>
        <tr class="">
          <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d41323e82 ">To read, create, update, or delete connected apps:</td>

          <td class="slds-cell-wrap" style="vertical-align:top;" headers="d41323e82 ">
            <p>Customize Application AND either</p>
            <p style="margin-bottom:0;">Modify All Data OR Manage Connected Apps</p>
          </td>

        </tr>
        <tr class="">
          <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d41323e82 ">To update all fields, except Profiles, Permission Sets, and Service Provider SAML
            Attributes:</td>

          <td class="slds-cell-wrap" style="vertical-align:top;" headers="d41323e82 ">
            <p>Customize Application AND either</p>
            <p style="margin-bottom:0;">Modify All Data OR Manage Connected Apps</p>
          </td>

        </tr>
        <tr class="">
          <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d41323e82 ">To update Profiles, Permission Sets, and Service Provider SAML Attributes:</td>

          <td class="slds-cell-wrap" style="vertical-align:top;" headers="d41323e82 ">Customize Application AND Modify All Data</td>

        </tr>
        <tr class="">
          <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d41323e82 ">To install and uninstall connected apps:</td>

          <td class="slds-cell-wrap" style="vertical-align:top;" headers="d41323e82 ">
            <p>Customize Application AND either</p>
            <p style="margin-bottom:0;">Modify All Data OR Manage Connected Apps</p>
          </td>

        </tr>
        <tr class="">
          <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d41323e82 ">To install and uninstall packaged connected apps:</td>

          <td class="slds-cell-wrap" style="vertical-align:top;" headers="d41323e82 ">
            <p>Customize Application AND either</p>
            <p>Modify All Data OR Manage Connected Apps</p>
            <p style="margin-bottom:0;">AND
              Download AppExchange Packages</p>
          </td>

        </tr>
      </tbody>
    </table>

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-identity-264-0-0-production-enus/699dab6f-8f1a-4662-b24f-6521d5b747f7/images/icon_note.png)

Note Connected apps creation is restricted as of Spring ‘26. You can continue to use existing connected apps during and after Spring ‘26. However, we recommend using [external client apps](https://help.salesforce.com/s/articleView?id=xcloud.external_client_apps.htm&language=en_US) instead. If you must continue creating connected apps, contact Salesforce Support.

See [New connected apps can no longer be created in Spring ‘26](https://help.salesforce.com/s/articleView?id=005228017&type=1&language=en_US) for more details.

## User Provisioning Requests Tab

From the User Provisioning Requests tab, you can view details and manage approvals for an individual user provisioning request. Each provisioning request details the status of the request and the status of an approval, if you chose to require approvals when you ran the User Provisioning Wizard.

Click the name of a recent user provisioning request to see these details.

Operation

The action for the current request, which can be one of these values:

- Create
- Read
- Update
- Deactivate
- Activate
- Freeze
- Unfreeze
- Reconcile (compares the Salesforce account to the account on the third-party system)
- Linking (changes the current Link State)

State

Current state of the user provisioning request. The User Provisioning wizard invokes a reconciliation process to gather user accounts on the third-party system and compare them to Salesforce user accounts. State reports the progress of the reconciliation process. Typically, when it’s created, a user provisioning request state is New. During the collection process, the state is set to Collecting. When the process finishes, the state is Collected.

If the reconciliation process discovers a difference between accounts, an analyze process is triggered, and the state is set to Analyzing. When the process finishes, the state is set to Analyzed.

If a process commits the request based on the linkage settings, the state is set to Committing, and Salesforce updates the user account properties, accordingly. When the update process finishes, the state is set to Completed.

However, some requests don’t start with the New state. For example, if a custom process initiates a request to reconcile accounts, an entry can start with the Analyzing state.

If the active process fails, the state changes to Failed.

Click the User Provisioning Account value to see these details about the user’s account.

Status

The status of the account in the third-party system, which can be one of these values:

- Active
- Deactivated
- Deleted

Link State

The state of the current connection between the user account in the Salesforce org and the associated user account in the third-party system. The link state can be one of these values:

- Linked—Changes to the account in the Salesforce org are queued for updating the associated user account in the third-party system
- Duplicate—An associated account in the third-party system exists
- Orphaned—No associated account exists in the third-party system
- Ignored—Changes to the account in the Salesforce org have no effect on the associated user account in the third-party system

## User Accounts Section of a Connected App’s Detail Page

The User Accounts section in a connected app’s detail page lists all the accounts discovered and linked to the third-party service. Normally, you let Salesforce manage the Link State to the user account on the third-party system. Salesforce can discover and associate user accounts between a Salesforce org and a third-party system during a reconciliation process. The association is based on attributes that you specify in the User Provisioning wizard.

Select **Let me manage the account linkage** _only_ if you want to control the Link State instead of letting Salesforce do it for you.

## User Provisioning Request Sharing Rules

If you’ve added approval processes to your user provisioning configuration, set sharing rules so that another user or manager can see and approve a user provisioning request. From Setup, enter Sharing Settings in the Quick Find box, then select **Sharing Settings**.

#### See Also

- [User Provisioning for Connected Apps](https://help.salesforce.com/s/articleView?id=xcloud.connected_app_user_provisioning.htm&release=264.0.0&type=5 "You can use a connected app to link your users with a third-party app. User provisioning for a connected app simplifies account creation and links your Salesforce users’ accounts to their third-party accounts. After the accounts are linked, you can configure the App Launcher to display the connected app as a tile. With a single click, users get instant access to the third-party app.")