---
schema_version: "1"
id: 0dec776477ea4e08fb7e34df9cb2dfd5ed1464e483c937e2e10a6eb313c3bcc2
title: Deploy the External Client App OAuth Plugin
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/deploy_external_client_app_oauth_plugin.md
canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.deploy_external_client_app_oauth_plugin.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 63949d2e7046dcd8ce78f7db9c8c07aa5da26d021fee31769a5a0f4e5ef47194
description: After configuring the OAuth settings file and the global OAuth settings file, deploy the changes to update the external client app.
products:
  - Security
  - Cross Cloud
release: "264"
---
# Deploy the External Client App OAuth Plugin

After configuring the OAuth settings file and the global OAuth settings file, deploy the changes to update the external client app.

When deploying or making changes to an external client app, you must retrieve, update, and deploy the data completely. The metadata API does not support partial updates.

1. Configure the package.xml manifest file in the project directory to reference these types.
    
    - `ExtlClntAppOauthSettings`
    - `ExtlClntAppGlobalOauthSettings`
    - `ExtlClntAppOauthConfigurablePolicies`
    
    The package.xml file should look like this.
    
    ```
    <?xml version="1.0" encoding="UTF-8"?>
    <Package xmlns="http://soap.sforce.com/2006/04/metadata">
        <types>
            <members>*</members>
            <name>ExternalClientApplication</name>
        </types>
        <types>
            <members>*</members>
            <name>ExtlClntAppOauthSettings</name>
        </types>
        <types>
            <members>*</members>
            <name>ExtlClntAppGlobalOauthSettings</name>
        </types>
        <types>
            <members>*</members>
            <name>ExtlClntAppOauthConfigurablePolicies</name>
        </types>
        <version>58.0</version>
    </Package>
    ```
2. Run this command.
    
    ```
    sf project deploy start --manifest package.xml --target-org johndoe@example.com
    ```
    
    When the OAuth settings and global settings files are deployed, a new OAuth consumer is created. Fields like `consumerKey` and `consumerSecret` are generated. To verify that the external client app settings and global settings deployed successfully, check that the auto-generated options were created.
3. Use this retrieve command to see the deployed package.xml file.
    
    ```
    sf project retrieve start --manifest package.xml --target-org johndoe@example.com
    ```