---
schema_version: "1"
id: f3b0acedd2f7d2f73debed92c811de2ac0e6475ca0b72172c52c1eda754cef67
title: Configure External Client App Policies
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/meta_configure_external_client_app_policies.md
canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.meta_configure_external_client_app_policies.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 1384e648cc1e972ba97337e88a4e29489223fb740cfa3f4938e167302180067d
description: Salesforce admins can set the policies that control the external client app. All changes are made through the metadata API.
products:
  - Security
  - Cross Cloud
release: "264"
---
# Configure External Client App Policies

Salesforce admins can set the policies that control the external client app. All changes are made through the metadata API.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d22075e27">User Permissions Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d22075e27 ">To view all external client apps, view their settings, and edit their OAuth policies
              file</td>
            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d22075e27 ">View all External Client Apps, view their settings, and edit their policies</td>
          </tr>
        </tbody>
      </table>

To update an OAuth policies file, you must first deploy an external client app on your Salesforce org. [Deploy an External Client App That References the Source Org’s Global OAuth Settings File](https://help.salesforce.com/s/articleView?id=xcloud.deploy_external_client_app_that_references_the_source_org.htm&release=264.0.0&type=5 "Deploy an external client app on a new org, and have it reference the source org’s credentials. To configure this relationship, edit the OAuth link in the OAuth settings file and remove the reference to the global OAuth settings file in the package.xml manifest file of the new org."), or [Deploy an External Client App with a New Global OAuth Settings File](https://help.salesforce.com/s/articleView?id=xcloud.deploy_external_client_app_with_global_settings_file.htm&release=264.0.0&type=5 "Deploy the source org’s metadata on an org with its own OAuth consumer. To configure the app, remove the OAuth link in the OAuth settings file and add a reference to the global OAuth settings file in the package.xml manifest file on the new org.").

1. Open the ExtlClntAppOauthConfigurablePolicies file on your org.
    
    The OAuth policies file is generated when the external client app is deployed, and its name follows this format: \[ECAPP\_OAUTH\_POLICY\].ecaOauthPlcy-meta.xml.
2. To set the configuration, edit the field values in the OAuth policies file.
    
    See [Verify OAuth Policy and Settings Generation](https://help.salesforce.com/s/articleView?id=xcloud.verify_oauth_policy_settings_field_generation.htm&release=264.0.0&type=5 "When the OAuth Plugin is deployed, several external client app components are generated. There are a few places you can check to verify if the deployment was successful.") for information about the available OAuth policies fields.
3. Deploy the OAuth policies changes.
    
    ```
    sf project deploy start --manifest package.xml --target-org johndoe@example.com
    ```
4. Use this command to retrieve the updated external client app information.
    
    ```
    sf project retrieve start --manifest package.xml --target-org johndoe@example.com
    ```