---
schema_version: "1"
id: 0d94aacc9ffc7064a70c803b7586927a1c85784e54d1205ce5b08d2c0cf2ee37
title: Create or Edit an OAuth External Credential
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/nc_create_edit_oath_ext_cred.md
canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.nc_create_edit_oath_ext_cred.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 55b2c9ed49de7e6abcf659f341a63a3dc41a78805be008b99b3d1ba67294ae27
description: External credentials support four different variants of the OAuth authentication protocol.
products:
  - Security
release: "264"
---
# Create or Edit an OAuth External Credential

External credentials support four different variants of the OAuth authentication protocol.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: both Salesforce Classic (not available in all orgs) and Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: all editions</td></tr></tbody></table>

- **[Create or Edit an OAuth External Credential with the Browser Flow](https://help.salesforce.com/s/articleView?id=xcloud.nc_create_edit_oath_browser_ext_cred.htm&release=264.0.0&type=5)**  
    With an OAuth 2.0 external credential that uses the Browser Flow, one or more users logs into the remote system via a web browser to trigger a callback that includes access tokens. The returned tokens authenticate calls to the endpoint defined in the named credential.
- **[Create or Edit an OAuth External Credential with the Client Credentials with Client Secret Flow](https://help.salesforce.com/s/articleView?id=xcloud.nc_create_edit_oath_client_secret_ext_cred.htm&release=264.0.0&type=5)**  
    An OAuth 2.0 external credential that uses the Client Credentials with Client Secret Flow exchanges a client identifier and a client secret for an access token. The returned tokens authenticate calls to the endpoint defined in the named credential. Use the Client Credentials with Client Secret Flow when Salesforce is a client application of another external system that has its own login credentials. Instead of managing access to the external system on a per-user basis, you can set up service-level access for your Salesforce org.
- **[Create or Edit an OAuth External Credential with the Client Credentials Flow Managed by an External Identity Provider](https://help.salesforce.com/s/articleView?id=xcloud.nc_create_edit_oath_client_cred_xidp_ext_cred.htm&release=264.0.0&type=5)**  
    An OAuth 2.0 external credential that uses Client Credentials Flow Managed by an External Auth Identity Provider uses the client identification configured in the linked external auth identity provider.
- **[Create or Edit an OAuth External Credential with the Client Credentials with JWT Assertion Flow](https://help.salesforce.com/s/articleView?id=xcloud.nc_create_edit_oath_jwt_assertion_ext_cred.htm&release=264.0.0&type=5)**  
    An OAuth 2.0 external credential that uses the JWT Assertion Flow exchanges client credentials defined in a client identifier and in a JSON Web Token (JWT) assertion for an access token. The returned tokens authenticate calls to the endpoint defined in the named credential.
- **[Create or Edit an OAuth External Credential with the JWT Bearer Flow](https://help.salesforce.com/s/articleView?id=xcloud.nc_create_edit_oath_jwt_bearer_ext_cred.htm&release=264.0.0&type=5)**  
    An OAuth 2.0 external credential that uses the JWT Bearer Flow sends a JWT (JSON Web Token) to an authorization provider in exchange for a token. The returned tokens authenticate calls to the endpoint defined in the named credential.