--- schema_version: "1" id: c2ef7b96f951c1792848f102be10bf0be09c5e16b28a49a10aea668e3c24e6d1 title: ConnectApi.ExternalCredentialInput collection: legacydeveloper version: current locale: en-us portal_url: https://docs.salesforce.com/legacydeveloper/current/en-us/apexref/apex_connectapi_input_external_credential.md canonical_url: https://developer.salesforce.com/docs/atlas.en-us.apexref.meta/apexref/apex_connectapi_input_external_credential.htm source_site: developer.salesforce.com content_type: documentation content_hash: df54a21887d46f5f67f15370851541abf4ca8b9acfea0e7649d77223b45adc55 description: Input used to create or update an external credential. --- # ConnectApi.ExternalCredentialInput Input used to create or update an external credential. ![Important](https://developer.salesforce.com/docs/atlas.en-us.apexref.meta/apexref/images/icon_note_important.png) #### Important Where possible, we changed noninclusive terms to align with our company value of Equality. We maintained certain terms to avoid any effect on customer implementations.
Property Type Description Required or Optional Available Version
authentication​Protocol ConnectApi.​Credential​Authentication​Protocol Authentication protocol of the external credential. Values are:
  • AwsSv4
  • Basic
  • Custom
  • Jwt
  • OAuth
 Required 58.0
authentication​ProtocolVariant ConnectApi.​Credential​Authentication​ProtocolVariant Authentication protocol variant of the external credential. Values are:
  • AwsSv4_STS—AWS Signature Version 4 with Security Token Service.
  • ClientCredentialsClientSecret—OAuth 2.0 Client Credentials client secret. Client secrets are sent in the callout’s request body.
  • ClientCredentialsClientSecretBasic—OAuth 2.0 Client Credentials client secret. Client secrets are sent in the callout’s authorization header, as with Basic authentication.
  • ClientCredentialsJwtAssertion—OAuth 2.0 Client Credentials JSON Web Token assertion.
  • JwtBearer—OAuth 2.0 JSON Web Token bearer flow.
  • NoAuthentication—No authentication.
  • RolesAnywhere—AWS Signature Version 4 with Identity and Access Management (IAM) Roles Anywhere.
If specified, the authentication protocol variant must match the actual protocol variant of the external credential. 		Optional 58.0
customHeaders List<ConnectApi.​CredentialCustom​HeaderInput> List of credential custom headers. Optional 58.0
developerName String Fully qualified developer name of the external credential. Required for creating an external credential

Optional for updating an external credential

 58.0
masterLabel String External credential label. Required 58.0
parameters List<ConnectApi.​ExternalCredential​ParameterInput> List of external credential parameters. Optional depending on authenticationProtocol and authenticationVariant 58.0
principals List<ConnectApi.​ExternalCredential​PrincipalInput> List of principals the credential has. Optional 58.0