--- schema_version: "1" id: bb4f4965d0a733dc4052829689b93a7e36e0e15a75a63275d00c3aa5786a750b title: ExternalDataUserAuth collection: legacydeveloper version: current locale: en-us portal_url: https://docs.salesforce.com/legacydeveloper/current/en-us/object_reference/sforce_api_objects_externaldatauserauth.md canonical_url: https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_externaldatauserauth.htm source_site: developer.salesforce.com content_type: documentation content_hash: 5c549609b57a6a46a4cfc940f9b33fb16d81e4937e9619847db40b37a6450d3b description: Stores authentication settings for a Salesforce user to access an external system. The external system must be defined in an external data source or a named credential that’s configured to use per-user authentication. This object is available in API version 27.0 and later. --- # ExternalDataUserAuth Stores authentication settings for a Salesforce user to access an external system. The external system must be defined in an external data source or a named credential that’s configured to use per-user authentication. This object is available in API version 27.0 and later. ![Note](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/images/icon_note.png) #### Note All credentials stored within this entity are encrypted under a framework that is consistent with other encryption frameworks on the platform. Salesforce encrypts your credentials by auto-creating org-specific keys. Credentials encrypted using the previous encryption scheme have been migrated to the new framework. ## Supported Calls create(), delete(), describeSObjects(), query(), retrieve(), update(), upsert() ## Fields | Field Name | Details | | --- | --- | | AuthProviderId | Type reference Properties Create, Filter, Group, Nillable, Sort, Update Description Salesforce ID of the authentication provider, which defines the service that provides the login process and approves access to the external system. Only users with the “Customize Application” and “Manage AuthProviders” permissions can view this field. This field is available in API version 39.0 and later. This is a relationship field. Relationship Name AuthProvider Relationship Type Lookup Refers To AuthProvider | | ExternalDataSourceId | Type reference Properties Create, Filter, Group, Sort Description Salesforce ID of the external data source or named credential that defines the external system. This is a polymorphic relationship field. Relationship Name ExternalDataSource Relationship Type Lookup Refers To ExternalDataSource, NamedCredential | | Password | Type textarea Properties Create, Nillable, Update Description Password portion of the credentials for the Salesforce user to access the external system. | | Protocol | Type picklist Properties Create, Defaulted on create, Filter, Group, Nillable, Restricted picklist, Sort, Update Description Specifies whether to use OAuth, password authentication, or no authentication when the user accesses the external system. Additional authentication protocols are supported for the Amazon DynamoDB, Amazon Athena, Snowflake, GraphQL, and OData 4.01 external data sources. - AwsSv4 - Basic - Custom - Jwt - JwtExchange | | UserId | Type reference Properties Create, Defaulted on create, Filter, Group, Nillable, Sort, Update Description ID of the Salesforce user who’s accessing the external system. This is a relationship field. Relationship Name User Relationship Type Lookup Refers To User | | Username | Type string Properties Create, Filter, Group, Nillable, Sort, Update Description Username portion of the credentials for the Salesforce user to access the external system. | ## Usage These authentication settings enable a Salesforce user to access an external system. The external system is defined in Salesforce as one of the following. - External data source—Provides access to external objects, whose data is stored outside the Salesforce organization. - Named credential—Enables the user’s actions to trigger authenticated callouts to the endpoint that’s specified in the named credential. If you grant users access to the external data source or named credential via permission sets or profiles, those users can manage their own authentication settings. See [Store Authentication Settings for External Systems](https://help.salesforce.com/s/articleView?id=platform.external_authentication.htm&type=5&language=en_US "HTML (New Window)") in the Salesforce Help. #### See Also - [ExternalDataSource](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_externaldatasource.htm "Represents an external data source, which defines connection details for integration with data and content that are stored outside the Salesforce org. This object is available in API version 27.0 and later.") - [NamedCredential](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_namedcredential.htm "Represents a named credential, which specifies the URL of a callout endpoint and its required authentication parameters in one definition. A named credential can be specified as an endpoint to simplify the setup of authenticated callouts. This object is available in API version 33.0 and later.")