Skip to main content
New tool CRON Expression Builder — preview next run times before you schedule Apex. Open the builder →

OAuth articles

11 articles · Connected apps, the OAuth flows, and token handling.

Timeline diagram of the Salesforce SOAP login retirement with Winter '27 and Summer '27 deadlinesIntegration

Salesforce SOAP Login Retirement: Two Deadlines, One Audit

Salesforce SOAP login retirement starts in Winter '27, when login() requires the Use Any API Auth permission, and...

· 9 min read Salesforce OAuth device flow moving from a connected app to a local External Client AppIntegration

Salesforce OAuth Device Flow Ends for Connected Apps Nov 30

From 30 November 2026 the OAuth 2.0 device flow only works from local External Client Apps with a localhost callback,...

· 10 min read Diagram of a Salesforce webhook integration using JWT Bearer Flow through a Node.js serviceIntegration

Salesforce Webhook Integration With JWT Bearer Flow

Salesforce has no inbound webhook listener, so third-party callbacks need a small service in front of the org. Building...

· 11 min read A digital padlock representing the unsupported_grant_type Apigee error resolution for secure Salesforce API integrations.Integration

unsupported_grant_type: Fixing Apigee JWT Integration

The unsupported_grant_type error in Apigee usually comes down to how the OAuthV2 policy reads request headers against...

· 3 min read A 3D rendering showing the Box.com Salesforce integration concept with cloud and folder icons.Apex

Box.com Salesforce Integration: Apex Backend Guide

How to wire Salesforce up to Box.com in Apex: secure authentication, the file upload patterns that hold up, and error...

· 3 min read An illustration representing secure OAuth 2.0 JWT Bearer flow connectivity for Salesforce integration.Integration

External Client App for Headless 360 MCP: Scopes and Setup

Headless 360's MCP server needs an External Client App with the mcp_api scope, refresh_token, and API v67.0 or later....

· 10 min read Diagram showing the process for unattended Salesforce sandbox user token generation in a CI/CD flowIntegration

Unattended Sandbox User Token Generation for CI/CD

Pulling access tokens for a pile of sandbox test users is a common CI/CD snag when the tests have to run as specific...

· 4 min read Diagram illustrating the OpenID Connect flow for secure user authentication in applicationsInterview Prep

What is OpenID Connect? The Developer Interview Answer

Ever get confused between OAuth and OIDC during an interview? This post explains OpenID Connect as the identity layer...

· 5 min read Diagram illustrating the flow of Salesforce OAuth explained for secure API integration setupIntegration

Salesforce OAuth Explained: Secure Your API Integrations

Most of us copy and paste Salesforce OAuth settings and hope for the best, but OAuth is what holds your integrations...

· 5 min read Diagram showing the secure handshake process facilitated by a Salesforce Connected App for API integration.Integration

Salesforce Connected App: Secure Your API Integrations

Think of a Salesforce Connected App as a digital ID card for your external software. It is your control panel for...

· 5 min read Step-by-step guide showing how to link Google Sheets to Salesforce using the G-Connector applicationIntegration

Connect Salesforce to Google Sheets: Apex or Connector

Two ways to connect Salesforce to Google Sheets: a Sheets add-on that a person drives, or an Apex REST callout through...

· 9 min read