Skip to main content
New tool CRON Expression Builder — preview next run times before you schedule Apex. Open the builder →

OAuth articles

13 articles · Connected apps, the OAuth flows, and token handling.

Diagram of an OAuth username-password flow retirement migration to Client Credentials and JWT BearerIntegration

OAuth Username-Password Flow Retirement: Migrate by Feb 20

Salesforce blocks new tokens from the OAuth username-password flow on February 20, 2027, and affected integrations fail...

· 10 min readMigration tracker sorting apps into four ownership buckets ahead of connected apps end of supportIntegration

Connected Apps End of Support: What to Migrate and When

Connected apps end of support lands in Summer '27 for every app in your org, and device-flow apps face an earlier...

· 9 min readTimeline diagram of the Salesforce SOAP login retirement with Winter '27 and Summer '27 deadlinesIntegration

Salesforce SOAP Login Retirement: Two Deadlines, One Audit

Salesforce SOAP login retirement starts in Winter '27, when login() requires the Use Any API Auth permission, and...

· 9 min readSalesforce OAuth device flow moving from a connected app to a local External Client AppIntegration

Salesforce OAuth Device Flow Ends for Connected Apps Nov 30

From 30 November 2026 the OAuth 2.0 device flow only works from local External Client Apps with a localhost callback,...

· 10 min readDiagram of a Salesforce webhook integration using JWT Bearer Flow through a Node.js serviceIntegration

Salesforce Webhook Integration With JWT Bearer Flow

Salesforce has no inbound webhook listener, so third-party callbacks need a small service in front of the org. Building...

· 11 min readA digital padlock representing the unsupported_grant_type Apigee error resolution for secure Salesforce API integrations.Integration

unsupported_grant_type: Fixing Apigee JWT Integration

The unsupported_grant_type error in Apigee usually comes down to how the OAuthV2 policy reads request headers against...

· 3 min read
A 3D rendering showing the Box.com Salesforce integration concept with cloud and folder icons.Apex

Box.com Salesforce Integration: Apex Backend Guide

How to wire Salesforce up to Box.com in Apex: secure authentication, the file upload patterns that hold up, and error...

· 3 min readAn illustration representing secure OAuth 2.0 JWT Bearer flow connectivity for Salesforce integration.Integration

External Client App for Headless 360 MCP: Scopes and Setup

Headless 360's MCP server needs an External Client App with the mcp_api scope, refresh_token, and API v67.0 or later....

· 10 min readDiagram showing the process for unattended Salesforce sandbox user token generation in a CI/CD flowIntegration

Unattended Sandbox User Token Generation for CI/CD

Pulling access tokens for a pile of sandbox test users is a common CI/CD snag when the tests have to run as specific...

· 4 min readDiagram illustrating the OpenID Connect flow for secure user authentication in applicationsInterview Prep

What is OpenID Connect? The Developer Interview Answer

Ever get confused between OAuth and OIDC during an interview? This post explains OpenID Connect as the identity layer...

· 5 min readDiagram illustrating the flow of Salesforce OAuth explained for secure API integration setupIntegration

Salesforce OAuth Explained: Secure Your API Integrations

Most of us copy and paste Salesforce OAuth settings and hope for the best, but OAuth is what holds your integrations...

· 5 min readDiagram showing the secure handshake process facilitated by a Salesforce Connected App for API integration.Integration

Salesforce Connected App: Secure Your API Integrations

Think of a Salesforce Connected App as a digital ID card for your external software. It is your control panel for...

· 5 min read