--- title: Connecting with OAuth 2.0 description: "Table of Contents - [Step 1 - Create a self-signed certificate](#step-1-create-a-selfsigned-certificate) - [Step 2 - Save the certificate](#step-2--save-the-certificate) - [Step 3 - Create a Custom External Client App](#step-3--create-a-custom-external-client-app) - [Step 4 - Edit Policies - OAuth Policies](#step-4--edit-policies-oauth-policies) - [Step 5 Edit Settings -…" url: "https://sql-sales.com/docs/connecting-with-oauth-2-0/" updated: "2026-10-14" category: Setup --- # Connecting with OAuth 2.0 Table of Contents - [Step 1 - Create a self-signed certificate](#step-1-create-a-selfsigned-certificate) - [Step 2 - Save the certificate](#step-2--save-the-certificate) - [Step 3 - Create a Custom External Client App](#step-3--create-a-custom-external-client-app) - [Step 4 - Edit Policies - OAuth Policies](#step-4--edit-policies-oauth-policies) - [Step 5 Edit Settings - OAuth Settings](#step-5-edit-settings-oauth-settings) - [Step 6 - Return to the SQL-Sales Environment configuration from Step 1:](#step-6-return-to-the-sqlsales-environment-configuration-from-step-1) With External Client App Note, you only need to create a custom External Client App for the OAuth 2.0 connection method. OAuth 2.0 provides increased levels of security and so may be required for some Customers or use cases, alternatively simply use the traditional Username-Password-Security Token (SOAP or REST api) connection method (i.e. which doesn't require a custom External Client App setting up). All connection methods require the SQL-Sales Managed Package to be installed against the configured Environment (sandbox or Production instance). ## **Step 1 - **Create a self-signed certificate In the Environment configuration manager for your given Env, enter the following: | Input field | Notes | | --- | --- | | **Integration Username** | The username of the integration user you're planning on using for setting up the External Client app | | **Custom External Client App Name** | Enter a suitable name for this Salesforce instance/sandbox, this is what you will eventually provide in Salesforce when creating the External Client app. Note, SQL-Sales will only accept alphanumeric, space and underscore characters for what will be the ExternalClientApplication.MasterLabel | | **Expiration (days)** | Enter an expiry term in days (maximum is 365 days) | Click "Create Certificate" [![](https://downloads.intercomcdn.com/i/o/utvm5llh/2065938744/f8ed0fa75339b6da3cf473d6e78a/image.png?expires=1782259200&signature=1d7f0bc2227d6dede88693463f1ecf186ea87dbca97c7a004da2dbb7173e5013&req=diAhE8B9lYZbXfMW3nq%2BgfPeyxvEcEeuXWT2Q8kSL5fqF3aRXDindf%2BIakAL%0AHwwBZSbFy74%2BXVXAthAcWenlEAo%3D%0A)](https://downloads.intercomcdn.com/i/o/utvm5llh/2065938744/f8ed0fa75339b6da3cf473d6e78a/image.png?expires=1782259200&signature=1d7f0bc2227d6dede88693463f1ecf186ea87dbca97c7a004da2dbb7173e5013&req=diAhE8B9lYZbXfMW3nq%2BgfPeyxvEcEeuXWT2Q8kSL5fqF3aRXDindf%2BIakAL%0AHwwBZSbFy74%2BXVXAthAcWenlEAo%3D%0A) Click "Yes" at the confirmation prompt below: [![](https://downloads.intercomcdn.com/i/o/utvm5llh/2065936937/1f3cb43c4aa3f21832cd98ed7ccb/image.png?expires=1782259200&signature=6eee34a9c006d79610558d0b3d40d49cb8fc060e12a76c6e102146be033f729b&req=diAhE8B9m4hcXvMW3nq%2BgZKIQFIu%2FJkbuiU7cvKWmBctb5DAtoTqgcsGQtmw%0ACLIXe7jPM7Ppvw1zgL8jXk6cDBQ%3D%0A)](https://downloads.intercomcdn.com/i/o/utvm5llh/2065936937/1f3cb43c4aa3f21832cd98ed7ccb/image.png?expires=1782259200&signature=6eee34a9c006d79610558d0b3d40d49cb8fc060e12a76c6e102146be033f729b&req=diAhE8B9m4hcXvMW3nq%2BgZKIQFIu%2FJkbuiU7cvKWmBctb5DAtoTqgcsGQtmw%0ACLIXe7jPM7Ppvw1zgL8jXk6cDBQ%3D%0A) ## **Step 2 - Save the certificate** SQL-Sales will have generated a public self signed certificate for you to copy to your clipboard and save yourself as a text file to a location of your choosing. SQL-Sales will not hold or retain this beyond passing to the clipboard, as below. Next steps: 1. Save as a suitably named text file 2. Save this to a key vault / safe location that you define and have control of 3. And will be able to browse to in the next section when you upload to Salesforce [![](https://downloads.intercomcdn.com/i/o/utvm5llh/2065936191/f0b517674d159fee6bd89f03bb26/image.png?expires=1782259200&signature=e0862cb069dd8566cd9685da5ae7ff4a12a1be837666ed0f716569274459fd3a&req=diAhE8B9m4BWWPMW3nq%2BgQSrXcyWS0ZDwQ7szVQGKMBjpq05T9mQ%2Fheex%2BvX%0AlE8PTBe2Szqh5BsUk5vigYn9KaY%3D%0A)](https://downloads.intercomcdn.com/i/o/utvm5llh/2065936191/f0b517674d159fee6bd89f03bb26/image.png?expires=1782259200&signature=e0862cb069dd8566cd9685da5ae7ff4a12a1be837666ed0f716569274459fd3a&req=diAhE8B9m4BWWPMW3nq%2BgQSrXcyWS0ZDwQ7szVQGKMBjpq05T9mQ%2Fheex%2BvX%0AlE8PTBe2Szqh5BsUk5vigYn9KaY%3D%0A) Paste to a suitable text editor (for example notepad) and save as-is with no editing whatsoever. [![](https://downloads.intercomcdn.com/i/o/utvm5llh/2065935338/5932302191d3338f5ced6b572155/image.png?expires=1782259200&signature=fc208a887486fe9446e984f97c69b138504a7db7a76dab38f25dca7aea92b92e&req=diAhE8B9mIJcUfMW3nq%2BgcCZRUl5%2FmoQ5woCKkLZYT%2BG%2F9ax1dQ8%2BgBUtuSv%0AO7O6HrjP8O%2FGiGH76rxdWpYRG3M%3D%0A)](https://downloads.intercomcdn.com/i/o/utvm5llh/2065935338/5932302191d3338f5ced6b572155/image.png?expires=1782259200&signature=fc208a887486fe9446e984f97c69b138504a7db7a76dab38f25dca7aea92b92e&req=diAhE8B9mIJcUfMW3nq%2BgcCZRUl5%2FmoQ5woCKkLZYT%2BG%2F9ax1dQ8%2BgBUtuSv%0AO7O6HrjP8O%2FGiGH76rxdWpYRG3M%3D%0A) ## **Step 3 - Create a Custom External Client App** In Setup, search for "External Client Apps". Choose "External Client App Manager" [![](https://downloads.intercomcdn.com/i/o/utvm5llh/2065934381/786d71c2ca4c5964c9881ccd41b6/image.png?expires=1782259200&signature=0d52347cd305d139b8cc9b7414661d50c2af73e9cfa20df54452daf74c9c3fd9&req=diAhE8B9mYJXWPMW3nq%2BgQLef3WUqIKCaQeAyUoGxCxbcVQcjbCfa3matwDO%0AmdANzhjciUC45mZ9EnYo0pAg%2Fw8%3D%0A)](https://downloads.intercomcdn.com/i/o/utvm5llh/2065934381/786d71c2ca4c5964c9881ccd41b6/image.png?expires=1782259200&signature=0d52347cd305d139b8cc9b7414661d50c2af73e9cfa20df54452daf74c9c3fd9&req=diAhE8B9mYJXWPMW3nq%2BgQLef3WUqIKCaQeAyUoGxCxbcVQcjbCfa3matwDO%0AmdANzhjciUC45mZ9EnYo0pAg%2Fw8%3D%0A) Click on "New External Client App" [![](https://downloads.intercomcdn.com/i/o/utvm5llh/2065931829/c8a2b62986c7b8e8b4b845502e55/image.png?expires=1782259200&signature=d3e4521c57bcff06523a79a63f4d959f1dd6410ddb1ce1736e031a2854aa5ba7&req=diAhE8B9nIldUPMW3nq%2BgTeDOwm3kTdDjN125b7LexUleDqzk41oTls%2FxYgP%0Azu4Q4A9oxSNFSB3t%2Brq%2BO21SMm8%3D%0A)](https://downloads.intercomcdn.com/i/o/utvm5llh/2065931829/c8a2b62986c7b8e8b4b845502e55/image.png?expires=1782259200&signature=d3e4521c57bcff06523a79a63f4d959f1dd6410ddb1ce1736e031a2854aa5ba7&req=diAhE8B9nIldUPMW3nq%2BgTeDOwm3kTdDjN125b7LexUleDqzk41oTls%2FxYgP%0Azu4Q4A9oxSNFSB3t%2Brq%2BO21SMm8%3D%0A) **Basic Information Section** | Input field | Notes | | --- | --- | | **External Client App Name** | Enter a suitable name for this Salesforce instance/sandbox, this is what you entered into the SQL-Sales Environment Configuration "Custom External Client App" input box. Note, SQL-Sales will only accept alphanumeric, space and underscore characters for the ExternalClientApplication.Name | | **API Name** | Salesforce will auto-populate based on the above name | | **Contact Email** | Enter an appropriate email (this is mandatory) | | **Distribution State** | Choose "Local" | | **API Name** | Ignore, Salesforce will populate | | **Contact Phone** | Optional | | **Info URL** | Optional | | **Logo Image URL** | Optional | | **Icon URL** | Optional | | **Description** | Optional | [![](https://downloads.intercomcdn.com/i/o/utvm5llh/2065930663/6686b1f36d7e3741db069ba7867c/image.png?expires=1782259200&signature=5b256ff64cf8b0f8bfac81f1ec0b8b6c85ba62b235bcc29fed93cb70c70ff7ba&req=diAhE8B9nYdZWvMW3nq%2BgRPXFFcsL01XAqNRizz%2F0vBGTQbM5CA79E6uuDrR%0AaxugzeY%2BqxDmegK6fC9fyB%2B%2BEko%3D%0A)](https://downloads.intercomcdn.com/i/o/utvm5llh/2065930663/6686b1f36d7e3741db069ba7867c/image.png?expires=1782259200&signature=5b256ff64cf8b0f8bfac81f1ec0b8b6c85ba62b235bcc29fed93cb70c70ff7ba&req=diAhE8B9nYdZWvMW3nq%2BgRPXFFcsL01XAqNRizz%2F0vBGTQbM5CA79E6uuDrR%0AaxugzeY%2BqxDmegK6fC9fyB%2B%2BEko%3D%0A) **Click "Enable OAuth Settings" and Callback URL** [![](https://downloads.intercomcdn.com/i/o/utvm5llh/2065929924/b43c950b66b69cc173b4efde7bdb/image.png?expires=1782259200&signature=84e93d72379a8d5c1bffda27d4557b691d17112a5bfd52c8bc37ebb5f2cba500&req=diAhE8B8lIhdXfMW3nq%2BgUkaNIWzgDyLQEXZOv80zmjhjucU8NPbzVZdyqlZ%0A1SYfWf4X0EXtREQR35r5TW%2FoRKE%3D%0A)](https://downloads.intercomcdn.com/i/o/utvm5llh/2065929924/b43c950b66b69cc173b4efde7bdb/image.png?expires=1782259200&signature=84e93d72379a8d5c1bffda27d4557b691d17112a5bfd52c8bc37ebb5f2cba500&req=diAhE8B8lIhdXfMW3nq%2BgUkaNIWzgDyLQEXZOv80zmjhjucU8NPbzVZdyqlZ%0A1SYfWf4X0EXtREQR35r5TW%2FoRKE%3D%0A) [![](https://downloads.intercomcdn.com/i/o/utvm5llh/2065929212/7a811deacf1408582045b39d284f/image.png?expires=1782259200&signature=434f764b2ba6948d4f6404ce29c6f9791e6d45a83d7ef1a0c62b3beb5cba0a07&req=diAhE8B8lINeW%2FMW3nq%2BgTWVJ5E8HBxeFzdGQvI7NOVnRZTOquIf7LhSbz76%0AKxSkGOS0c1g0OQwi5mscaE1ii%2B0%3D%0A)](https://downloads.intercomcdn.com/i/o/utvm5llh/2065929212/7a811deacf1408582045b39d284f/image.png?expires=1782259200&signature=434f764b2ba6948d4f6404ce29c6f9791e6d45a83d7ef1a0c62b3beb5cba0a07&req=diAhE8B8lINeW%2FMW3nq%2BgTWVJ5E8HBxeFzdGQvI7NOVnRZTOquIf7LhSbz76%0AKxSkGOS0c1g0OQwi5mscaE1ii%2B0%3D%0A) | Input field | Notes | | --- | --- | | **Enable OAuth Settings** | Tick the checkbox | | **App Settings - Callback URL** | This is not actually referenced in the External Client App settings used by SQL-Sales, however it is a mandatory fill - entering the suggested default is fine as it does nothing functionally: **[https://login.salesforce.com/services/oauth2/callback](https://login.salesforce.com/services/oauth2/callback)** | **OAuth Scopes** | Input field | Notes | | --- | --- | | **Selected OAuth Scopes** | Select only: Manage user data via APIs (api) Perform requests at any time (refresh_token, offline_access) | | **Introspect all Tokens** | Ignore | | **Configure ID token** | Ignore | ​ [![](https://downloads.intercomcdn.com/i/o/utvm5llh/2065926634/3e1d2f73c5cd243b942e461b4a65/image.png?expires=1782259200&signature=81355748aae46f3d7adbfcc8de0f549cbb09bdcfa7adeac9378fe86327163570&req=diAhE8B8m4dcXfMW3nq%2Bgf7XOB9qSLdPeViLFcCNg%2B%2BjpPuYH5QEHsGI%2Bkkk%0Ac%2FTCK2miWk2Zj4cs5HHEH7xzF%2Bk%3D%0A)](https://downloads.intercomcdn.com/i/o/utvm5llh/2065926634/3e1d2f73c5cd243b942e461b4a65/image.png?expires=1782259200&signature=81355748aae46f3d7adbfcc8de0f549cbb09bdcfa7adeac9378fe86327163570&req=diAhE8B8m4dcXfMW3nq%2Bgf7XOB9qSLdPeViLFcCNg%2B%2BjpPuYH5QEHsGI%2Bkkk%0Ac%2FTCK2miWk2Zj4cs5HHEH7xzF%2Bk%3D%0A) **Flow Enablement - **Enable JWT Bearer Flow [![](https://downloads.intercomcdn.com/i/o/utvm5llh/2065925751/24295937e09e52ff0c2062ae8ba2/image.png?expires=1782259200&signature=544adec1ff612bdba51477dbcb6affc30a2a0edf3696cd954558a9124614f141&req=diAhE8B8mIZaWPMW3nq%2BgWtrrhzENBeIArrmBfOj7gHIjxmK5whcasChUL8w%0AJoekuDQZkTeIzbZ9y1YwR2aJfm0%3D%0A)](https://downloads.intercomcdn.com/i/o/utvm5llh/2065925751/24295937e09e52ff0c2062ae8ba2/image.png?expires=1782259200&signature=544adec1ff612bdba51477dbcb6affc30a2a0edf3696cd954558a9124614f141&req=diAhE8B8mIZaWPMW3nq%2BgWtrrhzENBeIArrmBfOj7gHIjxmK5whcasChUL8w%0AJoekuDQZkTeIzbZ9y1YwR2aJfm0%3D%0A) | Input field | Notes | | --- | --- | | **Enable JWT Bearer Flow** | Tick the checkbox (see image below) - this will display the Certificate "Upload Files" button, select the certificate you created in Step 2 (in our example we saved to a file named "demo.pem" - you will see your own certificate filename in red below "Upload Files" [https://downloads.intercomcdn.com/i/o/utvm5llh/2065924940/9414b5d3bbf8052c73aada0b4914/image.png?expires=1782259200&signature=fa0c9c8fadbb52182daf9db358cca7cfe0c71ab628020155386317e706a5d8c9&req=diAhE8B8mYhbWfMW3nq%2Bgcl2L%2FlQEtlELOhfbN4W1N9Zr%2BuT2XpdbtAevVyB%0A%2FFCB0td6Tq3SDUcWGrWAe2zKIv4%3D%0A](https://downloads.intercomcdn.com/i/o/utvm5llh/2065924940/9414b5d3bbf8052c73aada0b4914/image.png?expires=1782259200&signature=fa0c9c8fadbb52182daf9db358cca7cfe0c71ab628020155386317e706a5d8c9&req=diAhE8B8mYhbWfMW3nq%2Bgcl2L%2FlQEtlELOhfbN4W1N9Zr%2BuT2XpdbtAevVyB%0A%2FFCB0td6Tq3SDUcWGrWAe2zKIv4%3D%0A) | | **Enable Client Credentials Flow** | Ignore | | **Enable Authorization Code and Credentials Flow** | Ignore | | **Enable Device Flow** | Ignore | | **Enable Token Exchange Flow** | Ignore | **Security** Tick all settings apart from the unchecked ones below: "Issue JSON Web Token (JWT)-based access tokens for named users" "Require Demonstrating Proof of Possession (DPoP) Extension" ![](https://sql-sales.com/wp-content/uploads/2026/07/image-34.png) **Miscellaneous Settings** Ignore Web App; Canvas App; Mobile App; Push Notification; Notification Settings [![](https://downloads.intercomcdn.com/i/o/utvm5llh/2065923277/89172f9b108693e972f5f7d9488d/image.png?expires=1782259200&signature=9131316488ea0680a94eccd6c6b3e45d5f3342fb16bc0a63f942d17bcd4df1cf&req=diAhE8B8noNYXvMW3nq%2BgYavWes%2Bgzlic33R1a9Gm80UQD7hV6a73XPG8YRY%0AoOYqt3KjsoaLiOWFfvI9OQE0UgQ%3D%0A)](https://downloads.intercomcdn.com/i/o/utvm5llh/2065923277/89172f9b108693e972f5f7d9488d/image.png?expires=1782259200&signature=9131316488ea0680a94eccd6c6b3e45d5f3342fb16bc0a63f942d17bcd4df1cf&req=diAhE8B8noNYXvMW3nq%2BgYavWes%2Bgzlic33R1a9Gm80UQD7hV6a73XPG8YRY%0AoOYqt3KjsoaLiOWFfvI9OQE0UgQ%3D%0A) **Click Create** [![](https://downloads.intercomcdn.com/i/o/utvm5llh/2065922727/60147c0f4b3614c7bfcf29c1bd00/image.png?expires=1782259200&signature=750cabec331fc034c16ac83d3743a57aaa18a4bb1fc9f8f37309f99444787dbb&req=diAhE8B8n4ZdXvMW3nq%2BgZ0e0aq4ekLox6mBkio4SwHAQlVybQww4MXaaRT2%0A0YeorTn3OCxEBSEp1lob%2BMZ%2Bwh4%3D%0A)](https://downloads.intercomcdn.com/i/o/utvm5llh/2065922727/60147c0f4b3614c7bfcf29c1bd00/image.png?expires=1782259200&signature=750cabec331fc034c16ac83d3743a57aaa18a4bb1fc9f8f37309f99444787dbb&req=diAhE8B8n4ZdXvMW3nq%2BgZ0e0aq4ekLox6mBkio4SwHAQlVybQww4MXaaRT2%0A0YeorTn3OCxEBSEp1lob%2BMZ%2Bwh4%3D%0A) [![](https://downloads.intercomcdn.com/i/o/utvm5llh/2065921901/893bb0be64d2bad43f50a37c7e61/image.png?expires=1782259200&signature=e5f16dc5e6d1304e1d9f8bf35f36db6255f4bd5ef3f383762919930d712a5b4b&req=diAhE8B8nIhfWPMW3nq%2Bgd7xL30WNOi8vSbzzD%2FtgcoNcLqk9RmZuphjAUw3%0AHbcUagqEKI3aIy%2Bu1342CobvpfU%3D%0A)](https://downloads.intercomcdn.com/i/o/utvm5llh/2065921901/893bb0be64d2bad43f50a37c7e61/image.png?expires=1782259200&signature=e5f16dc5e6d1304e1d9f8bf35f36db6255f4bd5ef3f383762919930d712a5b4b&req=diAhE8B8nIhfWPMW3nq%2Bgd7xL30WNOi8vSbzzD%2FtgcoNcLqk9RmZuphjAUw3%0AHbcUagqEKI3aIy%2Bu1342CobvpfU%3D%0A) ## **Step 4 - Edit Policies** - OAuth Policies ![](https://sql-sales.com/wp-content/uploads/2026/07/image-18.png) Change Permitted Users from: **All users can self-authorize** [![](https://downloads.intercomcdn.com/i/o/utvm5llh/2065920919/a7757845b6a620973b7f982e3961/image.png?expires=1782259200&signature=51d7370b400f0d827ba562ab3dae332185b0570842c8809e9ee607a8e94aeadb&req=diAhE8B8nYheUPMW3nq%2BgbxOYcU8q1LyA1B%2BZ6cRdhT6BLZ3Tuuw8kA9UN7D%0AxWh0qdnS2mL%2B4hhVrOxcKWV8hL4%3D%0A)](https://downloads.intercomcdn.com/i/o/utvm5llh/2065920919/a7757845b6a620973b7f982e3961/image.png?expires=1782259200&signature=51d7370b400f0d827ba562ab3dae332185b0570842c8809e9ee607a8e94aeadb&req=diAhE8B8nYheUPMW3nq%2BgbxOYcU8q1LyA1B%2BZ6cRdhT6BLZ3Tuuw8kA9UN7D%0AxWh0qdnS2mL%2B4hhVrOxcKWV8hL4%3D%0A) To **Admin approved users are pre-authorized.** By changing this setting you will be prompted with the below (Click OK) [![](https://downloads.intercomcdn.com/i/o/utvm5llh/2065919952/96dac5ec1009da092841fee30cc3/image.png?expires=1782259200&signature=fb6e7a0288696fec6a9a867d4e0d73231bacaf959a8095f9c51588feb7b9e5a0&req=diAhE8B%2FlIhaW%2FMW3nq%2BgZA0V5uvcItLrTqYN2pp36kP%2FRqMxKpgZfsjyEXS%0AfM834Ms892lX3AhIvBaKqZKd%2FJA%3D%0A)](https://downloads.intercomcdn.com/i/o/utvm5llh/2065919952/96dac5ec1009da092841fee30cc3/image.png?expires=1782259200&signature=fb6e7a0288696fec6a9a867d4e0d73231bacaf959a8095f9c51588feb7b9e5a0&req=diAhE8B%2FlIhaW%2FMW3nq%2BgZA0V5uvcItLrTqYN2pp36kP%2FRqMxKpgZfsjyEXS%0AfM834Ms892lX3AhIvBaKqZKd%2FJA%3D%0A) **App Authorization **- Refresh Token Policy Change Refresh Token Policy from **Expire refresh token after specific time** [![](https://downloads.intercomcdn.com/i/o/utvm5llh/2065918882/6aa67174378c2f88e4c4c99adb5a/image.png?expires=1782259200&signature=e82d66d4c9afa18684b0761db4316d1d9c831ae8e97e69eb23067b7d9bd0ffb6&req=diAhE8B%2FlYlXW%2FMW3nq%2BgTw%2FhgqEhmq1%2BhwHzHr5r%2F5pZTvn1MeqedaIOZUb%0A4fGblClTcu3geviDnLB1DBDmtU4%3D%0A)](https://downloads.intercomcdn.com/i/o/utvm5llh/2065918882/6aa67174378c2f88e4c4c99adb5a/image.png?expires=1782259200&signature=e82d66d4c9afa18684b0761db4316d1d9c831ae8e97e69eb23067b7d9bd0ffb6&req=diAhE8B%2FlYlXW%2FMW3nq%2BgTw%2FhgqEhmq1%2BhwHzHr5r%2F5pZTvn1MeqedaIOZUb%0A4fGblClTcu3geviDnLB1DBDmtU4%3D%0A) To **Expire refresh token if not used for specific time (30 Days)** Leave all other settings as defaulted on creation - **Click Save** [![](https://downloads.intercomcdn.com/i/o/utvm5llh/2481610874/48186bead433ee3de79e7091f5af/image.png?expires=1782259200&signature=0fac16c55a62301464f14fbe6269489bdab0477e8e6d06e97706befdca7c9eae&req=diQvF89%2FnYlYXfMW3nq%2BgQUmerFRP9ApuJuPMFYPgJRFMC%2BevL8Og0f48Ni6%0AYqSnk6WgE2N5MNzHAEn9osSJeRw%3D%0A)](https://downloads.intercomcdn.com/i/o/utvm5llh/2481610874/48186bead433ee3de79e7091f5af/image.png?expires=1782259200&signature=0fac16c55a62301464f14fbe6269489bdab0477e8e6d06e97706befdca7c9eae&req=diQvF89%2FnYlYXfMW3nq%2BgQUmerFRP9ApuJuPMFYPgJRFMC%2BevL8Og0f48Ni6%0AYqSnk6WgE2N5MNzHAEn9osSJeRw%3D%0A) **App Policies** ![](https://sql-sales.com/wp-content/uploads/2026/07/image-19.png) This will present the "Select Profiles" and "Select Permission Sets" options. For Profiles, choose a suitable profile with suitable permissions to External Client Apps, in our example we will select System Administrator [![](https://downloads.intercomcdn.com/i/o/utvm5llh/2065919404/09a184c0d7e2bd14466f87ce0940/image.png?expires=1782259200&signature=cc5dc4f9d8c68065de9bd6221e6d88adb6b0691ec2e1f97c4a7ab9efbdcc831f&req=diAhE8B%2FlIVfXfMW3nq%2BgRzhCrlNR830pjlkTVP8G%2Bjvms%2BwPyZPuKZu%2FHY4%0AQd3rCaJGINdbh8TSIi%2BdFF6h45g%3D%0A)](https://downloads.intercomcdn.com/i/o/utvm5llh/2065919404/09a184c0d7e2bd14466f87ce0940/image.png?expires=1782259200&signature=cc5dc4f9d8c68065de9bd6221e6d88adb6b0691ec2e1f97c4a7ab9efbdcc831f&req=diAhE8B%2FlIVfXfMW3nq%2BgRzhCrlNR830pjlkTVP8G%2Bjvms%2BwPyZPuKZu%2FHY4%0AQd3rCaJGINdbh8TSIi%2BdFF6h45g%3D%0A) ## **Step 5 Edit Settings** - OAuth Settings When going back to OAuth Settings you'll see the App Setting to get a Consumer Key and Secret, click the button below: [![](https://downloads.intercomcdn.com/i/o/utvm5llh/2065917386/97865d6cf8dcbb6756eb3ee45ab6/image.png?expires=1782259200&signature=078f1e249fcc9031933204170b438c2de1094e389a387f7dbdbe2f94d4bc1152&req=diAhE8B%2FmoJXX%2FMW3nq%2BgcGaFk%2BeHXVQUa4y1ilGD8PKOOMCouElwVcsXfQr%0ALZOub1iGO6bVlJjAdE3vEmbWBrc%3D%0A)](https://downloads.intercomcdn.com/i/o/utvm5llh/2065917386/97865d6cf8dcbb6756eb3ee45ab6/image.png?expires=1782259200&signature=078f1e249fcc9031933204170b438c2de1094e389a387f7dbdbe2f94d4bc1152&req=diAhE8B%2FmoJXX%2FMW3nq%2BgcGaFk%2BeHXVQUa4y1ilGD8PKOOMCouElwVcsXfQr%0ALZOub1iGO6bVlJjAdE3vEmbWBrc%3D%0A) You'll be prompted as below to confirm your identity via your email [![](https://downloads.intercomcdn.com/i/o/utvm5llh/2065916540/e09325e4d43ca93bef1adccd24d3/image.png?expires=1782259200&signature=fa8b85edf2a54521bc7d1e26959b1060a189619ae8dbe72d836c1864222f7568&req=diAhE8B%2Fm4RbWfMW3nq%2BgYr%2BDMGg5TwsO1IXjNyCSslI669BKGACtgs4I4KH%0AX770Il67OeaF9cT4boT7AIOfFCc%3D%0A)](https://downloads.intercomcdn.com/i/o/utvm5llh/2065916540/e09325e4d43ca93bef1adccd24d3/image.png?expires=1782259200&signature=fa8b85edf2a54521bc7d1e26959b1060a189619ae8dbe72d836c1864222f7568&req=diAhE8B%2Fm4RbWfMW3nq%2BgYr%2BDMGg5TwsO1IXjNyCSslI669BKGACtgs4I4KH%0AX770Il67OeaF9cT4boT7AIOfFCc%3D%0A) Click Copy for Consumer Key. You're now ready to move back to the SQL-Sales Configuration manager. [![](https://downloads.intercomcdn.com/i/o/utvm5llh/2065915819/7708cf4546bcb94ea5ef3df3171a/image.png?expires=1782259200&signature=2f761181ccd4e12fecf553a1dd9d5290fe981c610fc5566981cd6c9cca487cff&req=diAhE8B%2FmIleUPMW3nq%2BgTXDzOlmMENlbe3hxOVO4NP1fIBGUGju6xDuXw21%0AnCg7MXDI9LuMcqvyw%2FSe8bYov5g%3D%0A)](https://downloads.intercomcdn.com/i/o/utvm5llh/2065915819/7708cf4546bcb94ea5ef3df3171a/image.png?expires=1782259200&signature=2f761181ccd4e12fecf553a1dd9d5290fe981c610fc5566981cd6c9cca487cff&req=diAhE8B%2FmIleUPMW3nq%2BgTXDzOlmMENlbe3hxOVO4NP1fIBGUGju6xDuXw21%0AnCg7MXDI9LuMcqvyw%2FSe8bYov5g%3D%0A) ## **Step 6 - **Return to the SQL-Sales Environment configuration from Step 1: | Input field | Notes | | --- | --- | | **Consumer Key** | Paste here the copied Consumer Key from the prior step | ![](https://sql-sales.com/wp-content/uploads/2026/07/image-33-1024x555.png) [![](https://downloads.intercomcdn.com/i/o/utvm5llh/2065913687/70b2f33d81a64c32565ebddfddc3/image.png?expires=1782259200&signature=ea093ead343fc59e0b8605fdd58dbbe4e963a67db00d91a4a3349fbf959db8f2&req=diAhE8B%2FnodXXvMW3nq%2BgbMb8olm%2BYh9DwMQLNRKxukC38BQwhJZAHK9xtd6%0A%2B52QuWWiZc14jEEFbm99mtEtmyY%3D%0A)](https://downloads.intercomcdn.com/i/o/utvm5llh/2065913687/70b2f33d81a64c32565ebddfddc3/image.png?expires=1782259200&signature=ea093ead343fc59e0b8605fdd58dbbe4e963a67db00d91a4a3349fbf959db8f2&req=diAhE8B%2FnodXXvMW3nq%2BgbMb8olm%2BYh9DwMQLNRKxukC38BQwhJZAHK9xtd6%0A%2B52QuWWiZc14jEEFbm99mtEtmyY%3D%0A) [![](https://downloads.intercomcdn.com/i/o/utvm5llh/2065912953/8fb0db495f582f31e36713e6014b/image.png?expires=1782259200&signature=4071d408d03a91e71fbdeb97657ccc5a572fb1f118ec26e688a7db9a8a0c8e02&req=diAhE8B%2Fn4haWvMW3nq%2BgWuYeMzVwscIt3U1TiyKQ6HS%2FxSgUHn84Hxjz5cX%0AjyT3lJAQj9nhu5ZIVkwkFIyIXis%3D%0A)](https://downloads.intercomcdn.com/i/o/utvm5llh/2065912953/8fb0db495f582f31e36713e6014b/image.png?expires=1782259200&signature=4071d408d03a91e71fbdeb97657ccc5a572fb1f118ec26e688a7db9a8a0c8e02&req=diAhE8B%2Fn4haWvMW3nq%2BgWuYeMzVwscIt3U1TiyKQ6HS%2FxSgUHn84Hxjz5cX%0AjyT3lJAQj9nhu5ZIVkwkFIyIXis%3D%0A) Or the below for a Sandbox as in our Demo sandbox example [![](https://downloads.intercomcdn.com/i/o/utvm5llh/2065911983/c0d01137c2e963f4220a6a954eb6/image.png?expires=1782259200&signature=4be92bfbd17ea9e4d93a6cec62eebff871887799d8f134ae04573cb1ef3b8f52&req=diAhE8B%2FnIhXWvMW3nq%2BgfRxE1SXaHiUeyU6xm7ayQ1i%2FiGxAzVv%2Fv%2FUOhfX%0AkCt%2FYCJs6zPczvMFniwDUBJpo6E%3D%0A)](https://downloads.intercomcdn.com/i/o/utvm5llh/2065911983/c0d01137c2e963f4220a6a954eb6/image.png?expires=1782259200&signature=4be92bfbd17ea9e4d93a6cec62eebff871887799d8f134ae04573cb1ef3b8f52&req=diAhE8B%2FnIhXWvMW3nq%2BgfRxE1SXaHiUeyU6xm7ayQ1i%2FiGxAzVv%2Fv%2FUOhfX%0AkCt%2FYCJs6zPczvMFniwDUBJpo6E%3D%0A)