> **Note — "External Client App", never "Connected App"** > > Salesforce restricted the creation of classic "Connected Apps" starting with Spring '26, and recommends its replacement, the **"External Client App"**, for any new integration. If you search Salesforce's documentation or forums and see "Connected App", that's the old name for the same mechanism — in your Setup today, the correct path is the one this section describes. **Requirements:** admin permissions on your Salesforce org (section 2). 1. In your Salesforce, go to **Setup → App Manager** and press **New External Client App**. 2. Fill in the app's name and basic details (your own business's name, never a generic one). 3. In the OAuth section, **enable the client credentials flow** ("Client Credentials Flow") and save. 1. Assign an **integration user** ("Run As" / integration user) to the app — the token the Platform uses will act with that user's permissions inside your Salesforce, so their profile determines what the integration can read and write. 2. Copy the **Consumer Key** and **Consumer Secret** Salesforce generates for the app. 1. Also note down your **My Domain URL** — your org's own address (shaped like `empresa.my.salesforce.com`), visible under **Setup → My Domain**. > **Warning — Treat the Consumer Key and Consumer Secret like a password** > > Anyone with access to these two values can get an access token to your org — a textual warning from Salesforce itself. Keep them with the same care as a password, and never share them outside this connection form. > **Note — Verified against the official documentation** > > The steps in this section are verified against Salesforce's REST API authentication guide (`developer.salesforce.com`, authorization section) and the client credentials flow guide (`help.salesforce.com`), both consulted live on August 21, 2026 during this integration's prior research — literal quotes: *"Creating connected apps is restricted as of Spring '26 [...] we recommend using external client apps instead"* and *"the client app exchanges its client credentials defined in the external client app — its consumer key and consumer secret — for an access token"*. A retry of direct access to those same help pages today, September 5, 2026, for this round of manuals returned an incomplete load (`help.salesforce.com` pages render with JavaScript and aren't always reachable by automated tools) — the earlier live verification's quote is kept rather than repeated without being able to confirm changes.