ForceNotes
change feed

Salesforce Platform: New Connected Apps Can No Longer Be Created in Spring '26 | Salesforce Help

cold
Platform0 revisionschecked about 3 hours agochanged about 2 months ago
view source

key takeaways

This article outlines an upcoming policy change regarding connected app management on the Salesforce Platform. Beginning in the Spring '26 release, creation of new connected apps will no longer be allowed. This change affects administrators and developers responsible for building and maintaining platform integrations.

  • Creation of new connected apps will no longer be supported starting in the Spring '26 release.
  • The restriction applies to all environment management on the Salesforce Platform.
  • Admins and developers must complete necessary connected app creation prior to the Spring '26 enforcement.
highsummarized about 2 months ago
    • Salesforce Platform: New Connected Apps Can No Longer Be Cre…
    • Summary
    • What is changing?
    • Why are we doing this?
    • What do I need to do?
    • Stay Aware
    • Prepare
    • FAQ

    The entire documentation article regarding Spring '26 restrictions on creating new Connected Apps was removed and replaced with placeholder text. This affects Salesforce administrators and developers seeking guidance on Connected App deprecation and External Client App migration.

    • Removed entire article content including timeline, migration FAQ, and technical guidance for Connected Apps
    • Article content replaced with "Modal Body..."
    document body@@ −1,135 +1,1
    1 − # Salesforce Platform: New Connected Apps Can No Longer Be Created in Spring '26
    2 −
    3 − Publish Date: Apr 3, 2026
    4 −
    5 − ## **Summary**
    6 −
    7 − External client apps (ECAs) connect applications with Salesforce data while maintaining security and clearly defined user roles. ECAs offer security and use second-generation managed packaging.
    8 −
    9 − To continue the rollout of ECAs and move toward long-term end of support (EOS) for connected apps, we are disabling the ability to create connected apps by customers. New connected apps will be allowed by package installation, and customers can continue creating connected apps if they make a request to Salesforce Support.
    10 −
    11 − Existing connected apps will continue to work and can be installed in new orgs via package installation. Connected app editing, installation (by packaging or OAuth install), and deletion will not be affected by this change. All existing connected apps will continue to work.
    12 −
    13 − **Note:** Connected App creation via APIs (including the Metadata API) is blocked in the same way as the UI.
    14 −
    15 − ## **What is changing?**
    16 −
    17 − [In the Spring '26 release,](https://help.salesforce.com/s/articleView) as part of the ECA rollout, connected app creation through UI was disabled by default on all new orgs. Customers were required to turn on the Allow creation of connected apps setting to continue [creating connected apps through UI](https://help.salesforce.com/s/articleView).
    18 −
    19 − Starting in the Spring '26 release, customers won't be able to turn on this behavior unless they request the ability to create connected apps from Salesforce Support. Connected app creation will be prevented through both API and UI, with the exception of package installation.
    20 −
    21 − ## **Why are we doing this?**
    22 −
    23 − External client apps are the new generation of connected apps. They were designed to improve security and resolve the cumbersome packaging and distribution issues that affect connected apps.
    24 −
    25 − ## **What do I need to do?**
    26 −
    27 − ### Stay Aware
    28 −
    29 − Any time an application is connected to Salesforce, the application and a third party can access your data. Only click "Allow" if you trust the application and the third party. If you are contacted and asked to install any applications via phone or email, **do not proceed** and report it to -
    30 −
    31 − 1) Your organization's administrator
    32 −
    33 − 2) Your security team, and
    34 −
    35 − 3) The Salesforce security team at [security.salesforce.com/contact.](http://security.salesforce.com/contact)
    36 −
    37 − ### Prepare
    38 −
    39 − Start preparing for the End of Support for connected apps by inventorying your connected apps, and start using ECAs instead.
    40 −
    41 − If you need to continue using existing connected apps, you can do so. However, no new connected apps can be created with the Spring '26 release unless enabled by Salesforce Support. In future releases, Salesforce Support won't be able to enable the creation of new connected apps.
    42 −
    43 − To migrate your existing connected apps to external client apps, see [Connected App to External Client App Migration.](https://help.salesforce.com/s/articleView)
    44 −
    45 − ## **FAQ**
    46 −
    47 − ### **1\. Timelines, Deadlines, and End-of-Support (EOS)**
    48 −
    49 − ### **When is the cutoff for new Connected Apps?**
    50 −
    51 − Starting in the **Spring '26 release**, the ability to create _new_ legacy Connected Apps will be disabled.
    52 −
    53 − **What is the roadmap for existing Connected Apps (CAs)?**
    54 −
    55 − With this Spring '26 release, Salesforce disables the creation of new Connected Apps by default. Existing Connected Apps will continue to function.
    56 −
    57 − **Salesforce will be announcing End-of-Support (EOS) for existing Connected Apps soon. What is End-of-Support (EOS)?**
    58 −
    59 − With EOS, existing Connected Apps continue to function but Salesforce no longer provides bug fixes, security updates, or technical support. It's highly recommended to migrate to External Client Apps (ECAs) before End-of-Support.
    60 −
    61 − **Does "End of Support" (EOS) mean my apps will stop working?**
    62 −
    63 − Currently, existing Connected Apps will continue to function and they are not yet at "End of Support". However, the future "End of Support" means Salesforce will no longer provide bug fixes, security updates, or technical assistance for the legacy framework. We strongly recommend migrating to the ECA framework now to prepare for the future EOS to ensure business continuity.
    64 −
    65 − **When will Salesforce-owned apps (for example Workbench and Salesforce for iOS) migrate to ECAs?**
    66 −
    67 − Salesforce is currently working on internal migration paths for Salesforce owned Connected Apps. Updates for these specific apps will be released according to the standard Salesforce release cycle.
    68 −
    69 − ### **2\. Migration Logistics: Tools and Process**
    70 −
    71 − ### **Is there an official migration tool?**
    72 −
    73 − Yes. Salesforce is providing a local **CA to** **ECA Migration Tool**. It is designed to assist in converting legacy metadata into the new ECA metadata format. See the KA [Create an External Client App from a Connected App](https://help.salesforce.com/s/articleView).
    74 −
    75 − **Is the migration manual or automated?**
    76 −
    77 − After opting in manually, the local Connected App migration is automated.
    78 −
    79 − **How do I handle Connected Apps created via Apex?**
    80 −
    81 − For apps created or managed through Apex code, you will need to refactor your logic to interact with the External Client App metadata objects. Developers should consult the [_External Client Apps Developer Guide_](https://developer.salesforce.com/docs/atlas.en-us.api_meta.meta/api_meta/meta_externalclientapplication.htm) for specific object and field mappings.
    82 −
    83 − ### **3\. Impact on Existing Apps and Integrations**
    84 −
    85 − ### **What happens to Managed Packages provided by a third party (e.g. AppExchange app) ?**
    86 −
    87 − While existing Connected Apps and Connected Apps installed as part of a managed package remain unaffected by the changes after Spring '26 release, we encourage app providers to begin using External Client Apps so that they can be prepared for the future changes impacting existing Connected Apps like End-of-Support and retirement.
    88 −
    89 − If a Connected App is part of a managed package, it is the **ISV's (the vendor's) responsibility** to provide a migrated ECA version of their app. Customers must wait for the vendor to release an updated package version before they can migrate that specific integration.
    90 −
    91 − **Will third-party integrations stop working in Spring '26?**
    92 −
    93 − No. Existing connections will continue to work. The Spring '26 restriction only prevents the creation of _new_ apps. However, if you need to create a new integration after that date, it must be an ECA.
    94 −
    95 − ### **4\. Technical and Security Implications**
    96 −
    97 − ### **Will users need to re-authenticate after doing the local CA to ECA migration?**
    98 −
    99 − Users will not need to re-authenticate, all the existing integrations will continue to work.
    100 −
    101 − ### **5\. Sandboxes, Deployment, and Permissions**
    102 −
    103 − ### **How do sandbox refreshes affect ECAs?**
    104 −
    105 − Local ECAs cannot be refreshed. Local external client apps aren't copied to a new sandbox when you clone or refresh a sandbox. Only packaged external client apps are copied to the sandbox.
    106 −
    107 − **Do CI/CD users need new permissions?**
    108 −
    109 − Yes. To deploy ECA metadata via SFDX or the Metadata API, your deployment user or service principal must be granted the **Manage External Client Apps** permission.
    110 −
    111 − **Can I track ECA usage?**
    112 −
    113 − Yes. ECAs will be visible in Setup under External Client Apps or under the **OAuth Usage** page in Setup, allowing admins to monitor active sessions and security logs just as they did with legacy Connected Apps via the **Connected Apps OAuth Usage** page in setup.
    114 −
    115 − **Next Steps:**
    116 −
    117 − - Review these articles for more information
    118 − - [Salesforce Help: External Client Apps](https://help.salesforce.com/s/articleView)
    119 −
    120 − - [Connected App to External Client App Migration](https://help.salesforce.com/s/articleView)
    121 −
    122 − - [Trailhead: Use External Client Apps to Build Integrations](https://trailhead.salesforce.com/content/learn/trails/use-external-client-apps-to-build-integrations)
    123 −
    124 − - [ISVforce Guide: Build and Distribute AppExchange Solutions](https://developer.salesforce.com/docs/atlas.en-us.packagingGuide.meta/packagingGuide/packaging_intro.htm)
    125 −
    126 − - [Salesforce Help: Comparison of Connected Apps and External Client Apps Features](https://help.salesforce.com/s/articleView)
    127 −
    128 − - [Salesforce Help: OAuth Tokens and Scopes](https://help.salesforce.com/s/articleView)
    129 − - Reach out to your third-party AppExchange vendors to request their ECA migration roadmap.
    130 −
    131 − **NOTE:** _This document is for informational purposes only, and is not part of any legal or otherwise binding agreement. The policies and practices described in this document are subject to change at Salesforce's sole discretion. All dates are subject to change._
    132 −
    133 − [Connected Apps](https://help.salesforce.com/s/articleView)
    134 −
    135 − Creating the canvas app as a connected app is no longer recommended. Use the external client apps for all new Canvas integrations. For more details see the [Canvas Developer Guide - Use a Connected App.](https://developer.salesforce.com/docs/atlas.en-us.platform_connect.meta/platform_connect/quick_start_create_canvas_app.htm)
     1+ Modal Body...