← back to the release
enforced release updatedeadline 2026-11-30Security / Identity
Restrict the OAuth 2.0 Device Flow to Local External Client Apps
Salesforce is restricting the OAuth 2.0 device flow to local external client apps with a localhost callback URL, requiring connected apps to migrate.
flags
off by defaultrequires action