Pre-Requisite Setup To Enable API Access In Salesforce(External Client App - OAuth)

This article provides detailed steps to configure Salesforce for API access using OAuth authentication, based on the latest Salesforce External Client Apps framework. It guides you through creating an External Client App, enabling the appropriate OAuth scopes, and generating the required Consumer Key (client_id) and Consumer Secret (client_secret).
This configuration is essential for integrating Salesforce APIs with ACCELQ, ensuring secure and compliant automation of API request and response workflows in line with the most recent Salesforce release.

Configure Salesforce Settings and Generate Consumer Key and Consumer Secret key

Step 1: Log in to Salesforce

Navigate to Setup → Apps → External Client Apps → External Client App Manager

Click New External Client App

Step 2: Enter Basic Information

In the Basic Information section, provide the following details:

Step 3: Enable OAuth Settings

Under the API (Enable OAuth Settings) section:

• Check the box “Enable OAuth”

Then, under the App Settings section, set the Callback URL as:

<Salesforce Instance URL>/api/oauth/_callback

Configure OAuth Scopes

Select the following scopes:

• Manage user data via APIs (api)

• Manage user data via Web browsers (web)

• Perform requests at any time (refresh_token, offline_access)
  

Enable OAuth Flow

1. In the Flow Enablement section, enable the checkbox “Enable Client Credentials Flow”.

2. Click Save.

Step 4: Edit OAuth Policies

1. Navigate to the Policies tab of your saved app (ACCELQ Connect).

2. Click Edit.

3. Under OAuth Policies → Plugin Policies, set:

   Setting	Value
   Permitted Users	All users can self-authorize

Configure Flow Enhancements

1. Under OAuth Flows and External Client App Enhancements, enable “Enable Client Credentials Flow”.

2. Enter your Salesforce username in the Run As (Username) field.

Configure Authorization and Security

1. Under App Authorization, configure the following options:

   Setting	Value
   Expire refresh token after specific time	Checkbox Enabled
   Refresh Token Validity Period	365
   Refresh Token Validity Unit	Day(s)
   IP Relaxation	Relax IP restrictions
   Session Timeout In Minutes	60

    

  2. Click Save.

Step 5: Retrieve Consumer Key and Secret

1. Navigate to the Settings tab.

2. Under App Settings, click Consumer Key and Secret.

3. Copy both Consumer Key and Consumer Secret for later use in ACCELQ.

Next Steps

Once you have configured the External Client App and obtained the Consumer Key and Consumer Secret, proceed to the next step to authenticate and execute API calls using these credentials.
Refer to the following article for detailed instructions:
👉 Automation Testing of Salesforce API (OAuth 2.0 - Client Credentials)