This guide is for Salesforce administrators. If your organization requires a custom app for Zapier, you must create an External Client App and share the credentials with your team before they can connect Salesforce to Zapier.
As of the Salesforce Spring '26 release, External Client Apps replace Connected Apps for new setups. Existing Connected Apps are unaffected and continue to work.
Prerequisites
- Administrator permissions in your Salesforce org.
- Access to Salesforce Setup.
- My Domain configured in your org.
1. Create an External Client App
- In Salesforce, click the gear icon and select Setup.
- In the Quick Find box, search for
External Client App Manager. - Click Create New External Client App.
- Enter the following basic information: - External Client App Name: A name for the app (for example,
Zapier). - Contact Email: Your admin email address. - Distribution State: SelectLocal. - Scroll down to the API (Enable OAuth Settings) section and select the Enable OAuth checkbox.
- In the Callback URL field, enter:
https://zapier.com/dashboard/auth/oauth/return/SalesforceCLIAPI/ - Under Selected OAuth Scopes, add the following four scopes: -
Access the identity URL service (id)-Manage user data via APIs (api)-Perform requests at any time (refresh_token, offline_access)-Full access (full) - Uncheck Require Proof Key for Code Exchange (PKCE) Extension for Supported Authorization Flows.
- Click Create.
2. Configure the refresh token policy
Configure the refresh token policy so connections remain active.
- In Setup, go to External Client App Manager.
- Open the app you created.
- Click the Policies tab, then click Edit.
- Under Refresh Token Policy, select Refresh token is valid until revoked.
- Click Save.
3. Share credentials with your team
Retrieve the following credentials from the app's Settings tab OAuth Settings section:
- Consumer Key
- Consumer Secret
Provide these credentials to the members of your organization who need to connect Salesforce to Zapier.