How to configure the Salesforce Extended Client Application for Flexi Kanban deployment

Since August 2025 Flexi Kanban deployment uses the Salesforce Extended Client App authentication mechanism, rather than direct username and password+token authorization. Extended Client App authentication is a secure connection and authentication mechanism between Salesforce orgs, as it doesn’t require storing target Salesforce org credentials in a Salesforce Source Org.

Note: The following actions should be performed in the Target Organization.

The following information is required in order to configure deployment settings:

• Organization Name - A user-defined name that identifies the Target Organization.

• Domain URL - The URL of the Target Organization. You can find it quickly by clicking the Profile icon and copying the value beneath your name (add "https://" at the beginning) or - the better way - go to Setup -> Company Settings -> My Domain -> Current My Domain URL

• Client Key and Client Secret - These values should be obtained once from Target Organization via the Flexi Kanban Connect application, as described below.

To create the Key and Secret, the following actions must be performed by the Target Organization admin:

• Add and configure the Salesforce Connected Application

• Set Up the Client Credentials Flow

Configure External Client App

In the Target Organization (to which Flexi Kanban components will be deployed), perform the following actions:

1. Navigate to Setup and open App Manager

2. Click the New External Client App button

3. Set the following properties:

   • Basic:

     • External Client App Name = Flexi Kanban Connect

     • API Name = Flexi_Kanban_Connect (will be populated automatically)

     • Contact Email = (email address of responsible person)

     • Distribution State = Local

   • API (Enable OAuth Settings):

     • Enable OAuth = true. Other fields will appear:

       • App Settings:

         • Callback URL (choose the appropriate value, depending upon org type):

           • Production - https://login.salesforce.com/services/oauth2/callback

           • Sandbox - https://test.salesforce.com/services/oauth2/callback

         • OAuth Scopes =

           • Manage user data via APIs (api)

           • Perform requests at any time (refresh_token, offline_access)

       • Flow Enablement:

         • Enable Client Credentials Flow = true (check it and click "Ok" button in confirmation popup that will appear)

       • Security:

         • Require secret for Web Server Flow = true

         • Require secret for Refresh Token Flow = true

4. Leave other properties set to their defaults and save the External Client App

Set Up the Client Credentials Flow

• In External Client App Manager, locate the newly created Connected App named "Flexi Kanban Connect" and click on it

• Open Policies tab on the Application page and click "Edit" button

• In the Plugin Policies section verify that Permitted users are set to All users can self-authorize

• In the OAuth Flows and External Client App Enhancements section check Enable Client Credentials Flow and enter an email address of user, which deployments will be performed from

• Verify that the following parameters are set in App Authorization section (other can be left default):

  • IP Relaxation = Enforce IP restrictions

• Save changes.

Retrieve the Client Key and Client Secret

• Open Settings tab on the Application page and expand OAuth Settings section

• Click Consumer Key and Secret button to open a proper page in a new browser tab

• Copy Consumer Key and Consumer Secret from here:

This Consumer Key and Consumer Secret must then be entered in the Target Organization Configuration, in order to be used for future Flexi Kanban Deployments.