# How to configure the Salesforce Extended Client Application for Flexi Kanban deployment

Since August 2025 Flexi Kanban deployment uses the Salesforce Extended Client App authentication mechanism, rather than direct username and password+token authorization. Extended Client App authentication is a secure connection and authentication mechanism between Salesforce orgs, as it doesn’t require storing target Salesforce org credentials in a Salesforce Source Org.

{% hint style="info" %}
Note: The following actions should be performed in the Target Organization.
{% endhint %}

The following information is required in order to configure deployment settings:

* Organization Name - A user-defined name that identifies the Target Organization.
* Domain URL - The URL of the Target Organization. You can find it quickly by clicking the Profile icon and copying the value beneath your name (add "https\://" at the beginning) or  - the better way - go to Setup -> Company Settings -> My Domain -> Current My Domain URL
* Client Key and Client Secret - These values should be obtained once from Target Organization via the Flexi Kanban Connect application, as described below.

<img src="https://3097383375-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FK2dgObBO5ydOH2ZXDJLa%2Fuploads%2F8z8Y5VYMQjuyyYhONUMh%2Ffile.excalidraw.svg?alt=media&#x26;token=70fbe0c4-0517-485e-a67f-4f9ca92e0bb3" alt="" class="gitbook-drawing">

To create the Key and Secret, the following actions must be performed by the Target Organization admin:

* Add and configure the Salesforce Connected Application
* Set Up the Client Credentials Flow

### Configure External Client App <a href="#configure-connected-app" id="configure-connected-app"></a>

In the Target Organization (to which Flexi Kanban components will be deployed), perform the following actions:

1. Navigate to Setup and open App Manager
2. Click the New External Client App button
3. Set the following properties:
   * *Basic:*
     * **External Client App Name** = `Flexi Kanban Connect`
     * **API Name** = `Flexi_Kanban_Connect` (will be populated automatically)
     * **Contact Email** = *(email address of responsible person)*
     * **Distribution State** = `Local`
   * *API (Enable OAuth Settings):*
     * **Enable OAuth** = `true`. Other fields will appear:
       * *App Settings:*
         * **Callback URL** (choose the appropriate value, depending upon org type):
           * Production - [`https://login.salesforce.com/services/oauth2/callback`](https://login.salesforce.com/services/oauth2/callback)
           * Sandbox - [`https://test.salesforce.com/services/oauth2/callback`](https://test.salesforce.com/services/oauth2/callback)
         * **OAuth Scopes** =&#x20;
           * [Manage user data via APIs (api)](#user-content-fn-1)[^1]
           * Perform requests at any time (refresh\_token, offline\_access)&#x20;
       * *Flow Enablement:*
         * **Enable Client Credentials Flow** = `true` (check it and click "Ok" button in confirmation popup that will appear)
       * *Security:*
         * **Require secret for Web Server Flow** = `true`
         * **Require secret for Refresh Token Flow** = `true`
4. Leave other properties set to their defaults and save the External Client App

<br>

<img src="https://3097383375-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FK2dgObBO5ydOH2ZXDJLa%2Fuploads%2FWJ8N6KUigRuhGSyNmXau%2Ffile.excalidraw.svg?alt=media&#x26;token=42544858-85ce-4f9c-ac98-5fe31eecf1eb" alt="" class="gitbook-drawing">

### Set Up the Client Credentials Flow <a href="#manage-connected-app" id="manage-connected-app"></a>

* In External Client App Manage&#x72;**,** locate the newly created Connected App named "Flexi Kanban Connect" and click on it
* Open Policies tab on the Application page and click "Edit" button

<img src="https://3097383375-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FK2dgObBO5ydOH2ZXDJLa%2Fuploads%2FvgSyiAWy8B0fwQa4FegH%2Ffile.excalidraw.svg?alt=media&#x26;token=cfa72dfd-d7b4-412c-bb3f-a983a097d00f" alt="" class="gitbook-drawing">

* In the Plugin Policies section verify that **Permitted users** are set to `All users can self-authorize`&#x20;
* In the OAuth Flows and External Client App Enhancements section check **Enable Client Credentials Flow**  and enter an email address of user, which deployments will be performed from

<img src="https://3097383375-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FK2dgObBO5ydOH2ZXDJLa%2Fuploads%2FCFNxLBAdt0QNT392mEXH%2Ffile.excalidraw.svg?alt=media&#x26;token=27a9815a-a72a-425e-b4b6-82c1463defca" alt="" class="gitbook-drawing">

* Verify that the following parameters are set in App Authorization section (other can be left default):
  * **IP Relaxation** = `Enforce IP restrictions`
* Save changes.

### Retrieve the Client Key and Client Secret <a href="#get-key-and-secret" id="get-key-and-secret"></a>

* Open Settings tab on the Application page and expand OAuth Settings section
* Click Consumer Key and Secret button to open a proper page in a new browser tab

<img src="https://3097383375-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FK2dgObBO5ydOH2ZXDJLa%2Fuploads%2FVQe8MNr6jvHtAMDIL1VR%2Ffile.excalidraw.svg?alt=media&#x26;token=dd267b7c-7b67-4bc1-a7ea-773eac7685d8" alt="" class="gitbook-drawing">

* Copy Consumer Key and Consumer Secret from here:

<img src="https://3097383375-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FK2dgObBO5ydOH2ZXDJLa%2Fuploads%2F0u4wXdFfkLAZYH43iAA6%2Ffile.excalidraw.svg?alt=media&#x26;token=ed6e5bc7-6012-49d8-b66b-fa7ffc9598ae" alt="" class="gitbook-drawing">

This Consumer Key and Consumer Secret must then be entered in the [Target Organization Configuration](https://docs.flexikanban.ai/references/deployment/deploying-using-connected-app-external-client-app-authentication), in order to be used for future Flexi Kanban Deployments.

[^1]:


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.flexikanban.ai/references/deployment/how-to-configure-the-salesforce-extended-client-application-for-flexi-kanban-deployment.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.