Select this to require the connected app to provide a consumer secret for authorization.
Require Secret for Refresh Token Flow
Select this option to include the connected app’s client secret in the refresh token flow's authorization request. If you do not select this option and a connected app sends the client secret in the authorization request, Salesforce still validates it.
Enable Client Credentials Flow
Select this option to let this connected app use the OAuth client credentials flow.
Enable Authorization Code and Credentials Flow
Select this option to let this connected app use the authorization code and credentials flow. This flow is supported only for Experience Cloud users.
Leave all other fields blank. Click Save.
Changes can take up to 10 minutes to take effect.
After you create a connected app, the system generates aconsumer key and consumer secret toenhance the security of your connected app. The consumer key serves as a unique identifier for the customer within the Salesforce system, while the consumer secret validates the ownership and authorization associated with the consumer key.
To capture consumer key and consumer secret
Log in to the Salesforce portal as an administrator.
Go to Setup. In the Quick Find box, EnterApp Managerand clickApp Managerin the suggestions.
Find the connected app, click the drop-down () icon, and then select View.
Next to Consumer Key and Secret, click Manage Consumer Details. You are prompted to verify your identity using one of your registered methods.
In the Consumer Details section, click Copy next to Consumer Key and Consumer Secret and save them for future use.