Conga Product Documentation

Welcome to the new doc site. Some of your old bookmarks will no longer work. Please use the search bar to find your desired topic.

Creating an External Client Application

  • Ensure that you have Salesforce administrator permissions to create and manage External Client Applications.

  1. Create an External Client Application. For more information, see Create an External Client App.
    1. In Salesforce Setup, enter External Client App Manager in the Quick Find box and select External Client App Manager.
    2. Click New External Client App.

    3. In the Basic Information section, provide the following details:

      • External Client App Name: Enter a name for the application.

      • Contact Email: Enter an administrator or support email address.

      • Distribution State: Select Local if the application is intended for use only within the current Salesforce organization.

  2. Enable and Configure OAuth:
    1. Expand API (Enable OAuth Settings).
    2. Select Enable OAuth Settings.

    3. In Callback URL, enter the applicable URL based on your MCP client:

      Example: Claude​: Enter ​https://claude.ai/api/mcp/auth_callback

    4. Select the OAuth scopes required by the integration.

      Example: Access MCP servers (mcp_api), Perform requests at any time (refresh_token)

    5. Under Flow Enablement, select the authentication flow appropriate for your integration:

      Example:
      • Enable Client Credentials Flow

      • Enable Authorization Code and Credentials Flow
    6. Under Security, select Security for your integration.

      Example:
      • Require secret for Web Server Flow

      • Require Proof Key for Code Exchange (PKCE) extension for Supported Authorization Flows

      • Issue JSON Web Token (JWT)-based access tokens for named users

    7. Click Create.

  3. Configure Admin Policies (Crucial for Security):
    1. Open External Client App Manager.
    2. Locate the application you created.

    3. Open the Policies tab and click Edit.

    4. Under OAuth Policies, set Permitted Users to Admin approved users are pre-authorized.

    5. Assign the profiles or permission sets that are authorized to use the application.

    6. Click Save.

  4. Retrieve Client Credentials:
    1. In External Client App Manager, locate the application.
    2. Open the application Settings.

    3. Navigate to OAuth Settings.

    4. Click Consumer Key and Secret option.

    5. Copy the following values: Consumer Key (Client ID), Consumer Secret (Client Secret)

The External Client Application is created and configured. You can use the Client ID and Client Secret when configuring authentication between Conga CLM MCP server and your AI tool for example Claude.