Conga Product Documentation

Welcome to the new doc site. Some of your old bookmarks will no longer work. Please use the search bar to find your desired topic.

Creating an External Client Application

  • Ensure that you have Salesforce administrator permissions to create and manage External Client Applications.

The External Client Application provides the OAuth client credentials that Claude uses to authenticate against your Salesforce org when invoking Conga CPQ MCP actions.

  1. Create an External Client Application:
    1. In Salesforce Setup, enter External Client App Manager in the Quick Find box and select External Client App Manager.
    2. Click New External Client App.
    3. In the Basic Information section, provide the following details:
      • External Client App Name: Enter a name for the application.
      • Contact Email: Enter an administrator or support email address.
      • Distribution State: Select Local if the application is intended for use only within the current Salesforce organization.
  2. Enable and Configure OAuth:
    1. Expand API (Enable OAuth Settings).
    2. Select Enable OAuth Settings.
    3. In Callback URL, enter the redirect URI that receives authentication tokens from Salesforce.

      Example: https://mydomain.com

    4. Select the OAuth scopes required by the integration.

      Example: Manage user data via APIs (api)

    5. Under Flow Enablement, select the authentication flow appropriate for your integration:
      • Enable Client Credentials Flow for server-to-server integrations.
      • Enable JWT Bearer Flow for integrations that use certificate-based authentication.
    6. Click Create.
  3. Configure Admin Policies (Crucial for Security):
    1. Open External Client App Manager.
    2. Locate the application you created.
    3. Open the Policies tab and click Edit.
    4. Under OAuth Policies, set Permitted Users to Admin approved users are pre-authorized.
    5. Assign the profiles or permission sets that are authorized to use the application.
    6. Click Save.
  4. Retrieve Client Credentials:
    1. In External Client App Manager, locate the application.
    2. Open the application Settings.
    3. Navigate to OAuth Settings.
    4. Copy the following values: Consumer Key (Client ID), Consumer Secret (Client Secret)

The External Client Application is created and configured. You can use the Client ID and Client Secret when configuring authentication between Salesforce and the Conga CPQ MCP server.