How to Configure Salesforce OAuth 2.0 Client Credentials (Non-Interactive)

SSIS PowerPack Salesforce
, , ,
1

Introduction

Some integration scenarios require connecting to Salesforce using OAuth 2.0 without user interaction. Unlike the Authorisation Code flow, which requires a user to sign in through a browser, non-interactive authentication allows applications to obtain access tokens automatically.

Salesforce supports several OAuth 2.0 flows for server-to-server authentication. In this tutorial, we will configure the OAuth 2.0 Client Credentials flow using an External Client App, allowing ZappySys connectors to authenticate without user interaction.

Prerequisites

Steps

Create an External Client App in Salesforce

  1. If you already have a Connected App, you can migrate it to an External Client App.

  2. Go to Setup > Apps > App Manager.

  3. Select the application you want to migrate.

  4. Click Migrate to External Client App.

    image
    image651×374 26.3 KB

  5. If you prefer to create a new application, go to Setup > External Client Apps > External Client App Manager.

  6. Click New External Client App, complete the required fields, and create the application.

    image
    image1924×386 104 KB

Configure the Settings tab

  1. Open your External Client App and go to the Settings tab.

  2. Click Edit.

    image
    image610×360 19 KB

  3. Under OAuth Settings, enable OAuth.

  4. Enter a Callback URL. For this example, use:

https://zappysys.com/oauth

  1. Select the OAuth scopes required by your application. You will use these same scopes later when configuring the Salesforce connection.

    image
    image1256×729 36 KB

  2. Save the configuration.

Configure the Policies tab

  1. Open the Policies tab and click Edit.

    image
    image790×362 20.2 KB

  2. Enable Client Credentials Flow.

  3. Specify the Salesforce user in the Run As field.

    image
    image507×222 14.9 KB

  4. Save the configuration.

Generate the Consumer Key and Secret

  1. Return to the Settings tab.
  2. Under OAuth Settings, click Consumer Key and Secret.
  3. Salesforce will send a verification code to your registered email address.
  4. After verification, copy the Consumer Key and Consumer Secret. You will need these values when configuring the connector.
    image
    image1191×384 33.7 KB

Configure the Salesforce connection

  1. Go to your Salesforce Connection

  2. Open the Advanced tab.

  3. In Scopes for OAuth Token, enter the same OAuth scopes configured in your Salesforce External Client App.

    image
    image623×640 33.2 KB

  4. Return to the General tab.

  5. Select OAuth 2.0 Client Credentials (Non-Interactive) as the authentication method.

  6. Enter the Consumer Key and Consumer Secret obtained in the previous step.

  7. In the Advanced section, configure the appropriate Service Type and Token URL. For the correct Token URL, see the following article.

  8. Click Test Connection.

  9. If the connection succeeds, click OK to save the configuration.

    image
    image721×546 36.1 KB

Conclusion

The OAuth 2.0 Client Credentials flow provides a secure and fully automated way to authenticate with Salesforce without requiring user interaction. This makes it ideal for scheduled jobs, server-side applications, SSIS packages, ODBC connections, and other unattended integration scenarios.

Once your External Client App is configured and the Consumer Key, Consumer Secret, OAuth scopes, and Token URL are specified, ZappySys connectors can automatically obtain and refresh access tokens, enabling secure and reliable access to Salesforce APIs without browser-based authentication.

Still need help?

If you encounter any issues or have questions, please get in touch with our support team: