Newer Version Available

This content describes an older version of this product. View Latest

Monitor Usage for an OAuth Connected App

The OAuth Usage page lists all OAuth connected apps that users in the org are connecting to. These apps have an active access or refresh token. If all tokens for an app are revoked or expired, the app disappears from this list.
Available in: both Salesforce Classic and Lightning Experience
Connected Apps can be created in: Group, Professional, Enterprise, Performance, Unlimited, and Developer Editions

Connected Apps can be installed in: All Editions


User Permissions Needed
To view the OAuth Connected Apps Usage page: View Setup and Configuration AND Manage Users
To read, create, update, or delete connected apps: Customize Application AND either

Modify All Data OR Manage Connected Apps

To update all fields except Profiles, Permission Sets, and Service Provider SAML Attributes: Customize Application AND either

Modify All Data OR Manage Connected Apps

To update Profiles, Permission Sets, and Service Provider SAML Attributes: Customize Application AND Modify All Data
To install and uninstall connected apps: Customize Application AND either

Modify All Data OR Manage Connected Apps

To install and uninstall packaged connected apps: Customize Application AND either

Modify All Data OR Manage Connected Apps

AND Download AppExchange Packages

The Connected Apps OAuth Usage page displays all current OAuth connections to the org, regardless of where the app came from. If an app has an Install button next to it, the connected app was created in another org. Install the app so that you can manage its security policies, for example, which users can access the app and for how long.

To view information about OAuth connected apps, from Setup, enter OAuth in the Quick Find box, then select Connected Apps OAuth Usage. The resulting list of apps can be long because it contains all Salesforce and custom OAuth apps available to your users, not just the ones installed in your org. For example, it lists apps from AppExchange and Salesforce partners.

Connected App
Name of the connected app. The list contains only the apps that users in the org are using. These apps have an active access or refresh token.
Description
Description of the connected app.
Manage App Policies
Click Manage App Policies to open the detail page for the connected app. From the detail page, you can click Edit Policies to manage the app’s access and security policies.
User Count
Number of users who are using the app. Click a User Count number to open the Connected Apps User’s Usage page to see information about users, including:
  • When they first used the app
  • Most recent time they used the app
  • Total number of times they used the app
From this page, you can end a user’s access to the current session by clicking Revoke. Or, you can click Revoke All at the top of the page to log out everyone currently using the app.
Actions
You can perform one of the following actions.
  • Install—Make the OAuth connected app available for access and security policy management. When you click install, the Manage App Policies link appears next to the app. Click the link to open the app’s detail page where you can set policies. Install appears next to apps that were created in another org but you can’t manage their policies in your org.
  • Uninstall—Remove the local copy of the OAuth connected app. Click uninstall only when the original developer deletes the app in the other Salesforce org. Uninstall doesn’t remove the connected app. It just removes the local copy that you installed to set the app’s OAuth policies in your org. By uninstalling the app, you’re only removing the OAuth policies that you set for the app. You’re actually loosening your security measures because you’re removing the policies for apps that users can still access.
  • Block—Make the OAuth connected app inaccessible to your org’s users. Blocking an app ends all current user sessions and prevents future sessions until you click Unblock.
  • Unblock—Give users access to the connected app. By unblocking the app, users can log in and run the app. If Unblock is disabled, the app is blocked org-wide because it’s not whitelisted. To whitelist the app, click Install. Then click Edit Policies, and under the app’s OAuth settings, set Permitted Users to Admin approved users are pre-authorized. You can whitelist apps only if you’ve asked Salesforce to enable the API client whitelisting feature.