Edit, Reconfigure, or Delete a Connected App in Salesforce Classic

After creating a connected app, you can edit, reconfigure, or delete it. You can restrict access and add custom attributes.

Available in: both Salesforce Classic (not available in all orgs) and Lightning Experience

Connected Apps can be created in: Group, Professional, Enterprise, Performance, Unlimited, and Developer Editions

Connected Apps can be installed in: All Editions

User Permissions Needed
To read, create, update, or delete connected apps:	Customize Application AND either Modify All Data OR Manage Connected Apps
To update all fields except Profiles, Permission Sets, and Service Provider SAML Attributes:	Customize Application AND either Modify All Data OR Manage Connected Apps
To update Profiles, Permission Sets, and Service Provider SAML Attributes:	Customize Application AND Modify All Data
To install and uninstall connected apps:	Customize Application AND either Modify All Data OR Manage Connected Apps
To install and uninstall packaged connected apps:	Customize Application AND either Modify All Data OR Manage Connected Apps AND Download AppExchange Packages

Edit a Connected App

You can edit a connected app at any time to change its description, logo, icon, or callback URL. You can update settings for OAuth, web apps, mobile apps, or canvas apps.

Open the list of apps. From Setup, enter Apps in the Quick Find box, then select Apps.
Locate the connected app in the apps list, and click Edit.
Make your changes and click Save.

For your convenience, you can update some fields in a connected app and the changes apply immediately to all installed versions of the app. For example, connected app descriptions are immediately updated in each version of the connected app. The following version-independent fields bypass the packaging or installation lifecycle.

Description

Info URL

Logo Image URL

Callback URL

Important

Restrict Access to a Trusted IP Range and Allow Access from Outside the IP Range

After you’ve created the connected app, you can specify the allowed IP ranges from which a user can log in. The IP ranges work with OAuth-enabled connected apps, not SAML-enabled connected apps.

To set the allowed IP range:

Open the list of apps. From Setup, enter Apps in the Quick Find box, then select Apps.
Locate the connected app in the apps list, and click its name.
In the Trusted IP Range for OAuth Web server flow section, click New.
For the start IP address, enter a valid IP address. For the end IP address, enter the same or higher IP address.
Enter multiple discontinuous ranges by clicking New.

You can give specific users access to an OAuth connected app from outside of the Trusted IP Range. For example, to give users access when traveling, set the connected app to Relax IP Restrictions for activated devices. When users try to use the connected app from outside the range with a new browser or device, they are prompted to verify their identity.

To allow access outside the specified IP ranges:

Open the list of apps. From Setup, enter Apps in the Quick Find box, then select Apps.
Locate the connected app in the apps list, and click Manage.
Click Edit Policies.
In the IP Relaxation field, select Relax IP Restrictions or Relax IP Restrictions for activated devices.

If Enforce login IP ranges on every request is enabled, it affects the IP relaxation behavior. For more information, see Connected App IP Relaxation and Continuous IP Enforcement.

Note

Add Custom Attributes

After you’ve created the connected app, you can add custom attributes. With custom attributes, you can get more information about a user’s identity, like an address or job title. Custom attributes specify SAML metadata or specify OAuth parameters that are read at OAuth runtime.

Open the list of apps. From Setup, enter Apps in the Quick Find box, then select Apps.
Locate the connected app in the apps list, and click its name.
Under Custom Attributes, click New.
Each custom attribute must have a unique key and use fields available from the Insert Field menu. For example, assign a key name, such as country and insert the field $Organization.Country. When using SAML, attributes are sent as SAML attribute statements. When using OAuth, attributes are available as a custom attributes object in the user’s Identity URL.

Delete a Connected App

The connected app name must be unique for the connected apps in your org. You can reuse the name of a deleted connected app if the connected app was created using the Spring ’14 release or later.