Salesforce DX Developer Guide

How Salesforce Developer Experience (DX) Tooling Changes the Way You Work
Provide Developers Access to Salesforce DX Tools
Project Setup
Authorization
Authorize an Org Using a Browser
Authorize an Org Using the JWT Flow
Create a Private Key and Self-Signed Digital Certificate
Create an External Client App in Your Org
Create a Connected App in Your Org
Use the Default Connected App Securely
Use an Existing Access Token
Authorize an Org Using Its SFDX Authorization URL
Authorization Information for an Org
View Org Authentication Secrets
Log Out of an Org
Metadata Coverage
Scratch Orgs
Sandboxes
Track Changes Between Your Project and Org
Work with Data
Salesforce DX MCP Server and Tools
Development
Build and Release Your App
Unlocked Packages
Continuous Integration
Troubleshoot Salesforce DX
Limitations for Salesforce DX
PDF

Use an Existing Access Token

When you authorize an org using the org login commands, Salesforce CLI takes care of generating and refreshing all tokens, such as the access token. But sometimes you want to run a few CLI commands against an existing org without going through the entire authorization process. In this case, you provide the access token and URL of the Salesforce instance that hosts the org to which you want to connect.
Almost all CLI commands that have the --target-org | -o flag accept an access token. The only exception is org display user.
  1. Open a terminal (macOS and Linux) or command prompt (Windows).
  2. Run the org display command to get the instance URL for the org to connect to. See the value for the Instance Url key.
  3. Run the org auth show-access-token command to get the access token.
  4. Use config set to set the org-instance-url configuration variable. To set it locally, run the command from a Salesforce DX project; to set it globally, use the --global flag.
  5. When you run the CLI command, use the org’s access token as the value for the --target-org flag rather than the org’s username. For example:

    If your access token contains a ! character, you must sometimes escape it with a backslash (\). For example, if your access token is 00007wpr!AQkAQA, specify it this way: --target-org 00007wpr\!AQkAQA

    Tip

Salesforce CLI doesn’t store the access token in its internal files. It uses it only for this CLI command run.