Claude MarketplacesSubmit
forcedotcom avatar

Configuring Connected Apps

forcedotcom/sf-skills

You'll reach for this when you're setting up OAuth flows, Connected Apps, or External Client Apps in Salesforce. It walks you through the Connected App versus ECA decision (newer orgs block new Connected Apps by default as of Spring '26), picks the right OAuth flow for your client type, and pulls from tested templates for JWT bearer, PKCE, device flow, and more. The 120-point security checklist is baked in, so you won't accidentally ship with Full scope or loose callback URLs. It knows the metadata folder quirks (`.ecaGlblOauth` not `.ecaGlobalOauth`, ECA security settings are retrieve-only) and won't let you proceed if deployment fails. Handles the multi-file ECA metadata sprawl cleanly.

skills.sh installs
2.8K
GitHub stars
1.2K
last updated
Aug 21, 2026
View on GitHub

Install

$ npx -y skills add forcedotcom/sf-skills --skill configuring-connected-apps --agent claude-code

Installs into .claude/skills of the current project.

Files

You'll reach for this when you're setting up OAuth flows, Connected Apps, or External Client Apps in Salesforce. It walks you through the Connected App versus ECA decision (newer orgs block new Connected Apps by default as of Spring '26), picks the right OAuth flow for your client type, and pulls from tested templates for JWT bearer, PKCE, device flow, and more. The 120-point security checklist is baked in, so you won't accidentally ship with Full scope or loose callback URLs. It knows the metadata folder quirks (`.ecaGlblOauth` not `.ecaGlobalOauth`, ECA security settings are retrieve-only) and won't let you proceed if deployment fails. Handles the multi-file ECA metadata sprawl cleanly.

Browse the repository on GitHub

Sponsors

Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthlyAgent CaffeineSponsoredClose your lid, come back to finished workSnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthlyWaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthlyknobsSponsoredSee your site on any phone, any day, in any language

Details

Repository
github.com/forcedotcom/sf-skills
Categories
Backend & APIs, Security, Documentation, Sales & Marketing
First seen
Jun 3, 2026

More from forcedotcom/sf-skills

All 158

Recommended

More Backend & APIs
1waynesutton avatarconvex-schema-validatorwaynesutton/convexskillsDefining and validating database schemas with proper typing, index configuration, optional fields, unions, and migration strategies for schema changes2.8Kskills.sh installs
2dynatrace avatardt-obs-frontendsdynatrace/dynatrace-for-aiReal User Monitoring (RUM) on Dynatrace — web and mobile frontends. Core Web Vitals, user sessions, page performance, mobile crashes, frontend errors, and front2.8Kskills.sh installs
3nvidia avatarcuopt-developernvidia/skillsModify, build, test, debug, and contribute to NVIDIA cuOpt (C++/CUDA, Python, server, CI). Use for solver internals, PRs, DCO, and code conventions.2.7Kskills.sh installs
4aahl avatarmcp-larkaahl/skillsBased on FeiShu(飞书) / Lark's OpenAPI MCP server, manage user information, chats, emails, cloud documents, multidimensional tables, tasks, calendars, etc.2.7Kskills.sh installs
5ailabs-393 avatarpersonal-assistantailabs-393/ai-labs-claude-skillsThis skill should be used whenever users request personal assistance tasks such as schedule management, task tracking, reminder setting, habit monitoring, produ2.7Kskills.sh installs
6agricidaniel avatarblog-auditagricidaniel/claude-blogFull-site blog health assessment scanning all blog files for quality scores, orphan pages, topic cannibalization, stale content, and AI citation readiness. Runs2.7Kskills.sh installs