Creating a Custom OAuth Application

If you do not have access to the user name and password or do not wish to require them, you can use OAuth authentication. Salesforce uses the OAuth authentication standard, which requires the authenticating user to interact with Salesforce via the browser. The provider facilitates the OAuth exchange in various ways.

To obtain the OAuth client credentials, consumer key, and consumer secret, and to ensure you can refresh the OAuth token:

1. Log in to Salesforce.com.
2. From Setup, at the Quick Find box, enter Apps.
3. Click the link to create an application. Salesforce displays a new application page.
4. In the Connected Apps section of the new page, click New.
5. Enter an application name to be displayed to users when they log in to grant permissions to your custom OAuth application. Include a contact Email address.
6. Click Enable OAuth Settings and enter a URL in the Callback URL box. If you are making a desktop application, set the Callback URL to http://localhost:33333 or a different port number of your choice. If you are making a web application, set the Callback URL to a page on your web application where you want the user to be returned to after they have authorized your application.
7. Set the OAuth refresh_token and offline_access scopes, which ensure that your custom application will be able to refresh your OAuth token.
8. Select any other required scopes for permissions that your application should request from the user.
9. Click your application name. Salesforce opens a page with information about your application, including the OAuth client credentials, the consumer key, and consumer secret.
10. Record these settings for future reference.