ST-2026-275 · Authentication & identity
Salesforce enforces device-flow restrictions for local external client apps
Salesforce schedules enforcement of device-flow restrictions for local external client apps on 30 November 2026.
Salesforcedevice flowexternal client appsOAuthenforcement
Previous state
Local external client apps could use device flow without the newly documented enforcement boundary.
Current state
From 30 November 2026 Salesforce enforces the documented device-flow restrictions for local external client apps.
Affected users
Who needs to care
Salesforce local external client apps using OAuth device flow.
Required response
What to do
Review device-flow configuration and migrate or adjust affected clients before 30 November 2026.
Evidence boundary
What the source does not prove
The record is limited to the documented local external client-app enforcement; the source publication date is preserved as absent.
Lifecycle history
Dated event sequence
- Restrictions enforced
Salesforce enforces the device-flow restrictions.
Evidence ledger
First-party sources
- 01Salesforce Help — Device flow restrictions for local external client apps
Official Salesforce release-note authority · 2026-11-30
Open official source ↗