Salesforce Connected App Usage Restrictions Are Coming

Dear Customers,

We would like to bring to your attention an important upcoming Salesforce change that may affect how your users access connected apps. Please review the details below and take the necessary steps to prepare.

What’s Happening?

Starting in early September 2025, Salesforce will restrict the use of uninstalled connected apps.

• This update is part of Salesforce’s effort to enhance security by default, giving admins more control over connected apps and reducing unauthorized access.
• The restriction is mandatory and cannot be disabled.

When is This Rolling Out?

• New orgs (production & sandbox): Restrictions take effect by September 1, 2025.
• Existing orgs (created before August 28, 2025): A phased rollout begins September 2, 2025, and will complete by September 17, 2025.
• You can confirm the change in your org when you see the new “Approve Uninstalled Connected Apps” user permission added to the standard System Administrator profile.

How Will This Impact Users?

• Most end users will be blocked from accessing uninstalled connected apps.
• Existing users who previously authorized an uninstalled app can continue using it (unless the app uses the OAuth 2.0 device flow).
• New users attempting to access uninstalled apps will be blocked.
• All uninstalled apps using OAuth 2.0 device flow will be blocked for all users, even if previously authorized.
• Installed connected apps (prior to this change) and org-managed connected apps are not impacted.

What Do You Need to Do?

To ensure uninterrupted access for your users, please complete the following steps:

1. Install SearchUnifySF

• Click the Gear icon → Setup
• In Quick Find, type: Connected Apps OAuth Usage → Select it
• You’ll see a list of connected apps in your org
• Look for SearchUnify SF and click Install

2. Manage Access to the Connected App After Install

Once the app is installed, you must configure who can access it:

• From Setup, enter Connected Apps in the Quick Find box, then select Manage Connected Apps
• Click Edit next to the connected app you want to configure
• Under OAuth Policies, update the Permitted Users setting:
• All users may self-authorize (By-Default): Allows all users to authorize the app after logging in. Users must approve the app the first time they access it.

As an admin, you control access via:

• Profiles: Go to each profile’s Connected App Access section and enable the app.
• Permission Sets: Go to the permission set’s Assigned Connected Apps section and enable the app.

For more details, refer to Salesforce’s official announcement here:
Salesforce Help Article

Thank you for your attention and cooperation.

SearchUnify Team