Connect to Salesforce

Set up your Connected App and authenticate to access Data Cloud APIs

Set Up External Client App

Required Callback URL

http://localhost:8000/oauth/callback

Step 1: Create External Client App

In Salesforce, go to Setup
Search for "External Client App Manager"
Click "New External Client App"
Fill in:
- External Client App Name: Data Cloud Debugger
- Contact Email: Your email

Step 2: Enable OAuth Settings

Enable OAuth	✅ Check this
Callback URL	`http://localhost:8000/oauth/callback`

Select OAuth Scopes (move these from Available to Selected):

Manage user data via APIs (api)
Perform requests at any time (refresh_token, offline_access)
Manage Data Cloud Ingestion API data (cdp_ingest_api)
Manage Data Cloud profile data (cdp_profile_api)
Perform ANSI SQL queries on Data Cloud data (cdp_query_api)
Manage Metadata API (metadata_api) - Required for Agentforce

Step 3: Configure Flow & Security

Enable Client Credentials Flow: ✅ Check
Enable Authorization Code and Credentials Flow: ✅ Check
Require Proof Key for Code Exchange (PKCE): ✅ Check
Require Secret for Web Server Flow: ❌ Uncheck
Require Secret for Refresh Token Flow: ❌ Uncheck

👆 Click "Create" to save your app before proceeding to Step 4.

Step 4: Set IP Relaxation (Important!)

After the app is created, go to the Policies tab
Set IP Relaxation to: Relax IP restrictions

Step 5: Get Your Consumer Key

Go to the OAuth Settings section of your app
Click the "Consumer Key and Secret" button
Copy the Consumer Key - you'll need it in the next step

⏱️ Note: It takes 2-3 minutes after creating the app for the Consumer Key and Secret button to work. If you get an error, wait a few minutes and try again.

Wait 10 Minutes

After creating your Connected App, wait approximately 10 minutes before using it. Salesforce needs time to propagate the app configuration across all servers.