SuccessPro Connected App Installation ( MODERN ECA )

SuccessPro Connected App Installation ( MODERN ECA )

SuccessPro Connected App Installation (Modern ECA)

Replaces the classic Connected App walkthrough for new installs. As of Spring '26, Salesforce blocks creating new classic Connected Apps by default; new installs use External Client Apps (ECA) instead
Legacy Connected Apps are unaffected and keep working.

1. Create the External Client App

  • Setup -> External Client Apps -> New.
  • Basic Info:
  • External Client App Name: SuccessPro Connected App
  • API Name (must be exact - matches the SuccessProApp component's default): SuccessPro_Connected_App
  • Contact Email: dev+{tenant}@actifi.com
  • Distribution State: leave Local

2. OAuth Settings

  • Enable OAuth Settings: On
  • Callback URL:
  • https://[tenant]-dev.actifi.com/salesforcewidget/oauth-callback.php (dev/ite)
  • https://[tenant].actifi.com/salesforcewidget/oauth-callback.php (production)
  • Selected OAuth Scopes: Manage user data via APIs (api)
  • If this same app will also carry the API User integration (see the API User doc), also add "Perform requests at any time (refresh_token, offline_access)" here.

3. Canvas App Settings

  • Canvas: On
  • Canvas App URL:
  • https://[tenant]-dev.actifi.com/salesforcewidget/index.php (dev/ite)
  • https://[tenant].actifi.com/salesforcewidget/index.php (production)
  • Access Method: Signed Request (POST)
  • Locations: Lightning Component

4. Security tab (leave at defaults)

No changes needed to any of these:
  • Require secret for Web Server Flow / Refresh Token Flow - leave checked
  • Require PKCE - leave checked
  • Issue JWT-based access tokens - leave unchecked
  • Enforce Refresh Token IP Allowlist - leave unchecked

5. App Authorization tab (leave at defaults)

  • Refresh Token Policy: Specific Inactivity / 30 / Days
  • IP Relaxation: leave default ("Enforce IP restrictions" - despite the name, this does not block the widget or API flows)

6. Policies tab -> App Policies

  • Permitted Users: change to "Admin approved users are pre-authorized"
  • Selected Profiles: add the profile(s) that need widget access (e.g. System Administrator)

7. Provide ActiFi the Consumer Key and Secret

  • External Client App Manager -> select the app -> Edit Settings -> OAuth tab -> view Consumer Key / Consumer Secret.
  • Send both values to ActiFi.

8. Install the SuccessPro Lightning Component

  • Install via the package link ActiFi provides. Leave "Install for Admins Only" selected.
  • Note: the org must be using My Domain to install the package.

9. Add the Connected App to a Record Layout

  • Navigate to the record layout (Account/Contact) -> Edit Page.
  • Add a new tab, named "SuccessPro" (or a custom name).
  • Drag the SuccessProApp component into the new tab.
  • Optional configuration ( Work with an ActiFi Developer to implement ):
  • Additional Record Fields (comma-separated, e.g. SystemId__c)
  • Alternate Salesforce User Identifier (e.g. EmployeeId__c)
  • Connected App Name override, only if not using the default API name SuccessPro_Connected_App
  • Save.