---
title: "Create an external client app"
slug: "connect-an-external-client-app"
description: "Create an external client app to connect your Fullcast instance to Salesforce."
updated: 2026-02-19T16:11:44Z
published: 2026-02-19T16:11:44Z
canonical: "support.fullcast.com/connect-an-external-client-app"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.fullcast.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Create an external client app

When you newly provision a tenant, you must add Fullcast to Salesforce as an external client app to import and export data between your Fullcast instance and Salesforce.

> [!NOTE]
> **Note**
> 
> - For all new connections—the external client app is required. Connected app will no longer be supported for new connections.
> - Existing connections with the connected app will continue to be supported, however it is recommended to migrate to the external client app as soon as possible.
> - If an existing connection is broken for reasons like sandbox refresh or credential changes, you will be required to migrate to the external client app.

## Enable OAuth settings

> [!NOTE]
> Note
> 
> Only complete the fields and options indicated. Any fields or options that are not listed, do not change.

1. In Salesforce, click the **Setup**menu and select **Setup**.

![Setup menu location.](https://cdn.document360.io/369efcf7-66f9-4f6b-9d45-9ca24a5b06cf/Images/Documentation/image(318).png)
2. Go to **Apps > External Client Apps > External Client App Manager**.
3. Click **New External Client App**.
4. Under the **Basic Information** section, complete the following fields:

| Field | Action |
| --- | --- |
| **External Client App Name** | Type `Fullcast`. |
| **API Name** | Click the field to auto-populate `Fullcast`. |
| **Contact Email** | Type your email address. |
| **Distribution State** | From the dropdown select **Local**. |
5. Under the **OAuth Settings**section, select the **Enable OAuth** checkbox.
6. In the **App Settings**, complete the following fields:

| Field / Section | Action |
| --- | --- |
| **Callback URL** | Copy and paste all three URLs based on the instance you are using: > [!NOTE] > Note > > The start of each URL should match the Fullcast instance URL you will authenticate. **Production site URLs:** `https://app.fullcast.io/app/motion/segments` `https://app.fullcast.io/app/admin/motion` `https://app.fullcast.io/app/admin/export-import` **Pre-production site URLs:** `https://sandbox.fullcast.io/app/motion/segments` `https://sandbox.fullcast.io/app/admin/motion` `https://sandbox.fullcast.io/app/admin/export-import` |
| **OAuth Scopes** | Move the following options from **Available OAuth Scopes**to **Selected OAuth Scopes**: - **Access the identity URL service (id, profile, email, address, phone)** - **Full access (full)** - **Manage user data via APIs (api)** - **Manage user data via Web browsers (web)** - **Perform requests at any time (refresh_token, offline_access)** - **Access unique user identifiers (openid)** |
| **Enable Authorization Code and Credentials Flow** | Select the checkbox to enable. |
| **Require Proof Key for Code Exchange (PKCE) Extension for Supported Authorization Flows** | Select the checkbox to enable. ![The checkbox is selected for Required Proof Key for Code Exchange extension for Supported Authorization Flows.](https://cdn.document360.io/369efcf7-66f9-4f6b-9d45-9ca24a5b06cf/Images/Documentation/image(533).png) > [!NOTE] > **Note** > > You must ensure the PKCE security feature checkbox is selected in your OAuth authorization before you save your settings. If you have issues with your connection when the PKCE is enabled, contact your CSM. |
| **Require Secret for Web Server Flow** | Select the checkbox to enable. ![The checkbox is selected for Require secret for Web Server Flow.](https://cdn.document360.io/369efcf7-66f9-4f6b-9d45-9ca24a5b06cf/Images/Documentation/image(534).png) |
| **Require Secret for Refresh Token Flow** | Select the checkbox to enable. ![The checkbox is selected for Require secret for Refresh Token Flow.](https://cdn.document360.io/369efcf7-66f9-4f6b-9d45-9ca24a5b06cf/Images/Documentation/image(535).png) |
7. Click **Save**.
8. Click **Continue**.

## Update OAuth policies

1. Go to **Apps > External Client Apps > External Client App Manager**.
2. Find and select **Fullcast.**
3. Select the **Policies**tab.
4. Click **Edit**.
5. From the **Start Page** dropdown, select **None**.
6. Under the **OAuth Policies**section, complete the following fields:

| Field / Section | Action |
| --- | --- |
| **Permitted Users** | Select **All users may self-authorize**. |
| **IP Relaxation** | Select **Enforce IP restrictions, but relax for refresh tokens**. |
| **Refresh Token Policy** | Select **Refresh token is valid until revoked**. |
7. Do not change any other fields or options.
8. Click **Save**.

**Customer success manager:**A customer service support person who ensures customers achieve their desired outcomes and receive maximum value from Fullcast.