Summary
Salesforce has updated the enforcement timeline for the retirement of the Username-Password Flow for connected apps. Customers using this authentication method with Salesforce Data Action integrations must migrate to Client Credentials Flow before February 20, 2027.
Genesys has also validated that a separate Salesforce enforcement change referenced in our previous announcement will not impact Genesys Cloud customers and requires no customer action.
Effective Date
Saturday, February 20, 2027
Additional Resources
Details
Salesforce is retiring support for the Username-Password Flow for connected apps. Salesforce has moved enforcement of this change to its Spring 2027 release on February 20, 2027.
When Salesforce enforces this change, Salesforce Data Action integrations that continue to use Username-Password Flow credentials will no longer be able to authenticate.
Customers can update credentials on an existing Salesforce Data Action integration without downtime or republishing existing data actions. However, Genesys recommends first creating a new integration using Client Credentials Flow so that the new configuration can be validated before updating the existing integration.
When configuring the External Client App, we recommend initially configuring it to run in the context of the same Salesforce user used by the existing Salesforce Data Action integration. This helps minimize the risk of unexpected permission or behavior changes during migration.
Customer Impact
Customers using Username-Password Flow credentials with Salesforce Data Action integrations must migrate to Client Credentials Flow before February 20, 2027.
Failure to migrate before Salesforce enforcement will result in authentication failures for affected Salesforce Data Actions.
No customer action is required for the separate Salesforce enforcement change previously referenced, which Genesys has validated will not impact Genesys Cloud customers.
Impacted Resources
Feature:Salesforce Data Action Integration
Affected configuration: Integrations using Salesforce Username-Password Flow credentials
No Genesys Cloud API endpoints are directly impacted by this change.
Explanation
This change is required because Salesforce is retiring Username-Password Flow support for connected apps.
Genesys is publishing this update to clarify the impact of Salesforce's changes and provide customers with the revised enforcement date and sufficient time to complete the required credential migration.
Issue References
PEZ-1178
Contacts
@Jason Mathison Please reply to this announcement with any questions. This helps the wider developer community benefit from the discussion. We encourage you to use this thread before contacting the designated person directly. Thank you for your understanding.