1. Go to Setup.
2. In Quick Find, enter External Client Apps, and then select External Client App Manager.
3. Select New External Client App.
4. Under the Basic Information section, enter the following details:
   • Connected App Name: Enter a name, such as CaseCloud Secured Login Integration.
     (Press Tab to move to the next field.)
   • API Name: This field auto-populates based on the Connected App Name.
   • Contact Email: Enter your email address.
   • Distribution State: Select Local.

Configure API (Enable OAuth Settings)

5. In the API (Enable OAuth Settings) section, select Enable OAuth Settings. Under App Settings, enter the following information:

   • Callback URL: Enter your Salesforce My Domain URL in this format:
     https://[my-domain-url]/

     Tip: To locate your My Domain URL, go to Setup > Quick Find: My Domain > My Domain.
     Refer to Image A for guidance.

   • OAuth Scopes: From Available OAuth Scopes, select and add the following to Selected OAuth Scopes:
     • Access the identity URL service (id, profile, email, address, phone)
     • Full access (full)
     • Perform requests at any time (refresh_token, offline_access)
   • Introspect all Tokens: Clear this checkbox.
   • Configure ID Token: Clear this checkbox.
   • Under Flow Enablement, configure the following:
     • Enable Authorization Code and Credentials Flow: Select this option.
     • Ensure all other options remain unchecked.
   • Under Security, configure the following:
     • Require secret for Web Server Flow: Select this option.
     • Require secret for Refresh Token Flow: Select this option.
     • Require Proof Key for Code Exchange (PKCE) extension for Supported Authorization Flows: Clear this option.
     • Ensure all other options in this section remain unchecked.

6. Select Create to save the External Client App.
7. Navigate to Setup. In Quick Find, enter External Client Apps, and then select External Client App Manager.
8. Locate the External Client App you just created in the list.
9. Select the External Client App Name to open the app in detail view.

10. Select the Settings tab. In the OAuth Settings section, select Consumer Key and Secret.

11. Copy/Paste the Consumer Key and Consumer Secret displayed into a text file for later use and close the tab.

1. Go to Setup. In Quick Find, enter Identity, and then select Identity > Auth. Providers.
2. Select New.
3. Enter the following information:
   • Provider Type: Select Salesforce.
   • Name: Enter a name, such as CaseCloud Secured Login Provider.
     (Press Tab to move to the next field.)
   • URL Suffix: This field auto-populates.
   • Consumer Key: Enter the Consumer Key you saved earlier.
   • Consumer Secret: Enter the Consumer Secret you saved earlier.
   • Use Proof Key for Code Exchange (PKCE) Extension: Clear this checkbox.
   • Default Scope: Enter refresh_token full.
4. Select Save. 

5. On the next page, scroll to the Salesforce Configuration section.
6. Copy the Callback URL value and paste it into your text file for use in the next step.

Update the External Client App Callback URL

7. Return to Setup.
8. In Quick Find, enter External Client Apps, and then select External Client App Manager.
9. Locate your previously created External Client App in the list.
10. Select the External Client App Name to open the detail view.
11. Select the Settings tab, and then select Edit.
12. In the OAuth Settings section, update the Callback URL by pasting the value you copied from the Auth. Provider. Select Save.

1. Go to Setup. In Quick Find, enter Security, and then select Security > Named Credentials.
2. From the button menu, select New Legacy.  Enter the following information:
   • Label: Enter a label, such as CaseCloud Secured Login Named Credential.
     (Press Tab to move to the next field.)

   • Name: This field auto-populates.

     ⚠️ Copy and paste this Name into your text file. You will need it as the Named Credential API Name in a later step.

   • URL: Enter your Salesforce My Domain URL in this format:
     https://[my-domain-url]/
   • Identity Type: Select Named Principal.
   • Authentication Protocol: Select OAuth 2.0.
   • Authentication Provider: Search for and select the Auth. Provider you created in Step 2: Create Auth. Provider.
   • Scope: Enter refresh_token full.
   • Start Authentication Flow on Save: Select this option.
   • Generate Authorization Header: Select this option.
   • Allow Merge Fields in HTTP Header: Select this option.

3. Select Save to continue.

   (If this step is configured correctly, Salesforce will prompt you to log in again.)

1. Go to Setup.
2. In Quick Find, enter Custom Code, and then select Custom Code > Custom Metadata Types.
3. To the left of AdvoLogix Global Configurations, select Manage Records.

4. To the left of My Org Named Credential, select Edit.

5. In the Named Credential API Name field, enter the API Name you copied from the Named Credential you created in Step 3: Create Named Credential. Select Save.