Lightning Canvas App receives user_approval_required instead of signed_request

Question

I am using the Lightning interface and have created a Canvas app and a VisualForce page to show it. When I view the page, my external URL receives two parameters:

_sfdc_canvas_auth: user_approval_required
loginUrl: https://login.salesforce.com/

I was expecting to receive a signed_request parameter which I can test my secret against.

Having searched around I've found this occurrs when the "Permitted Users" is set to "All users may self-authorize", whereas it seems I need to set it to "Admin approved users are pre-authorized" so that users don't need to approve it. Where can I set this? Or is this the wrong solution?

Answer 1

It appears there is another edit app page, and this is where the setting can be found. Go to Setup then search "connected" in the search box, then click Manage Connected Apps, then click edit on the target app. Find the Permitted Users setting and set accordingly.

After that, do the same but click the app name instead of edit, then click Manage Profiles, and select the desired profiles or all of them.

Now, Salesforce will send signed_request to the external page.