I developed a standalone application using REST API to extract Salesforce data using a Connected App. The application uses OAuth 2.0 Web Server Flow to authenticate users. I am following the specified guidelines for extraction such as the maximum number of API Calls.
The Connected App was created in my organization, therefore I have access to Secret Key and Client ID. This is not a Canvas Connected App, as I need to trigger the extraction from outside of Salesforce. I know how to package a Canvas Connected app, but I haven't found information regarding how to distribute a Connected App.
- How can I distribute this Connected App to my clients?
- How will this standalone application be tested during the security review?
- In case it is not possible to distribute the connected app. Every client needs to create their own Connected App, and introduce the Client ID + Secret Key in the standalone application?