2

Imagine you have a Connected App foo

I've noticed that even after refreshing a sandbox, you are still able to use the client_id and client_secret of the foo Connected App of that sandbox before it was refreshed.

Even though after the refresh, the client_id and client_secret of foo are completely different.

Does anyone know why this happens?

  • 1
    Are you sure the Connected App was created in that sandbox, and not elsewhere? – sfdcfox Mar 5 at 13:27
  • Yes, I am sure. – Leandro Ferreira Fernandes Mar 5 at 17:15
  • 18 days after, I'm still able to call the Connected App of the environment which was refresh. – Leandro Ferreira Fernandes Mar 24 at 13:19
  • That seems contrary to what I'd expect. You might want to contact support, since I'm pretty sure that's not supposed to happen. – sfdcfox Mar 24 at 15:43
  • 1
    @sfdcfox, I got a reply from SFDC support. – Leandro Ferreira Fernandes Mar 26 at 16:04
2

After getting contact with Salesforce Support they answered that this can occur and that it also is 'working as designed', even though it is indeed a grey area, with no documentation that covers this detail.

Below you can check the answer from the support.

Hi Leandro,

The issue was strange even for us and it turned out to be working as designed after consulting with our R&D Team. when you refresh the sandbox the client Id and Client secret gets changed and you will be still able to use old values which should not be in actual.

While we specified this as working as designed we will continue to learn about how our customers are using the product and make adjustments for future releases. We understood that this scenario is grey area which is not fully documented.Our product has created a User story(feature request) in order to remove the old values from the backend.This might get implemented in the upcoming releases

I hope you understand.Let me know if you need any further assistance from my end

Thanks and regards,

| improve this answer | |
  • 1
    Interesting. I still wouldn't recommend relying on the behavior, though. At least, until it's documented. – sfdcfox Mar 26 at 16:42

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.