How to find if any of lightning apps in my org uses oauth. Can anyone please guide me with this.

1 Answer 1


What you're looking for is within ConnectedApp metadata. If you pull down this metadata type from the metadata API you'll be able to identify your apps. This should be a good first step for you to identify your apps. That being said, I am not sure what aspects of a ConnectedApp (if anything) identifies it as a "Lightning app" specifically. Check for a startUrl property - that may be informative.

Per the Salesforce release notes they can be identified by their URL:

Lightning apps include Lightning Experience and any resource with a URL that ends with .app before any optional query string.

For each app, check the OAuth scopes under oauthConfig:

<?xml version="1.0" encoding="UTF-8"?>
<ConnectedApp xmlns="http://soap.sforce.com/2006/04/metadata">
    <contactEmail>[email protected]</contactEmail>
    <label>My App</label>
        <consumerKey>the key will be here</consumerKey>

In order for your Lightning app to continue to provide permissions to authenticated users correctly, it must use one of the following 4 scopes (per the release notes). I have placed the actual scope name in bold for emphasis.

  • Allow access to Lightning applications (lightning)
  • Provide access to custom applications (visualforce)
  • Provide access to your data via the web (web)
  • Full access (full). Use this option only if none of the other options are sufficient.

Not the answer you're looking for? Browse other questions tagged .