At some point in the past (many years ago) we created connected app in one of our SF orgs. Since then we've been actively using consumerKey and consumerSecret provided by that connected app when authenticating users into different SF orgs via oauth2 flow from our custom ios mobile app.

And now we need to update some config params of this connected app. The funny thing is that no one remember which org that connected app was created into (and if that org is still around at all).

Is there any way just by having consumerKey and consumerSecret detect org id where connected app was created? I.e. we can log in to different SF orgs by using this consumerKey/consumerSecret and with appropriate username/password, but we are not interested here in id of user's org, we need to know id of the org which hosts this connected app (to log in there and update some params).

Any help or ideas whould be appreciated - have no clue where even to start from.

  • Does the app come from a managed package? What parameters are you changing? Oct 5 '21 at 16:50
  • @HaroutTatarian No, app is not from managed package - it was created right in the org.
    – wesaw
    Oct 5 '21 at 16:56
  • There's no way to know the hosting/originating org from consumer key (secret doesn't matter) and that is intentional. You have to go org by org - you can hit the org via oAuth and use the org-specific URL (not test.s.c or login.s.c.) or use Metadata API
    – identigral
    Oct 5 '21 at 17:01
  • I’m curious to know how a connected app host on org X is being used to auth into other orgs? Am I misunderstanding this? Oct 5 '21 at 17:24
  • @identigral what if that org has already been decomissioned by SF due to inactivity? and I am not 100% sure that it was a dev org, it could have been a sandbox, which was already refreshed couple times afterwards. We've already went through all known dev orgs, prod orgs and even sandboxes (up to 500 orgs), but still no success to find a match.
    – wesaw
    Oct 5 '21 at 17:36

Log a case with Salesforce. They will be able to tell which app the credentials were generated from.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.