I've built a Canvas App using Signed Requests and therefore I need the Permitted Users option set to "Admin approved" (otherwise Salesforce doesn't send any Signed Request). I've set this option to "Admin approved" in my App and everything works fine when I use the Canvas App Previewer.

However, when I package the App and install it in another developer environment, the option Permitted Users is set to "All Users" :( Therefore I have to change the value of this option to be able to receive the Signed Request.

Is there any way to make things simpler for the admin that will install my App such as setting the default value of the Permitted Users value to "Admin approved" ?

Thanks in advance for all your answers!



2 Answers 2


As far as I'm aware, there's no way to specify this in your package at this time. You will need to include that in your documentation, and possibly also program your app to notify users that they need to contact an admin when this situation is detected.


It is now possible to do this via a post-install script and the metadata API:

How can I programmatically set a connected app to have permitted users be "Admin approved users are pre-authorized"?

  • Well, that is not a post-install script and this won't work for packaged connected app in subscriber org
    – Patlatus
    Sep 21, 2022 at 16:29

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .