We are having a rails app and the authentication is based on Salesforce OAuth. Salesforce OAuth is used as our app requires salesforce objects.
When we create a connected app in salesforce and use it for OAuth, then typically all salesforce users can use our app. But we want to restrict to certain users.
I came across this Stackoverflow entry which is exactly the same.
Apart from the answer provided in that Question, do we need to do any additional logic in our rails app to restrict or just setting the OAuth policies to "Admin approved users are pre-authorized" should do fine?
And how a admin user can authorize a user to use this connected app in salesforce?