topic Re: Issue when creating Salesforce Connector in Administration & Architecture

Issue when creating Salesforce Connector

PatHua — Tue, 09 Dec 2025 15:03:27 GMT

Hi
I'm trying to create a Salesforce Connector in Lakeflow.
In the "salesforce authentication step", I'm entering my Salesforce Username and Password and then I get stucked with the following error message : "OAUTH_APPROVAL_ERROR_GENERIC"

My Salesforce Administrator is unable to help me...
Can anyone help me ?

For your information, the Salesforce Adm has defined an Principal Service App.
And I'm able to run an API Rest in a notebook script. I just want to do the same thing but in a Lakeflow pipeline.

Thanks in advance for your feedback

Re: Issue when creating Salesforce Connector

szymon_dybczak — Tue, 09 Dec 2025 16:44:31 GMT

Hi @PatHua ,

Make sure that your admin performed all prerequisites. Salesforce applies usage restrictions to connected apps. The permissions in the following table are required for a successful first-time authentication. If you lack these permissions, Salesforce blocks the connection and requires an admin to install the Databricks connected app.

ConditionRequired permission

API Access Control is enabled.	Customize Application and either Modify All Data or Manage Connected Apps
API Access Control is not enabled.	Approve Uninstalled Connected Apps

You can find more information about this at salesforce site:

https://help.salesforce.com/s/articleView?id=005132365&type=1

Once you performed above steps, here's a step by step instruction how to create connection to salesforce:

https://docs.databricks.com/aws/en/connect/managed-ingestion#create-a-connection

Also, pay attention to following step.

Re: Issue when creating Salesforce Connector

Hubert-Dudek — Tue, 09 Dec 2025 20:42:39 GMT

Please check also it:
https://docs.databricks.com/aws/en/ingestion/lakeflow-connect/salesforce-faq

there is written:
"In September 2025, Salesforce began restricting the use of uninstalled connected apps. When you create or reauthorize a connection, a Salesforce admin must now install the Databricks connected app in your Salesforce instance or grant you heightened permissions. For more information, see Prepare for Connected App Usage Restrictions Change in the Salesforce documentation."

so can be smth like:

In Salesforce: Setup → Connected Apps OAuth Usage

Find Databricks connected app and Install / Allow it. Databricks Documentation
OR grant you the right permission:

If API Access Control is OFF: give your user “Approve Uninstalled Connected Apps” Databricks Documentation

If API Access Control is ON: give Customize Application + (Manage Connected Apps or Modify All Data)

Re: Issue when creating Salesforce Connector

PatHua — Wed, 10 Dec 2025 13:47:16 GMT

Hi guys
Thank you so much for these pre-requisites to check !
Whatever he likes it or not, my salesforce adm will some tasks to do 😉

Re: Issue when creating Salesforce Connector

PatHua — Tue, 16 Dec 2025 10:14:41 GMT

Hi guys
Sorry to bother you again...I know, the salesforce adm in my company is quite "narrow-minded" regarding security issues, and I don't know enough about security protocol to answer him.
Do you know why we need a "Connected App" usage while we are defining an "External App" one ?
In a word, what OAUTH system is finally used ?

Thank you so much
Patrick