Issue when creating Salesforce Connector

[PatHua]

Hi
I'm  trying to create a Salesforce Connector in Lakeflow.
In the "salesforce authentication step", I'm entering my Salesforce Username and Password and then I get stucked with the following error message : "OAUTH_APPROVAL_ERROR_GENERIC"

My Salesforce Administrator is unable to help me...
Can anyone help me ?

For your information, the Salesforce Adm has defined an Principal Service App.
And I'm able to run an API Rest in a notebook script. I just want to do the same thing but in a Lakeflow pipeline.

Thanks in advance for your feedback

[szymon_dybczak]

Hi @PatHua ,

Make sure that your admin performed all prerequisites. Salesforce applies usage restrictions to connected apps. The permissions in the following table are required for a successful first-time authentication. If you lack these permissions, Salesforce blocks the connection and requires an admin to install the Databricks connected app.

ConditionRequired permission

API Access Control is enabled.	Customize Application and either Modify All Data or Manage Connected Apps
API Access Control is not enabled.	Approve Uninstalled Connected Apps

You can find more information about this at salesforce site:

https://help.salesforce.com/s/articleView?id=005132365&type=1

Once you performed above steps, here's a step by step instruction how to create connection to salesforce:

https://docs.databricks.com/aws/en/connect/managed-ingestion#create-a-connection

Also, pay attention to following step. 

[Hubert-Dudek]

Please check also it:
https://docs.databricks.com/aws/en/ingestion/lakeflow-connect/salesforce-faq

there is written:
"In September 2025, Salesforce began restricting the use of uninstalled connected apps. When you create or reauthorize a connection, a Salesforce admin must now install the Databricks connected app in your Salesforce instance or grant you heightened permissions. For more information, see Prepare for Connected App Usage Restrictions Change in the Salesforce documentation."

so can be smth like:


In Salesforce: Setup → Connected Apps OAuth Usage

Find Databricks connected app and Install / Allow it. Databricks Documentation
OR grant you the right permission:

If API Access Control is OFF: give your user “Approve Uninstalled Connected Apps” Databricks Documentation

If API Access Control is ON: give Customize Application + (Manage Connected Apps or Modify All Data)