Issue when creating Salesforce Connector
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-09-2025 07:03 AM
Hi
I'm trying to create a Salesforce Connector in Lakeflow.
In the "salesforce authentication step", I'm entering my Salesforce Username and Password and then I get stucked with the following error message : "OAUTH_APPROVAL_ERROR_GENERIC"
My Salesforce Administrator is unable to help me...
Can anyone help me ?
For your information, the Salesforce Adm has defined an Principal Service App.
And I'm able to run an API Rest in a notebook script. I just want to do the same thing but in a Lakeflow pipeline.
Thanks in advance for your feedback
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-09-2025 08:43 AM - edited 12-09-2025 08:44 AM
Hi @PatHua ,
Make sure that your admin performed all prerequisites. Salesforce applies usage restrictions to connected apps. The permissions in the following table are required for a successful first-time authentication. If you lack these permissions, Salesforce blocks the connection and requires an admin to install the Databricks connected app.
ConditionRequired permission
API Access Control is enabled. | Customize Application and either Modify All Data or Manage Connected Apps |
API Access Control is not enabled. | Approve Uninstalled Connected Apps |
You can find more information about this at salesforce site:
https://help.salesforce.com/s/articleView?id=005132365&type=1
Once you performed above steps, here's a step by step instruction how to create connection to salesforce:
https://docs.databricks.com/aws/en/connect/managed-ingestion#create-a-connection
Also, pay attention to following step.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-09-2025 12:42 PM
Please check also it:
https://docs.databricks.com/aws/en/ingestion/lakeflow-connect/salesforce-faq
there is written:
"In September 2025, Salesforce began restricting the use of uninstalled connected apps. When you create or reauthorize a connection, a Salesforce admin must now install the Databricks connected app in your Salesforce instance or grant you heightened permissions. For more information, see Prepare for Connected App Usage Restrictions Change in the Salesforce documentation."
so can be smth like:
In Salesforce: Setup → Connected Apps OAuth Usage
Find Databricks connected app and Install / Allow it. Databricks Documentation
OR grant you the right permission:
If API Access Control is OFF: give your user “Approve Uninstalled Connected Apps” Databricks Documentation
If API Access Control is ON: give Customize Application + (Manage Connected Apps or Modify All Data)
My blog: https://databrickster.medium.com/
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-10-2025 05:47 AM
Hi guys
Thank you so much for these pre-requisites to check !
Whatever he likes it or not, my salesforce adm will some tasks to do 😉
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-16-2025 02:14 AM
Hi guys
Sorry to bother you again...I know, the salesforce adm in my company is quite "narrow-minded" regarding security issues, and I don't know enough about security protocol to answer him.
Do you know why we need a "Connected App" usage while we are defining an "External App" one ?
In a word, what OAUTH system is finally used ?
Thank you so much
Patrick