sf-connected-apps: Salesforce Connected Apps & External Client Apps

Use this skill when the user needs OAuth app configuration in Salesforce: Connected Apps, External Client Apps (ECAs), JWT bearer setup, PKCE decisions, scope design, or migration from older Connected App patterns to newer ECA patterns.

When This Skill Owns the Task

Use sf-connected-apps when the work involves:

• .connectedApp-meta.xml or .eca-meta.xml files
• OAuth flow selection and callback / scope setup
• JWT bearer auth, device flow, client credentials, or auth-code decisions
• Connected App vs External Client App architecture choices
• consumer-key / secret / certificate handling strategy

Delegate elsewhere when the user is:

• configuring Named Credentials or runtime callouts → sf-integration
• analyzing access / permission policy assignments → sf-permissions
• writing Apex token-handling code → sf-apex
• deploying metadata to orgs → sf-deploy