How workbench is able to log into Salesforce with OAuth

I have been trying to fiddle with OAuth user-agent flow and understand that you need to have a connected app defined in Salesforce. You would then use the client secret from that in your app to be able to start the OAuth dance.

How come workbench.developerforce.com is able to do this without us creating any connected app in any Salesforce org? Does this web app have some special privileges with Salesforce that it gets the client secret from any Salesforce org?

Answer

Connected apps only need to be defined one total, not once per org. You can use any org, like a free developer org, to set up the oAuth/connected app info, and then use that with as many consumer orgs as you want.

Attribution
Source : Link , Question Author : prashanthkr , Answer Author : ca_peterson

Leave a Comment