Latest Salesforce Updates

Salesforce pulled Flow Tags from the Winter '27 release notes in mid September, saying the feature is not ready yet. No new date has been announced.

Winter '27 turns on Agentforce automatically in every org that has Agentforce access and later removes the toggle from Setup. Salesforce says there is no extra cost and no billing change.

Flow Builder now supports the Salesforce Cosmos theme in Winter '27, bringing the SLDS 2 look to the whole builder. Dark mode is not supported yet.

Apex heap limits rise from 6 MB to 10 MB for synchronous transactions and from 12 MB to 25 MB for asynchronous ones, with a setting to keep the old limit during transition.

A new ApexIntegrationTests capability lets test classes make real HTTP callouts to external services instead of relying only on mock responses.

A new Tooling API REST resource returns detailed metadata about Apex types, built to power IDE code completion and to ground AI agents that work with Apex.

LWC HTML templates can now contain complex JavaScript expressions, generally available with API version 66.0 and enabled per component.

The lwc:external template attribute lets you drop standard web components from outside Salesforce into LWC templates without iframes or static resource workarounds.

A Salesforce-provided plugin gives Claude Code org-specific context through hosted MCP servers so AI-generated Salesforce code is grounded in your actual metadata.

REST API URIs can now use latest in place of a version number, so integrations automatically resolve to the current API version.

A new explicitNamespace property on Database.QueryOptions lets managed package code disambiguate fields when a subscriber org has a custom field with the same name.

Compile All Classes gets a selective option: recompile only the Apex classes that are currently invalid instead of the entire codebase.

ApexGuru now detects duplicate and near-duplicate Apex code in production and Full Copy sandboxes, with results surfaced inside IDEs including VS Code and Cursor.

Starting in Winter '27, authenticating through the SOAP API login() call requires the Use Any API permission, matching the rule already applied elsewhere.

Cards, docked containers, menus, panels, date pickers, popovers, the utility bar, record headers, page headers and modals now reflow correctly at 200% or higher magnification.

Comparing two flow versions now lets you click through each change and inspect its details; the old Change Details column is gone.

Flow Builder stores End element positions in the flow metadata XML, so external tools and version control preserve exactly where you placed them.

The new Goals Agent in Marketing Cloud Next takes a goal, a budget, and an audience, then runs and optimizes the campaign on its own within your guardrails.

Describe a campaign objective in natural language and the Content Agent generates on-brand email and SMS content from your brand guidelines, briefs, and assets.

A favorite Account Engagement feature returns: automate notifications, autoresponder emails, and lead assignment without building a dedicated flow.

The refreshed campaign workspace in Marketing Cloud Next consolidates planning, execution, and performance metrics so you stop hopping between screens.

Salesforce Customer Support can now retroactively update the destination URL of a tracked link after an email has been sent in Marketing Cloud Next.

Marketing Cloud Next now monitors email performance across mailbox providers, assigns a 0-100 health score, and alerts you when critical thresholds are hit.

Templates can now enforce required phrases and character limits, recurring sends get scheduled flow templates, and Agentforce recommends the right template.

Marketing Cloud Next extends Handlebars and AMPscript support beyond email to SMS, WhatsApp, RCS, in-app, and push, so one personalization logic serves every channel.

Landing pages in Marketing Cloud Next now support Handlebars and AMPscript personalization plus fully custom HTML forms.

A guided experience through Salesforce Go walks you through integrating Marketing Cloud Engagement with Marketing Cloud Next via Data 360.

You can finally configure the popup window size when a screen flow launches from a quick action.

Screen flow visibility rules can now evaluate against components currently visible on the screen, enabling truly dynamic single-screen experiences.

Flow Builder now warns you at design time when a Create Records element misses a required field assignment or a value exceeds the field's length limit.

A new run setting executes autolaunched and screen flows in the running user's context, respecting their permissions regardless of how the flow is invoked.

Flow Builder can group related elements with a label and description, and collapse the group to keep big flows readable without resorting to subflows.

New keyboard shortcuts let you traverse elements and branches on the Flow Builder canvas and copy and paste without touching the mouse.

Flows can now react to Order Return, Shipment, and Status Change events in about 3 seconds, down from the previous 7 to 10 minutes.

When cloning an audience flow in Marketing Cloud, you now choose whether to copy or link the messages, segments, and trigger definitions it references.

A new beta feature lets you preview a record in a sidebar directly from a Lightning report, without opening a new tab or leaving the report page.

Lightning report and dashboard components can now be embedded in Lightning Web Runtime (LWR) Experience Cloud sites, a capability previously limited to Aura sites.

A new Common Rows Only option makes joined reports display only the records that appear in every block, such as accounts that have both cases and open opportunities.

The native Follow button can now be placed on the Dynamic Highlights Panel, letting users subscribe to record updates from modern record pages.

A new sharing setting preserves manual shares when record ownership changes, instead of silently deleting them during transfers.

Access to the Setup Audit Trail is now controlled by a dedicated View Setup Audit Trail permission, decoupled from the broader View Setup permission.

A new User Interface setting removes the page layout dependency for list view inline editing, so users can edit any field they have edit access to.

Field history tracking on the User object graduates from beta to generally available, with up to 20 trackable fields.

A new FORMULA() function in SOQL lets you run calculations directly in a WHERE clause, comparing fields without creating helper formula fields.

The Setup agent learns three new tricks: managing Dynamic Actions on mobile via natural language, creating related list enrichments conversationally, and customizable Org Health metrics.

Case milestones can finally be deleted, via Data Loader or Apex, resolving an IdeaExchange request that dates back to 2017.

Files attached when a case was created now display as visual tiles directly under the Case Description field, sparing agents a trip to the Files related list.

Case merge settings scattered around Setup are consolidated into one page covering Case Merge, Enhanced Case Merge, and Case Merge for Omni-Channel.

Agents can polish, expand, or summarize case comment drafts in the comment editor, with a refine-with-instructions option driven by an admin-configured prompt template.

Knowledge gets three upgrades: draft articles from any record with custom prompt templates, a similarity score that flags near-duplicate articles, and reusable read-only Knowledge Blocks.

Agentforce Article Recommendations can now detect up to three distinct intents in a case and run a targeted article search for each, merging results into one ranked list.

Wrap-up summaries now generate automatically when a messaging session or voice call ends, with an option to save them without any agent review step.

When an agent loses connectivity mid-conversation and the chat is rerouted, the customer now receives a customizable auto-response explaining what is happening.

Einstein Conversation Insights users get AI-generated next steps on the event record in the mobile app once a meeting transcript is available.

Reps can record a voice note right after a meeting in the Salesforce mobile app; transcription happens on-device and the text flows into Einstein Conversation Insights.

Deal risks, methodology scores, contact insights, agent activity, and activity heatmaps now appear directly in the Pipeline Forecasting view.

Reps can edit a contact's opportunity role, department, and notes from the Relationship Map side panel, and remove or restore connections without leaving the map.

Define up to eight coaching competencies and rate rep performance from the Coaching tab on video call records, manually or via an AI coaching agent.

Agentforce Lead Nurturing is renamed Agentforce Engagement, gains an Agent Script based builder in Agentforce Studio, and adds flexible human-approval options for outbound emails.

The prospecting agent can now run on a schedule, prioritize recently engaged contacts, research accounts beyond dedicated prospecting users, and expose its per-session reasoning.

Winter '27 lets you collapse the left navigation sidebar in Setup and Object Manager. More screen space for wide configuration pages, with navigation one click away.

The customizable home page for the Salesforce mobile app gets its own dedicated toggle in Winter '27. Admins can now control the mobile home experience independently.

Flow Builder gains a filter that highlights unused elements and components missing descriptions in Winter '27. A built-in way to spot technical debt inside a flow.

Screen flows can now run as mass actions on list views and related lists, receiving the selected record IDs in a collection variable.

Two new simplified Decision elements branch your flow by a field value or by a date without building full Decision logic.

Flow Builder gets a modern look in Winter '27: compact element cards, a grouped right-side element menu, canvas display preferences, and a color picker for Display Text.

A new edit history button shows every change made in a flow version, who made it, and lets you restore or save changes as a new version.

Flow Builder gains a dedicated Test mode in beta: reusable test scenarios, mock outputs, assertions, and code coverage for flows.

A new Time screen component captures time input in screen flows, with configurable ranges, intervals, and custom error messages.

Winter '27 enforces several release updates, including profile filtering, authorized email domains, accessibility styling, and the retirement of the OAuth 2.0 Username-Password flow.

A new User Interface setting lets users inline edit list views that contain multiple record types, ending a long-standing limitation.

Add up to two row-level formulas per report instead of one. Answer multiple business questions in a single report without creating extra formula fields.

Approvers can now approve, reject, and comment on Salesforce approval requests without leaving Slack, while the Approval Trace component keeps the full audit trail on the record.

Define your brand colors once in Themes and Branding, then apply them to any report chart or dashboard with the new Brand palette option.

Slack's new Today page greets users with an AI-curated view of upcoming meetings, action items, and team highlights, including meeting prep and to-do surfacing.

Field sellers can record in-person meetings with the Salesforce mobile app and let Einstein Conversation Insights transcribe them and generate summaries and action items.

The Enhanced Profile UI now shows which related permissions will change when you update a permission, giving admins a chance to review cascading changes before saving.

Expose color, spacing, and dimension settings of your custom LWC flow screen components directly in Flow Builder with the new stylingHook tags.

Data Mask and Seed (v3.0) ships as a built-in core app with a simpler UI, so you can mask production data and seed sandboxes with realistic test data without installing a managed package.

Context Service actions can now be called directly from Flow using Apex-defined data types, letting admins pass context in and out through Flow variables without custom code.

Agentforce Vibes 2.0 makes VS Code a provider-agnostic, intent-driven IDE where you orchestrate multi-agent swarms across models like Claude and GPT-5, backed by 30+ Skills and 60+ MCPs.

Salesforce Multi-Framework lets developers build AI agents and apps with industry-standard frameworks like React inside one secure, governed Salesforce environment.

The Headless Experience Layer separates business logic, data, and permissions from the UI, so you define intent once and it renders natively everywhere your users work.

Sales goals can now be defined as either a currency amount or a quantity, so you can plan targets like revenue or units sold without workarounds.

The Agentforce sales agent can qualify Contacts and Person Accounts against your ICP, not just Leads, widening the pool of prospects it can work autonomously.

You can now restrict which fields the Sales Management agent is allowed to update on its own by editing the Process Field Update Suggestions flow.

Lightning Sync is being retired and Office 365/Exchange customers need to move to Einstein Activity Capture, with an August 2026 cutoff to migrate.

A new Grant Access Using Hierarchies setting on queues lets admins decide how far up the role hierarchy queue record visibility extends.

Omni-Channel can now prioritize work by the original request date instead of when the record entered the queue, so aging cases keep their place in line.

Omni-Channel can now route work items at a specified future date and time instead of immediately, useful for follow-ups and time-zone-aware handling.

Messaging sessions can now end automatically after a configurable period of customer inactivity, between 5 and 30 minutes, freeing agent capacity.

Cases created from Experience Cloud sites can now run through your standard case assignment rules automatically, no custom automation required.

The Last Used Date and Times Used fields on email templates now update when a template is sent from the Lightning email composer on a case.

Marketing Cloud Next now supports AMPscript alongside Handlebars, letting marketers retrieve and format CRM data in email content with familiar syntax and inline validation.

Marketing Cloud Next signup forms can now trigger flows like completion actions, and lists let you upload CSVs or add members manually without building Data 360 segments.

Marketing Cloud Next adds prebuilt triggers for common e-commerce behaviors like abandoned carts, price drops, and back-in-stock events, with dynamic offers embedded in emails.

A unified Engagement History view on opportunity records surfaces emails, form submissions, and webpage activity tied to the related contacts in one place.

Flow data tables can now show the related record name instead of the raw record ID for lookup fields-and optionally link directly to that record with a single click.

A new Radio Button Group screen component displays selection options as large horizontal boxes instead of a dropdown, giving users a cleaner and more visible single-select experience.

Fault paths can now be collapsed on the Flow canvas, keeping complex flows readable-extending the same collapse functionality introduced for Decisions and Loops in Spring '26.

You can now set a maximum batch size for Schedule-Triggered Flows, giving you finer control over performance and reducing the risk of hitting Apex governor limits on high-volume runs.

The Automation App's Flow list views now show an error rate percentage per flow element, letting you identify which elements are failing most often without digging into debug logs.

Flow Builder's error and warning panel gets a visual overhaul in Summer '26-issues are now organized into distinct cards, making it easier to scan, prioritize, and navigate multiple problems at once.

Organizations running SLDS 2 themes can now enable Dark Mode through a staged rollout, extending the dark UI experience to the updated Lightning Design System.

A new toggle in Setup's User Interface settings lets users with the right permission edit shared list views directly-no more routing every list view change through an admin.

Object Manager now includes a Field Access tab showing exactly which profiles and permission sets grant access to each field-centralizing permission analysis without switching between multiple reports.

A new Web Console arrives alongside Summer '26, providing an in-browser code editing and execution environment directly within Salesforce-no external IDE required for quick code tasks.

Two Release Updates improve the Salesforce interface for users at 200%+ zoom: page headers and modals now scroll correctly, and date pickers, popovers, and record headers display properly at high magnification.

The Salesforce-managed X (formerly Twitter) authentication provider is being retired in Summer '26. Orgs using it for login or integration must migrate to their own X Developer app before enforcement or authentication will break.

Apex's Blob.toPdf() method is updated to use the Visualforce PDF rendering service in Summer '26, improving font support and multi-character handling-but potentially changing existing PDF outputs.

Apex batch action results are now returned in the same order as the original request-a behavior change originally scheduled for Spring '25, now enforced in Summer '26.

The migration to Salesforce's multiple-configuration SAML framework-originally scheduled for Summer '24-is now enforced in Summer '26. Orgs on legacy single-configuration SAML SSO must migrate before enforcement.

API integrations still using hardcoded Salesforce instance URLs (e.g., na1.salesforce.com) must switch to My Domain URLs before Summer '26 enforcement-or API calls will break.

Flow Decision elements now support 20 new date-specific operators including Is Today, Is Tomorrow, Is Anniversary of Today, and Last Number of Days-no formula resources needed.

The Send Email action in flows now stores email templates by name instead of ID, so deployments between sandbox and production no longer break template references.

A new Create Agent element lets you add AI-powered Agentforce agents directly from the Flow Builder canvas, with custom instructions and actions configured inline.

Describe screen flow changes in plain language and Agentforce applies them automatically-add, remove, or modify screen and action elements without manual configuration.

New Apex code using API version 67 runs database operations in user mode by default and enforces sharing rules-making secure-by-default the new standard.

Apex now supports multiline string literals using triple single-quotes and dynamic string population via String.template() with variable maps-no more messy concatenation.

Preview individual Lightning Web Components directly in your browser or VS Code without full page reloads-now generally available with the Live Preview extension.

Lightning Web Components now support a central state management system, letting multiple components share and synchronize data through a shared store without complex event chains.

A new opt-in Release Manager lets you preview upcoming Salesforce features in sandboxes via three channels: Standard (stable), Accelerated (production-ready), and Dev (in development).

Agentforce can now autonomously handle routine SLA milestone communications-drafting and sending initial responses and status updates based on case progression so agents focus on resolution.

Pipeline Inspection now includes an Activity column with a visual heatmap showing inbound and outbound engagement across a rolling 30-day window-at a glance, per opportunity.

Marketing Cloud Next adds Rich Communication Services (RCS) as a new messaging channel, enabling branded, interactive experiences with rich cards, images, carousels, and suggested replies.

Flow Orchestration is now included as a standard feature in applicable Salesforce editions with no usage-based caps-orchestration runs are no longer gated by a separate entitlement.

Salesforce Files now automatically scans uploaded files for malware and notifies admins when a malicious file is detected-now generally available.

Agentforce can now diagnose both design-time issues in saved flows and runtime failures in active flows, then suggest specific fixes-available in Beta from Flow Builder.

Monitor flow performance with visual dashboards showing execution time, element usage, and failure rates. Identify bottlenecks and optimize flows.

Compare two versions of a flow side-by-side to see what changed. Easily review modifications before activating new versions.

See performance metrics directly on the flow canvas. Identify slow elements at a glance with visual indicators.

Create PDF documents directly from Apex code without Visualforce. New PageReference.getContentAsPDF() method simplifies document generation.

ISV partners can now debug subscriber org issues without requesting login access. Enhanced tooling for managed package troubleshooting.

Security Health Check gets new baseline adjustments and improved recommendations. Better visibility into org security posture.

Modernized sandbox copy and refresh interface. Cleaner layout, better progress tracking, and improved configuration options.

Share report and dashboard folders with specific users by username. More granular sharing control beyond roles and groups.

Dashboard report tables now remember column widths, sorting, and filter settings. Previously beta, now generally available.

Describe a business process in natural language and Einstein generates a draft flow with correct elements, logic, and data operations. Now GA!

Use AI assistance directly within Flow Builder without admin configuration. Iterate on flows through conversation.

Automate Marketing Cloud Engagement emails directly from Flow Builder. No code required.

Visually build and configure complex AI agents with a drag-and-drop canvas interface.

Create AI agents for internal tasks like HR inquiries, IT support, and onboarding assistance.

Aura and LWR site editors are now generally available for Experience Cloud site building.

Improved file preview consistency across browsers and Experience Cloud sites.

Upload and handle files up to 200 MB with hybrid file handling.

Expose Apex REST and AuraEnabled methods as Agentforce agent actions without extra wrappers.

Speed up queries with Data 360 SQL for compact form queries and custom SQL in CRM Analytics.

Create manual and automatic promotions with discounts on products and categories. Define eligibility rules and sales channels.

Prices recalculate immediately as users edit quotes. Only changed lines are recalculated for faster complex quotes.

Define formulas to calculate discounts and totals through up to 5 levels of quote hierarchy nesting.

Use DRO for any transaction type including dunning and customer service workflows.

Display usage, overages, and prepaid amounts on invoices. Convert usage into tokens and currency.

Increased search limits for filterable attributes. Select more than 20 products simultaneously.

AI-powered assistant helps customers with invoice breakdowns and employees with payment plan details.

Decouple billing frequency from selling models. Bill monthly products quarterly or annually.

Internal users can log in using Touch ID, Face ID, or security keys. This phishing-resistant method also satisfies MFA requirements.

Track and audit changes made to user records. View modification history on user access summary page after enabling in User Management Settings.

Data Detect, Field Audit Trail, Platform Encryption, and Event Monitoring now consolidated into a single Shield app interface.

Critical real-time security events are now automatically stored in Event Monitoring, reducing manual configuration burden.

Starting 2026, new certificates have shorter maximum lifespans. Plan for more frequent rotations and avoid certificate pinning.

Enhanced cross-site scripting protection for Visualforce pages using apex:inputField. Test pages in sandbox before production deployment.

Sales reps can research leads, plan strategies, and update Salesforce records directly within ChatGPT using real-time CRM data.

Model Context Protocol support for AI agent development. Helps convert JavaScript LWCs to TypeScript and enables secure data connections.

Web-based IDE with AI-powered Vibe Codey assistant. Generate code from conversational instructions, debug, test, and deploy from browser.

Major update to Lightning Design System with improved UI consistency and performance optimizations across the platform.

Open standard for AI systems to securely connect with data, apps, and workflows. Agentforce agents can access Sales, Service, Marketing clouds.

Near real-time monitoring of additional event types via Streaming API. Enhanced security, performance, and adoption insights.

More intuitive permission configuration and auditing. Reduces errors and improves compliance with streamlined management interface.

You can now style screen flow elements with custom colors, borders, and button states. Set background, text, border colors, and even change button hover effects to match your brand.

New Kanban Board component lets you display records as cards in columns representing workflow stages. Group cards, show totals, and display up to 5 fields per card.

New Message component displays info, success, warning, and error messages in screen flows. Message type determines color and icon automatically.

Preview files directly in screen flows without downloading. Just pass the ContentDocumentId and users can review documents inline.

Collapse Decision, Loop, Wait, and Path Experiment elements in Flow Builder. Your layout is saved locally so you can focus on key parts.

Navigate the flow canvas using mouse wheel, trackpad, arrow keys, or scroll bar. No more dragging or using extensions.

Debug inputs like record values and variables are now saved in your browser. Rerun tests faster without re-entering data each time.

Enable flow logging to capture execution metrics, completion time, status, and errors. Data is stored in Data Cloud for analysis.

See which automations use a specific flow. The new Usage tab shows all dependencies including screen actions and subflow references.

Build record-triggered flows on ContentDocument and ContentVersion objects. React to file uploads and updates for any object.

New URL format opens screen flows in Lightning Experience with better performance. Use /lightning/flow/FlowName and pass variables via query string.

Users can now sort columns and edit text fields directly in data tables. Plus, text and URL columns can be rendered as clickable hyperlinks.

Add a Request Approval component to record pages. Users can submit for approval, select first approver, and add comments without custom buttons.

New Case Timeline shows key events in chronological order. Agents can quickly understand case history without digging through related lists.

Use Quick Text snippets in case comments including dynamic merge fields. Insert predefined responses with customer data filled in automatically.

Easily find files attached when a case was first created. No more digging through the full attachments list to find the original issue documents.

Define rules to automatically pause milestones when specific conditions are met. SLA timer stops when a case is waiting on customer response.

View milestones across parent, child, and related records. Teams working on linked cases can now see SLA timelines in real-time.

Omni-Channel Supervisor is now Command Center for Service. Same features, expanded visibility tools for support managers.

Route call transfers through Omni-Channel Flow for advanced logic. Use skills, case context, or custom conditions to find the right agent.

VoiceCall records now automatically link to source records when using Click-to-Dial, including custom objects. No more manual linking.

Partial survey responses can be saved for up to 999 days. Guest user responses are also saved. Plus, apply custom CSS for branded surveys.

Knowledge Maps are now generally available. Organize articles into clear hierarchies that are easier for agents and customers to navigate.

Central hub for sales reps to see performance, action items, and how Agentforce helps across meetings, opportunities, leads, and more.

AI-powered Setup assistant helps create objects, fields, permission sets, and troubleshoot errors. Chat-based admin experience in beta.

Account Plan Objectives can now include records from the entire account hierarchy, not just the directly linked account.

Pull Email Insights into custom report types for Accounts, Leads, Opportunities, and Contacts. Better visibility into customer communications.

ECI data is now stored on the Salesforce platform. Easier reporting, Flow automations, and API access for call analytics.

Add custom disclaimer text to exported reports. Appears after the standard Salesforce disclaimer for compliance requirements.

Embed custom Lightning Web Components in Salesforce Dashboards. Display complex visualizations alongside standard widgets.

Define agent behavior with Agent Script, a YAML-like language. Provide structured instructions for predictable AI agent responses.

Query up to 50 million records with the new Cursor class. Cache results server-side and paginate with fine control.

New test level runs only relevant tests during deployment. Salesforce determines which tests matter based on code changes.

Create reusable SOQL queries and expose them via REST API. Validate once, use anywhere including Agentforce actions.

Create and update records from LWC using GraphQL mutations. Reduce Apex dependencies with client-side data manipulation.

Import type definitions for base components using @salesforce/lightning-types npm package. Better TypeScript support for LWC.

LWC templates now support complex JavaScript expressions, not just properties and getters. More flexibility in template binding.

Add component and property descriptions to LWC metadata. Agentforce for Setup can recommend your components during page configuration.

Outbound messages no longer send session IDs. A security improvement that affects legacy integrations relying on this feature.

Draft and preview campaign briefs in an Agentforce conversation. Two-way email and SMS enable responsive customer conversations.

Partition data and assets into up to 50 business units. Each unit has isolated campaigns, audiences, and reporting with Data Space integration.

New extensions, reusable content blocks, and preconfigured templates speed up content creation. Plus, Handlebars scripting for pro-code options.

Reach customers via mobile app, SMS, email, and WhatsApp. Interactive templates, UTM tracking, and two-way conversations supported.

New dashboards for mobile app and push metrics. Conversion analytics with first/last touch attribution. Low-performing campaign detection.

Enable Blackhole feature to discard all outbound emails in sandbox. Test campaign logic safely without reaching real customers.

Align email consent between Account Engagement prospects and Marketing Cloud Next records. Unified consent tracking across platforms.

Add SMS and WhatsApp steps to Engagement Studio programs. Trigger messages through Flow Builder using Send to Flows action.

Uploaded files are scanned for malware. Malicious uploads are blocked. API uploads are scanned async and flagged in a Malicious Files list.

Renamed from Personalized Trust. Subscribe to notifications, view 1 year of incident history, and see org location and My Domain info.

New permission lets users delete files they can view without needing Modify All Data. Granular file governance without broad access.

Track up to 200 fields per object with Field Audit Trail. New Field History Explorer lets you download metadata and revert changes.

New Error Console centralizes page-level errors in Lightning Experience. Identify issues before users report them.

New Connected Apps creation is disabled by default. Migrate to External Client Apps for better security and packaging.