Guides
Salesforce authentication deadline guides
Plain-English, one-deadline-at-a-time explainers: what changes, who is affected, how to check your org and what to do. Each one cites the Salesforce Help article it summarizes.
4 Nov 2026 · Refresh tokens
Salesforce refresh tokens expire after 30 days idle: what changes from 4 November 2026
From 4 Nov 2026 (rolling), Salesforce production orgs expire OAuth refresh tokens unused for 30 days. Who's affected, how to check and what to do.
30 Nov 2026 · Device flow
Salesforce OAuth device flow restrictions (30 November 2026): is your app compliant?
From 30 Nov 2026 the Salesforce OAuth device flow works only in local external client apps with a localhost callback and no other flows. How to check.
1 Dec 2026 · SOAP login()
SOAP API
login()and 'Use Any API Auth': what breaks on 1 December 2026 and how to fix INSUFFICIENT_ACCESSFrom 1 Dec 2026 Salesforce SOAP login() only works for users with the Use Any API Auth permission. How to find affected users and fix INSUFFICIENT_ACCESS.