Error
We can't authorize you because of an OAuth error. For more information, contact your Salesforce administrator.
OAUTH_APPROVAL_ERROR_GENERIC : An unexpected error has occured during authentication. Please try again.
Issue
Starting September 2025, Salesforce requires admin approval for Connected Apps.
Salesforce will restrict authentication flows for non-installed applications.
Any user accessing CloudExtend for the first time after September 2025 will require admin approval.
Admins must install the ExtendInsights package and configure user access permissions.
Resolution
To resolve this, Salesforce admin need to perform a one-time installation and configure which users can access the app.
Step 1: Install the ExtendInsights Package
The ExtendInsights package requires a one-time installation per Salesforce org.
⚠️ READ ME:
The installation option here controls visibility of the package components, NOT the Connected App access. You'll configure Connected App access in the next section.
This installation only needs to be performed once per org and does not require individual setup for each user.
Please use the appropriate link below based on your environment:
Production Environment
Click on the installation link below: Install ExtendInsights for Production
Log in with your Salesforce admin credentials.
Review the package contents and click Continue.
Choose your installation option:
Install for Admins Only - Recommended for initial setup.
Install for All Users
Install for Specific Profiles
This restriction is applicable exclusively to custom records or fields introduced within the package; however, our package does not contain any such customizations.
Click Install and wait for the installation to complete.
Sandbox Environment
Use the installation link below: Install ExtendInsights for Sandbox.
Log in with your Salesforce admin credentials.
Review the package contents and click Continue.
Choose your installation option:
Install for Admins Only - Recommended for initial setup.
Install for All Users
Install for Specific Profiles
This restriction is applicable exclusively to custom records or fields introduced within the package; however, our package does not contain any such customizations.
Click Install and wait for the installation to complete.
Step 2: Managing User Access to the Connected App
By default, the ExtendInsights Connected App is accessible to all users in your org. To restrict access to specific users or profiles, please follow these steps:
Modify Connected App Policies
Navigate to Setup → Search for App Manager.
Locate ExtendInsights and click Manage.
Click Edit Policies.
Change Permitted Users from "All users may self-authorize" to "Admin approved users are pre-authorized".
Save your changes.
Grant Access to Specific Profiles
Click Manage Profiles.
Select the profiles that should have access to ExtendInsights.
Save your selections
This configuration allows you to control which users can access ExtendInsights in your Salesforce org.
Step 3: Sandbox Refresh Requirements (Optional)
Admin will need to reinstall the package after a sandbox refresh.
When you refresh your sandbox, all installed packages (including ExtendInsights) are removed.
To restore functionality:
Reinstall the package using the sandbox installation link provided above.
Reconfigure any user access settings as needed.
This ensures ExtendInsights continues to function properly in your refreshed sandbox environment.
Step 4: End-Users to login
After installation and configuration, advise your end-users to log in to the ExtendInsights app. To connect, follow the connect to Salesforce guide here.
Frequently Asked Questions
🔵 Do I need to install the package for each user?
No, the ExtendInsights package only needs to be installed once per org. However, you do need to configure which profiles/users can access the Connected App.
🔵 What's the difference between package installation options and Connected App access?
Package installation options (Install for Admins Only, etc.) control visibility of package components like custom objects and Apex classes.
Connected App access controls which users can authenticate and use ExtendInsights for Salesforce.
The Connected App access must be configured separately after installation.
🔵 Will existing users lose access after September 2025?
Users who are already authenticated and using CloudExtend before September 2025 should continue to have access. However, new users or users who need to re-authenticate will require admin approval.
🔵 Can I restrict access to specific users instead of entire profiles?
Yes! Instead of managing by profiles, you can create Permission Sets:
a. Create a Permission Set with the necessary Connected App access.
b. Assign this Permission Set to specific users.
c. This gives you granular control over individual user access.