Create an External Client App

Create an external client app for Amazon Web Services (AWS) to connect with the Loyalty Management Receipt Scanner Kit unlocked package. This external client app enables secure OAuth authentication so that the Expense Analysis API runs after the receipts are uploaded and creates transaction journals for the submitted receipts.

Required Editions
Available in: all editions that have Loyalty Management enabled

User Permissions Needed
To create external client apps:	Customize Application. AND. Modify All Data OR Manage External Client Apps.

From Setup, in the Quick Find box, enter certificate Certificate and Key Management
Under Certificates, click Create Self-Signed Certificate
Enter a label and unique name for the certificate.
Save the new certificate.
Click Download Certificate
Create an External Client App
Under OAuth Settings, enable Enable OAuth
In the Callback URL, enter https://login.salesforce.com/services/oauth2/token/callback
Select Use digital signatures
Click Choose file
In the Selected OAuth Scopes section, move the Manage user data via APIs (api) Perform requests at any time (refresh_token, offline_access)
Save the external client app.
From Setup, in the Quick Find box, enter External Client Apps Manager External Client Apps Manager
From the actions list for the external client app, select Edit Policies
Under OAuth Policies, from the Permitted Users dropdown, select Admin approved users are Pre-authorized
From Timeout Value, select 24 hours
Save your changes. After you turn on this option, manage access using profiles and permission sets
In the Quick Find box, enter custom Custom Settings
For the Manage Authenticate Setting whose namespace prefix is ReceiptScanner, select Manage New
Under Manage Authenticate Setting Information, enter these values.
- Name: Enter Manage Authentication
- Audience: Based on your environment, enter one of the values: https://test.salesforce.com/ or https://login.salesforce.com/
- Certificate: Enter the certificate name, without the extension
- Consumer Key: Enter the consumer key. To get the consumer key, from the App Manager setup, for the Manage Authentication app, select View. Under API (Enable OAuth Settings), click Manage Consumer Details, enter your credentials, and then copy the consumer key.
- Subscriber: Enter the username of the Salesforce admin.
- Token Endpoint: Based on your environment, enter one of the values: https://test.salesforce.com/services/oauth2/token or https://login.salesforce.com/services/oauth2/token
Save your changes.