How to Connect Sweep Through Your Own External Client App

By default, Sweep connects to Salesforce using our own Connected App. If your organization prefers tighter control over the connection, such as owning the credentials, managing your own security settings, or auditing the app independently, you can connect Sweep using your own External Client App (ECA) instead.

This guide walks through creating that app in Salesforce and connecting it in Sweep.

Before you start

Create an External Client App (ECA) in the Salesforce org you plan to connect to Sweep.

Step 1: Create the app in Salesforce

In Salesforce:

Setup → External Client Apps → New External Client App
Give it a clear name, for example Sweep Integration
Enable OAuth Settings

Step 2: Configure OAuth to match Sweep

These four settings are required for the connection to work. Sweep's OAuth flow depends on them directly.

Setting	Required value	Why
Callback URL	https://app.sweep.io/salesforce-oauth2-redirect	Sweep's OAuth flow only redirects here
OAuth Scopes	`api` and `refresh_token`	This is what Sweep requests when connecting your org
Consumer Key and Secret	Both required	Sweep sends the secret on every code exchange and token refresh
Require Proof Key for Code Exchange (PKCE)	Enabled	Sweep always sends a `code_challenge` and verifier

Also enable these. Sweep already sends a client secret on every request, so these settings are safe to turn on and recommended:

Require Secret for Web Server Flow
Require Secret for Refresh Token Flow

Everything else is optional.

If you do enable Refresh Token IP Allowlist, add Sweep's server egress IPs:

52.207.71.182

Step 3: Get your credentials

Open Manage Consumer Details
Copy the Consumer Key, this becomes your Client ID in Sweep
Copy the Consumer Secret, this becomes your Client Secret in Sweep

Step 4: Open Connect Environment in Sweep

Go to Environments
Click Connect / Add environment
Choose Salesforce

Step 5: Choose your environment type and enable your own ECA

Pick one:

Production
Sandbox
Development
Check Use my own External Client App
Paste in:
- Client ID
- Client Secret

Step 6: Complete the Salesforce OAuth flow

Click Connect
Sweep will open the Salesforce OAuth window using your app instead of Sweep's default app
Log in to the correct Salesforce org and approve access
Wait for the window to close. Your environment will then show as connected.

Need help? If your connection fails partway through, double check that your callback URL is exactly https://app.sweep.io/salesforce-oauth2-redirect, and that your OAuth scopes include both api and refresh_token.