https://mycommunity.validity.com/t5/demandtools/external-client-apps-for-demandtools-sandboxes/m-p/3059#M1748 <P>Hey&nbsp;<a href="https://mycommunity.validity.com/t5/user/viewprofilepage/user-id/134">@Murphybp79</a>&nbsp;- Any current or future envrionements connected to DemandTools, an admin will need to install those ECAs to be complaint with the Salesforce PKCE policy.&nbsp;</P> Fri, 08 May 2026 18:21:05 GMT Pugs_Validity 2026-05-08T18:21:05Z https://mycommunity.validity.com/t5/demandtools/external-client-apps-for-demandtools-sandboxes/m-p/3058#M1747 <P>I had a question about the <A href="https://knowledge.validity.com/s/articles/Configuring-the-PKCE-compliant-External-Client-Apps-for-DemandTools?language=en_US" target="_blank" rel="noopener">help article</A> covering the new security changes that require ECAs to be installed for DemandTools. The article includes separate links for sandboxes, and I wanted to clarify when those steps need to be followed. Does this only apply to existing sandboxes created before the production install, with future sandbox refreshes inheriting the apps automatically? Or is this something that will need to be done each time a new sandbox is created moving forward?</P> Fri, 08 May 2026 13:29:04 GMT https://mycommunity.validity.com/t5/demandtools/external-client-apps-for-demandtools-sandboxes/m-p/3058#M1747 Murphybp79 2026-05-08T13:29:04Z https://mycommunity.validity.com/t5/demandtools/external-client-apps-for-demandtools-sandboxes/m-p/3059#M1748 <P>Hey&nbsp;<a href="https://mycommunity.validity.com/t5/user/viewprofilepage/user-id/134">@Murphybp79</a>&nbsp;- Any current or future envrionements connected to DemandTools, an admin will need to install those ECAs to be complaint with the Salesforce PKCE policy.&nbsp;</P> Fri, 08 May 2026 18:21:05 GMT https://mycommunity.validity.com/t5/demandtools/external-client-apps-for-demandtools-sandboxes/m-p/3059#M1748 Pugs_Validity 2026-05-08T18:21:05Z