10/17/2026 · 1 min read
salesforceoauthretirementsecurityapiintegration
Salesforce is deprecating the OAuth 2.0 Username-Password Flow, with its full retirement scheduled for February 20, 2027. This change necessitates a review of existing integrations that rely on this authentication method.
This article discusses an OAuth Protected Resource Metadata (PRM) proxy pattern for governing remote MCP servers. It addresses the architectural challenge of implementing reverse proxies while adhering to RFC 9728's strict URL matching requirements for PRM documents.
Team Authorizations introduce a new way to manage API tokens and OAuth authorizations at the team level, decoupling them from individual user accounts. This innovation prevents critical integration failures caused by personnel changes and improves operational reliability.
This article introduces the concept of the "Agentic Enterprise," where AI-driven automation leads to a significant increase in application usage. It argues that a headless foundation and an agent control plane are critical for Salesforce's AI initiatives (AIforce) to thrive amidst the challenge of disconnected systems.