Upcoming Security Enhancements to Salesforce Integration

Scheduled Maintenance Report for FormAssembly

Update

Scheduled maintenance is still in progress. We will provide updates as necessary.
Posted Jul 20, 2026 - 15:38 EDT

In progress

Scheduled maintenance is currently in progress. We will provide updates as necessary.
Posted Jul 20, 2026 - 13:35 EDT

Scheduled

Status: Scheduled starting today, through the week
Affected Feature: Salesforce Connected App / OAuth Authentication


What's Changing

To meet updated Salesforce security requirements, FormAssembly will be enabling the following settings on our Salesforce connected app:

Phase 1

Refresh Token Rotation (RTR) — A new refresh token will be issued with each access token refresh.

Proof Key for Code Exchange (PKCE) — An additional layer of protection for supported OAuth authorization flows.

Refresh Token IP Allowlist Enforcement — Token refresh requests will be restricted to allowlisted IP addresses.

Phase 2 (following Phase 1)

Idle Refresh Token Expiration — Salesforce refresh tokens that have been inactive for 30 or more days will expire and require reauthorization.



What to Expect

We've completed thorough testing of these changes to help ensure a seamless experience for our customers. For most users, no action will be required.

In some cases, you may be prompted to reauthorize your Salesforce connection in FormAssembly after the changes go live. This is a one-time action and takes just a few moments to complete.

To get ahead of this, we recommend checking your External Authorizations page (accessible via your account menu) to review the status of your Salesforce connectors. If any show as unauthorized or disconnected, you can reauthorize them directly from that page. Step-by-step instructions are also available in our Resource Center https://help.formassembly.com/help/connect-to-salesforce#salesforce-authentication.

We also recommend enabling downtime and processing error alerts for your forms so you're notified promptly of any issues. This can be configured within your general settings. https://help.formassembly.com/help/preferences#communications-from-formassembly.


Need Help?

If you notice any unexpected behavior with your Salesforce connection that you believe may be related to these changes, please don't hesitate to reach out to our Support team. We're happy to help.
Posted Jul 20, 2026 - 13:30 EDT
This scheduled maintenance affects: FormAssembly Professional/Premier, FormAssembly Essentials, FormAssembly Team, FormAssembly Basic, FormAssembly Enterprise, FormAssembly Compliance, and FormAssembly Government.