Add PKCE (RFC 7636) support for Salesforce connector OAuth authentication
Answered
Which connector?:
Salesforce
Additional details:
We are using the Fivetran Salesforce connector (dataeng_warehouse Connected App) to sync data from Salesforce into our data warehouse(snowflake).
Salesforce is enforcing PKCE (RFC 7636) on OAuth authorization code flows starting February 20, 2027. After this date, any OAuth token exchange without a valid code_challenge / code_verifier pair will be rejected, which will break our Fivetran Salesforce sync entirely.
Our Salesforce connection uses the Fivetran connected app with OAuth2.0. Please confirm that PKCE and Refresh Token Rotation are enforced for it, per your June 24, 2026 release note, and that the troubleshooting article saying PKCE is not supported.
-
Official comment
Hi Jayanth,
The release notes are correct. PKCE is enabled in the Fivetran Connected App. The troubleshooting article has been updated to reflect that accurate status: https://fivetran.com/docs/connectors/applications/salesforce/troubleshooting/pkce-support
Best,
Sadie Martin, Product Manager
Please sign in to leave a comment.
Comments
1 comment