Update XL-Connector within 30 days

By: Alexander Tarasevich | Published: June 4, 2026 |

As you may know, Salesforce is rolling out mandatory security updates for all connected apps. We’ve updated XL-Connector to meet every one of these new requirements, and the latest version ships with a new, fully compliant connected app. Starting with version 3.7.9.0 and all future versions, XL-Connector will be fully compliant with Salesforce’s security requirements. Here’s what you need to know:

Salesforce is enforcing four new security requirements across all connected apps:

  • Require Proof Key for Code Exchange (PKCE) Extension for Supported Authorization Flows
  • Enable Refresh Token Rotation
  • Limit Idle Refresh Token Time-to-Live (TTL) to 30 Days
  • Refresh Token IP Allowlist

We understand that it might take time to update the app so we will wait for 30 days before enabling the new security controls. Once they are enabled, any version of XL-Connector prior to 3.7.9.0 will stop working without warning.Since the app is not upgradable from our end, the users will need to update the version manually.

What you need to do:

Update to our latest version as soon as possible. The update does not require your Salesforce admin to re-authorize the connection since we are using the same connected app that has already been installed.If you don’t have admin permissions on your Windows PC – you’ll need to reach out to your IT team to install the new version.If you have any questions or run into issues updating, just contact our support team at support@xappex.com

Thank you,The Xappex team

|
Alexander Tarasevich

Alexander Tarasevich

About the Author
flash-icon What's New

Explore More Insights & Stories