Overview
Salesforce recently introduced mandatory security requirements for all AppExchange applications to better protect customer data against unauthorized access and session hijacking. You can read more about these specific platform requirements in Salesforce's developer guide: Secure Your Connected Apps and External Client Apps.
To follow these standards and ensure the highest level of security for your Salesforce organization, we have updated the underlying authentication architecture of Druva App for Salesforce.
Why Do I Need to Reauthenticate?
Our latest update introduces highly secure session tokens and stricter timeout policies to comply with Salesforce's new security mandates. Because these upgrades invalidate older, less secure connection methods, you must reauthenticate your app connection to generate the required new tokens.
❗️ Important
Starting Saturday July 25, 2026. after 9:00 AM PST you must re-authenticate all Salesforce organizations associated with the Druva App.
What happens if I don't re-authenticate?
If you do not re-authenticate by this deadline, the app will lose its connection to your Salesforce environment, and the following critical operations will stop working immediately:
Ongoing Jobs & Token: Any Active backup, restore, or sandbox seeding jobs in progress will fail immediately and existing tokens will be rendered invalid.
Data & Metadata Backups: All scheduled and manual backups for both your Salesforce data and your metadata configurations will fail completely.
Restores: You will be entirely unable to restore any data or metadata back into your production or sandbox environments.
Sandbox Seeding: Data replication, testing preparation, and the ability to seed data to sandbox environments will be completely blocked.
Archiving: All active and scheduled data archiving jobs will fail.
Any active backup, restore, or seeding jobs will fail immediately.
How to re-authenticate Druva SFDC App?
To re-establish your connection, an administrator must perform the following steps:
On the Salesforce App console, click Environment Hub.
Navigate to the respective Org and click the drop-down (▼) icon in the upper-right corner of the organization card.
Select the Re-authenticate option from the dropdown to re-authenticate an organization.
📝 Note
Only users with Salesforce App administrator permissions can re-atheticate the organizations.
Frequently Asked Questions
Does this affect my existing data?
No. This update only changes how our application securely connects to your Salesforce environment. No underlying customer data is altered or deleted.
What Security enhancements were added?
When you re-authenticate, your connection will immediately benefit from the following Salesforce-mandated protections:
Proof Key for Code Exchange (PKCE): Secures the OAuth authorization code flow to prevent interception attacks.
Refresh Token Rotation: Automatically replaces your refresh token with a new one every time an access token is issued, significantly reducing the risk of compromised sessions.
30-Day Idle Timeout: Automatically invalidates refresh tokens that have been inactive for 30 days, preventing malicious actors from maintaining indefinite access to your system.
Who can perform this re-authentication?
Only users with Salesforce App administrator permissions can complete this process.