hardis:org:diagnose:unused-connected-apps
Description
Request objects ConnectedApp, LoginHistory and OAuthToken to find which connected apps might not be used anymore, and could be deleted for security / technical debt reasons.
Check with Connected Apps metadatas if the app is still active (inactive = "Admin Users are pre-authorized + no Profile or Permission set assigned")
The following default Salesforce Connected Apps are ignored:
- Ant Migration Tool
- Chatter Desktop
- Chatter Mobile for BlackBerry
- Force.com IDE
- OIQ_Integration
- Salesforce CLI
- Salesforce Files
- Salesforce Mobile Dashboards
- Salesforce Touch
- Salesforce for Outlook
- SalesforceA
- SalesforceA for Android
- SalesforceA for iOS
- SalesforceDX Namespace Registry
- SalesforceIQ
You can add more ignored apps by defining a comma-separated list of names in variable ALLOWED_INACTIVE_CONNECTED_APPS
Example: ALLOWED_INACTIVE_CONNECTED_APPS=My App 1,My App 2, My App 3
This command is part of sfdx-hardis Monitoring and can output Grafana, Slack and MsTeams Notifications.
Parameters
| Name | Type | Description | Default | Required | Options |
|---|---|---|---|---|---|
| debug -d |
boolean | Activate debug mode (more logs) | |||
| flags-dir | option | undefined | |||
| json | boolean | Format output as json. | |||
| outputfile -f |
option | Force the path and name of output report file. Must end with .csv | |||
| skipauth | boolean | Skip authentication check when a default username is required | |||
| target-org -o |
option | undefined | |||
| websocket | option | Websocket host:port for VsCode SFDX Hardis UI integration |
Examples
$ sf hardis:org:diagnose:unused-connected-apps