Overview

This article outlines our future plan to upgrade the SendSafely Salesforce managed package to Salesforce's External Client App (ECA) model. The migration will happen across two package releases and will require customers on older versions to upgrade through v1.14 before moving to v1.15 or later.

No action is required at this time. We are publishing this article in advance to help customers understand the planned migration path and prepare for future upgrades.

Why we are making this change

Salesforce is transitioning integrations from Connected Apps to External Client Apps (ECAs) as its recommended model for new and updated integrations. External Client Apps provide a more modern framework for managing authentication, security policies, and application configuration. Migrating the SendSafely package to an ECA keeps the integration aligned with Salesforce’s current security architecture and ensures we can continue supporting Salesforce authentication requirements as they evolve.

Planned Upgrade Path

The migration will be introduced in stages throughout Q4. The 2GP and ECA migration steps described below are not yet available. SendSafely will provide additional guidance as each stage becomes available.

The planned upgrade path for customers currently running v1.13.2 or earlier is:

1. Upgrade to v1.14 (1GP) - planned for early Q4 2026
   Customers will upgrade  their existing SendSafely 1GP managed package to v1.14. This will be a required prerequisite for the later migration because the 1GP version of v1.14 is the version that supports the transition to the second-generation (2GP) package.

2. Migrate from 1GP to 2GP at v1.14 - planned for mid Q4 2026
   After v1.14 has been available for a period of time, SendSafely plans to make the v1.14 2GP managed package available - around the middle of Q4. Customers will then be able to migrate from the 1GP managed package to the 2GP managed package. This will be a one-way migration. The authentication method will not change during this step, both versions of v1.14 will continue to use the existing Salesforce Connected App. Customers will need to complete the 1GP-to-2GP migration before upgrading to the ECA-based release.

3. Move to the ECA-based package v1.15 or later - planned by the end of Q4
   The final stage of the migration. Beginning with v1.15 or later, the Salesforce Connected App will be replaced by an External Client App (ECA). Future SendSafely Salesforce package upgrades can then follow the normal upgrade process.

Important: No Downgrade Path

Once your Salesforce organization has migrated to the 2GP managed package, it cannot be downgraded back to the 1GP package.

If necessary, you can uninstall the 2GP package and install an earlier 1GP version as a new installation, but this is not considered a downgrade and does not preserve the 2GP installation.