Same-Org Salesforce REST API Authentication In 2GP Managed Packages: FAQ For ISV Developers Using External Client App, Named Credential, External Credential, And Subscriber Setup

A practical FAQ for Salesforce ISV developers building 2GP managed packages that need to call the subscriber org’s own REST API. Learn what authentication patterns actually survive deploy, packaging, install, and runtime validation—and why common approaches like Named Credentials often fail in this scenario.

Where is your team’s bottleneck?

Finding bottlenecks in Salesforce is easy with Flowdometer, a free tool for time tracking and setting SLAs in Salesforce.

When in doubt, focus on process breakdowns

If you're not sure where to start with a dysfunctional team, start with repetitive work. Figure out how things are supposed to work, and where they aren't happening this way.