# Heroku AppLink: Now Using JWT-Based Authorization for Salesforce

DevFeed: [Heroku AppLink: Now Using JWT-Based Authorization for Salesforce](<https://devfeed.tech/articles/heroku-applink-now-using-jwt-based-authorization-for-salesforce-26373.md>)

Original publisher: [Read original article](<https://www.heroku.com/blog/applink-now-uses-jwt-based-authorization-salesforce/>)

Author: Vivek Viswanathan

Published: 2025-12-11T16:00:53Z

Content type: release

Language: en

Sources: [Heroku](<https://devfeed.tech/sources/heroku.md>)

Topics: [Heroku](<https://devfeed.tech/topics/heroku.md>), [JSON Web Tokens](<https://devfeed.tech/topics/jwt.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [CI/CD](<https://devfeed.tech/topics/cicd.md>), [ci](<https://devfeed.tech/topics/ci.md>), [Security](<https://devfeed.tech/topics/security.md>), [Microservice](<https://devfeed.tech/topics/microservice.md>), [OAuth](<https://devfeed.tech/topics/oauth.md>)

Tags: [applink](<https://devfeed.tech/tags/applink.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [ci-cd](<https://devfeed.tech/tags/ci-cd.md>), [continuous-deployment](<https://devfeed.tech/tags/continuous-deployment.md>), [continuous-integration](<https://devfeed.tech/tags/continuous-integration.md>), [credentials](<https://devfeed.tech/tags/credentials.md>), [deployment](<https://devfeed.tech/tags/deployment.md>), [heroku](<https://devfeed.tech/tags/heroku.md>), [jwt](<https://devfeed.tech/tags/jwt.md>), [news](<https://devfeed.tech/tags/news.md>), [oauth](<https://devfeed.tech/tags/oauth.md>), [secrets](<https://devfeed.tech/tags/secrets.md>), [security](<https://devfeed.tech/tags/security.md>), [tokens](<https://devfeed.tech/tags/tokens.md>)

## AI overview

Heroku AppLink now supports JWT-based authorization for Salesforce integrations. The update enables machine-to-machine authorization for automated CI/CD setup and reduces reliance on long-lived secrets and static credentials by providing on-demand tokens.

## Source excerpt

Modern Continuous Integration/Continuous Deployment (CI/CD) pipelines demand machine-to-machine authorization, but traditional web-based flow requires manual steps and often rely on static credentials; a major security risk. Heroku AppLink now uses JWT Authorization to solve both: enabling automated setup and eliminating long-lived secrets. In today's evolving threat landscape, security attacks increasingly exploit systems that rely on [...] The post Heroku AppLink: Now Using JWT-Based Authorization for Salesforce appeared first on Heroku.