Salesforce connection fails: "user is not admin approved to access this app" (OAUTH_APP_ACCESS_DENIED)

At a glance
When you click Connect org for Salesforce, Salesforce blocks the sign-in with an "app access denied" error. This is a Salesforce permission setting on your side — a Salesforce administrator needs to allow the Delekit app, and it takes about two minutes to fix.

What you'll see
After choosing Connect org on Client → Integrations → Salesforce, you're returned to Delekit and the connection doesn't complete. The underlying error from Salesforce is:

OAUTH_APP_ACCESS_DENIED — user is not admin approved to access this app

Why this happens
Delekit connects to Salesforce through a connected app. Your Salesforce org is configured so that this app is limited to admin-approved users — and the account you signed in with hasn't been approved yet. Salesforce refuses the sign-in until an admin allows it.

How to fix it (Salesforce administrator)
Choose one of these:

Option A — let users approve themselves (simplest):

1. In Salesforce, go to Setup → App Manager (or Connected Apps → Manage Connected Apps).
2. Find the Delekit app and open Manage → Edit Policies.
3. Under OAuth Policies → Permitted Users, choose "All users may self-authorize."
4. Save.

Option B — keep it restricted, approve specific users:

1. Same app → Manage.
2. Under Profiles (or Permission Sets), add the profile/permission set of the people who will connect Delekit.
3. Save.

Then return to Delekit and click Connect org again.

Still seeing the error?

• Confirm the Salesforce user you're signing in with has the profile/permission set you approved.
• Make sure you're connecting the intended Salesforce org (production vs sandbox).
• Still stuck? Raise a support ticket