v3.2.1 has ECA support for "Enable Refresh Token Rotation"

[sumeet]

v3.2.1 says - Support for the External Client App security option "Enable Refresh Token Rotation".

What if the ECA is already generated with "Enable Refresh Token Rotation" disabled with v3.2?

After upgrade to v3.2.1, should we enable "Enable Refresh Token Rotation" in the ECA that already exists?

Please more details.

[MIvanov]

@summit Refresh token rotation is a hard requirement from Salesforce to all their partners and a strong recommendation for customers. However, you are not a partner, so it is up to you whether you want to use this security measure.

[sumeet]

Hi Maxim,

Thanks for the details.

Based on your reply, it is not mandatory to enable "Enable Refresh token Rotation", but it is best or strongly recommended.
Thanks. I will work with our client to get this enabled.

Regards.