Client credentials integrations still depend on the Run As account lifecycle

Client credentials integrations still depend on the Run As account lifecycle. Valid-looking client configuration and an unchanged deployment cannot establish that the execution principal remains eligible to authenticate. When a provider returns a generic invalid_grant, correlate the failed grant with provider Login History before rotating secrets or changing code. Prefer a suitable existing service account whose effective permissions preserve the intended access; reactivating a human account is a separate account-lifecycle decision. This applies to integrations whose client-credentials flow maps to a user, and does not establish the cause of every invalid_grant.

Applies when: A client-credentials integration fails after its user execution principal becomes inactive. Keywords: Salesforce client credentials inactive user Run As invalid grant authentication Login History