Salesforce scenarios

Every authentication attempt against a Salesforce Hosted MCP Server fails with a redirect mismatch or site cannot be reached error. The cause is Claude Code picking a random ephemeral port on each OAuth attempt instead of the fixed port registered on the External Client App.

After raising an Apex class to API version 67.0, it either fails to compile or silently returns fewer records and throws permission errors. This scenario covers the three secure-by-default changes in Summer '26 and how to safely migrate each one.

After the Summer '26 upgrade, SSO logins fail for everyone and nothing appears in login history. This scenario covers the retirement of the single-configuration SAML framework and how to migrate to the multiple-configuration framework before enforcement breaks authentication.

ETL jobs, Data Loader automations and vendor connectors that authenticate with the SOAP login() call start getting rejected. This scenario covers the Use API Auth permission introduced in Summer '26, the path to the Summer '27 retirement, and how to migrate integrations to OAuth before they break.

Inbound case replies land on the Account activity timeline instead of the Case email thread. This scenario walks through the full root cause — From address misconfiguration combined with Einstein Activity Capture — and the complete configuration fix.