Org Console
The pocket-sized command center for Salesforce Admins. Monitor, toggle, and manage your orgs directly from your mobile device.
v1.8.0 - User Guide1. Getting Started
Org Console connects to your Salesforce org via OAuth 2.0 (PKCE) - the same secure protocol used by Salesforce's own mobile apps. No passwords are stored. All credentials live in your device's secure keychain.
Pod health, limits, licenses, and Security Health Check at a glance.
Instantly deactivate Validation Rules, Flows, and Workflows.
Write queries with field auto-suggest, ghost text, and error highlighting.
Freeze or deactivate users, reset passwords, and view sessions on the go.
Requirements
- A Salesforce org (Developer, Professional, Enterprise, Unlimited, or Performance Edition)
- A user account with API Enabled permission (most standard profiles have this)
- iOS 15+ or Android 8+ device
2. First-Time Login & Troubleshooting
Tap "Connect to Salesforce" on the login screen. You'll be redirected to Salesforce's standard login page in an in-app browser. Enter your credentials and authorize the app.
As of Spring '26, Salesforce has tightened security around connected apps. New connected app creation is restricted, and some orgs may block first-time logins from third-party apps that haven't been explicitly installed or approved by an admin.
If you see an "App Not Installed" or "Connected App is Blocked" error when trying to log in for the first time, try one of these workarounds:
Workaround 1: Install the Connected App Manually (Recommended)
- Go to Setup → Connected Apps OAuth Usage in your Salesforce org.
- Find "Org Console" (or the app's client ID) in the list of apps that attempted to connect.
- Click "Install" next to the app. This converts it from an uninstalled to an installed app.
- Once installed, configure the OAuth policy:
- Set Permitted Users to "All users may self-authorize" or assign specific profiles/permission sets.
- Retry the login from Org Console.
Workaround 2: Allow Users to Install Uninstalled Connected Apps
This approach allows all users in your org to authorize any third-party connected app. This is not recommended for production orgs with strict security policies. Use Workaround 1 instead.
- Go to Setup → Connected Apps OAuth Usage.
- Click the gear icon or navigate to Setup → OAuth and OpenID Connect Settings.
- Enable "Allow users to install uninstalled apps" (or similar setting depending on your Salesforce release).
- This permits OAuth authorization from apps not yet installed in your org.
Workaround 3: Contact Your Salesforce Admin
If you're a non-admin user, ask your Salesforce administrator to install the connected app via Setup → Connected Apps OAuth Usage or to pre-approve the app's client ID through a Connected App policy.
Sandbox and Developer Edition orgs typically have fewer restrictions. If you're testing the app, try connecting to a sandbox first. When connecting to a sandbox, the app will automatically redirect you to test.salesforce.com.
3. System Overview
The System Overview screen is the home base. It's organized into three tabs:
🏥 Pod Health
Displays live status from the Salesforce Status API for your org's instance/pod. Shows:
- Instance status - OK, maintenance, or incident
- Org info - Name, Type (Production/Sandbox), Instance Name
- Release version - exact Salesforce release running on your pod
- Today's login count - unique users who logged in today
- Frozen/Locked users - quick at-a-glance count
- Next scheduled maintenance - with an "Add to Calendar" button (Google Calendar)
- Raise Support Case - opens Salesforce Help Portal via Trailblazer SSO
📉 Limits & Health
Shows your org's governor limits consumption in real-time:
- API Request limit usage (Daily/24hr)
- Data Storage, File Storage
- Single Email, Mass Email limits
- Streaming API events, Platform Events
- Security Health Check - overall score, high-risk settings, and medium-risk settings with details
🪪 Licenses
View all User Licenses in the org with used/total counts. Searchable - use the search bar to filter by license name. License types at capacity are highlighted in red.
4. Emergency Toggles
This is the core emergency feature. When something goes wrong in production - a bad validation rule blocking imports, a runaway flow, or a misfiring workflow - you can instantly toggle these automations on and off.
✅ Validation Rules
View validation rules for any object. Select an object from the dropdown, then toggle rules on/off with the switch. Expand a rule to view its formula. Uses the Salesforce Tooling API.
🔄 Flows
View all Process Builder flows and auto-launched flows. Toggle them active/inactive. Shows the active version number and last modified date.
⚙️ Workflows
View and toggle Workflow Rules. The app fetches the active/inactive state individually for each workflow (Salesforce API limitation). Search by workflow name or object name. The last 5 workflows are shown by default - search to find more.
Toggling validation rules, flows, and workflows affects all users in the org immediately. Always confirm before toggling, and remember to re-enable after the emergency is resolved. All toggle actions are logged in the Audit Log.
5. Config Records
View and edit Salesforce configuration data across three tabs:
🏷️ Custom Labels
View and edit Custom Label values directly. Supports label translations - expand a label to see and edit individual language translations. Infinite scroll loads up to 2000 labels.
🛠️ Custom Settings
Browse all Custom Settings objects in the org. Select a setting, view its records, and edit field values in-place. Supports both List and Hierarchy Custom Settings.
📦 Custom Metadata
Browse Custom Metadata Type records. View field values. Note: Custom Metadata updates deploy asynchronously in Salesforce - the app only shows current values, no edit capability as of now.
6. Admin Actions
Quick access to common Salesforce Setup pages via auto-login (frontdoor.jsp). Organized into categories:
- Security & Access - Session Settings, Login History, Password Policies, IP Ranges, MFA Setup
- Email & Deliverability - Email Deliverability, Organization-Wide Email Addresses
- Data & Storage - Storage Usage, Data Export, Mass Delete Records, Schema Builder
- Automation & Jobs - Scheduled Jobs, Apex Job Queue, Flow Management, Paused Flow Interviews
- Development - Debug Logs, Custom Objects, Apex Classes, Remote Site Settings
- Support Access - Grant Login Access for Salesforce Support
Salesforce renders Setup pages in Classic UI on mobile browsers (Lightning Experience is not supported on mobile web). This is a Salesforce limitation, not an app limitation.
7. Async Jobs
Monitor and manage asynchronous processes across four tabs:
| Tab | What it Shows | Actions |
|---|---|---|
| Apex Jobs | Batch Apex, Queueable, Future jobs | Abort queued/processing jobs |
| Flex Queue | Jobs waiting in the Flex Queue | View position, abort |
| Scheduled | Scheduled Apex (CronTrigger) | View next fire time, abort |
| Bulk Data | Bulk API 2.0 jobs | Abort in-progress jobs |
All tabs support search and pull-to-refresh. Each job card shows the class name, status, progress (items processed/total), error count, and creation timestamp.
8. Query Editor
A powerful SOQL query editor designed for mobile use:
- Field Auto-Suggest - Type an object name and get field suggestions as Quick-insert buttons
- Ghost Text - See query completions in faded text as you type; press Tab or tap to accept
- Syntax Error Highlighting - Inline error messages from the Salesforce API
- Query History - Last 10 queries are strictly isolated per org and saved locally
- Results Table - Scrollable table with column headers; tap a cell to copy its value
- Export - Copy full result set as JSON or CSV to clipboard
All queries are sanitized to prevent SOQL injection. The maximum query length is 10,000 characters. Query history is stored locally on your device.
9. User Management
Easily navigate your user base using the Tabbed Layout (All / Inactive / Frozen). Search for users by name, username, email, profile, or role.
User Card Actions
Tap a user card to expand it. The expanded view shows:
- Username, Email, Role
- Last Login timestamp
- Connected OAuth apps count
- Password lock status
Quick Actions
- Freeze / Unfreeze - Immediately revoke or restore a user's access to Salesforce without deactivating them.
- Deactivate / Activate - Fully deactivate a user to free up their license.
- Reset Password - Invalidates the current password and sends a reset email to the user.
- Copy User ID - Quick copy to clipboard via the copy icon.
To prevent accidental lockouts while you are in the field, destructive actions (Freeze, Deactivate, Reset Password) are automatically disabled for your currently logged-in user account.
10. Multi-Org Management ADD-ON
Connect multiple Salesforce orgs and switch between them instantly. Org Console is built to handle complex multi-environment setups safely.
Color-Coded Org Detection
When you connect an org, the app queries the Salesforce REST API to definitively detect the environment type. Each org receives a unique Identicon avatar and a color-coded "threat-level" pill so you always know exactly where you are working:
- PRD (Orange) - Production (High Caution)
- SBX (Purple) - Sandbox
- DEV (Teal) - Developer Edition
- SCR (Blue) - Scratch Org
Switching & Smart Sessions
Tap any connected org in the drawer to switch. If a session expires while you are working, Smart Session Handling will instantly present you with a picker to switch to a valid org rather than dropping you straight back to the login screen.
Disconnecting & Removing
- Disconnect - Logs you out of the current session but keeps the org in your drawer as Auth Expired for easy reconnection later.
- Swipe-to-Remove - Swipe left on any org card to permanently delete it from the app. This performs a complete local data wipe (clearing all credentials, SOQL history, and audit logs associated with that org).
11. App Lock
Protect your Salesforce data with an additional layer of security. App Lock requires biometric authentication or your device passcode every time you open Org Console.
🔒 Supported Methods
- Face ID — iPhone models with Face ID
- Touch ID — iPhone models with fingerprint sensor
- Fingerprint — Android devices with biometric hardware
- Device Passcode — Falls back to PIN/pattern/password if biometrics are unavailable
⚙️ Enabling App Lock
Navigate to Settings → App Lock and toggle it on. You’ll be prompted to authenticate once to confirm. After enabling, the app will require authentication every time it’s opened or brought back from the background.
Even if your phone is unlocked, App Lock ensures that only you can access your connected Salesforce orgs. This is especially important for shared devices or situations where you hand your phone to someone temporarily.
12. Alerts & Notifications
Stay ahead of issues with proactive alerts. Org Console monitors your connected org and notifies you about critical events before they escalate.
🚨 Salesforce Incidents
Get notified when Salesforce reports an active incident on your org’s specific instance/pod. No more manually checking status.salesforce.com — the alert comes to you.
📊 API Limit Thresholds
Set custom thresholds for your org’s daily API usage. When consumption crosses your configured percentage, you’ll get an alert so you can investigate before hitting the hard limit.
🚫 Failed & Blocked Logins
Receive notifications about new failed or blocked login attempts on your org. Quickly identify unauthorized access attempts or users locked out of their accounts.
🔧 Managing Alerts
All alert types are configurable from Settings → Alerts & Notifications. The redesigned settings screen provides a clean, simple layout to enable, disable, or configure thresholds for each alert type independently.
13. Audit Log & Export
Every mutation action performed via Org Console is logged locally with timestamps. The audit log helps you maintain accountability and review what was changed, when, and on which org.
📝 What’s Logged
- User management actions (freeze, deactivate, password resets)
- Emergency toggle changes (validation rules, flows, workflows)
- Config record edits (custom labels, custom settings)
- Async job aborts
- SOQL queries executed
📤 Exporting to CSV
Tap the export icon in the Audit Log screen to generate a CSV file of your complete audit history. Share it instantly via:
- Mail — attach to an email
- Slack — send to a channel or DM
- Files — save to iCloud Drive, Google Drive, or local storage
- Any share target — uses the native iOS/Android share sheet
🏢 Multi-Org Audit Tabs
If you have the Multi-Org Pack, the audit log uses clear, easy-to-tap org tabs to switch between audit histories for each connected org. Logs are strictly isolated per environment.
14. App Settings
API Version
The app auto-detects the highest API version available in your connected org. You can override this manually via Settings → API Version. Available versions are fetched dynamically from the org. The current API version is shown in the top-right corner of the app bar.
Theme
Choose between Light, Dark, or System (follows device settings). Your preference is persisted across sessions.
API Usage Counter
Track how many API calls Org Console has made. The counter is persisted per org and survives app restarts. Tapping the warning icon in the App Bar will jump you directly to this setting.
Premium Packs (Paywall)
Manage your lifetime licenses and restore purchases directly from the settings menu. Unknown or unreleased packs remain safely hidden until launch.
15. Security & Privacy
🔐 Authentication
OAuth 2.0 with PKCE (Proof Key for Code Exchange). No client secret is stored on the device. Access tokens and refresh tokens are stored in the platform's secure keychain (iOS Keychain / Android Keystore).
📱 Local-Only Storage
All data - tokens, org info, audit logs, query history, settings - is stored locally on your device using Flutter Secure Storage. No data is ever sent to external servers. The app communicates only with your Salesforce org's API endpoints.
📋 Clipboard Security
Sensitive data copied to the clipboard (User IDs, tokens) is flagged for auto-clear after 60 seconds (on supported platforms).
📝 Audit Trail
All mutation operations are logged locally with timestamps. The audit log is per-org and never leaves your device.
🛡️ Input Sanitization
All SOQL queries and search inputs are sanitized to prevent injection attacks. Query length is capped at 10,000 characters.
16. Base App & Add-Ons
| Feature | Base App | Multi-Org Pack |
|---|---|---|
| System Overview (Pod Health, Limits, Licenses) | ✅ | ✅ |
| Emergency Toggles (Validations, Flows, Workflows) | ✅ | ✅ |
| Config Records (Labels, Settings, Metadata) | ✅ | ✅ |
| Admin Actions & Quick Setup Links | ✅ | ✅ |
| Async Jobs (Apex, Flex, Scheduled, Bulk) | ✅ | ✅ |
| SOQL Query Editor | ✅ | ✅ |
| User Management (Freeze, Deactivate, Reset Password) | ✅ | ✅ |
| Single Org Connection | ✅ | ✅ |
| Dark Mode & Theme Preferences | ✅ | ✅ |
| Audit Log (Active Org) | ✅ | ✅ |
| App Lock (Face ID / Touch ID / Passcode) | ✅ | ✅ |
| Alerts & Notifications (Incidents, API Limits, Failed Logins) | ✅ | ✅ |
| Audit Log Export to CSV | ✅ | ✅ |
| Multi-Org Support (Connect 2+ orgs) | - | ✅ |
Org Console is designed as a modular toolkit. You only pay for the specific tools you need. Add-on modules like the Multi-Org Pack are one-time lifetime purchases — no subscriptions, no recurring fees. Unlock them from Settings → Premium Packs.
17. FAQ & Troubleshooting
Q: I get "App Not Installed" or "Connected App is Blocked" when logging in.
See Section 2: First-Time Login & Troubleshooting for detailed workarounds. The most common fix is to install the app from Setup → Connected Apps OAuth Usage.
Q: Workflow toggles always show as inactive.
The active/inactive state for each workflow requires an individual API call to the Tooling API. The app loads these when the Workflows tab first appears. If you see all workflows as inactive, wait a moment for the states to load, or pull-to-refresh. Note that toggling them will now update instantly without a full page reload.
Q: I see "Insufficient Privileges" errors.
Your Salesforce profile likely doesn't have the API Enabled permission, or you may not have access to the Tooling API. Ask your admin to check your profile permissions. The app shows a one-time warning at startup if limited access is detected.
Q: Can I connect to a Sandbox?
Yes. When adding a new org, you'll be redirected to login.salesforce.com. From there, use "Use Custom Domain" or enter your sandbox URL manually. The app automatically detects sandbox orgs and uses the correct endpoints for reconnection.
Q: How does the app know if my org is Production or a Sandbox?
Upon connecting, the app executes a definitive SOQL query against the Organization object to securely detect the environment type. This powers our color-coded badges (PRD, SBX, DEV, SCR) so you are always aware of your environment context.
Q: Why do Setup pages open in Classic UI?
Salesforce does not support Lightning Experience in mobile web browsers. When the app opens Setup pages via frontdoor.jsp, Salesforce automatically renders them in Classic UI. This is a Salesforce platform limitation.
Q: Is my data sent to any external server?
No. The app communicates only with your Salesforce org's REST API and the public Salesforce Status API. All credentials and data are stored locally on your device. No telemetry or analytics data is collected.
Q: How do I open the navigation drawer?
Tap the hamburger menu icon (☰) in the top-left corner, or swipe right from the left edge of the screen. The edge swipe gesture works from approximately the leftmost 40 pixels of the screen.
Q: The API version in the top bar didn't update after I changed it in Settings.
The API version badge in the top bar updates immediately when changed. If you don't see the update, navigate to any other screen and back. You can tap the badge to go directly to Settings.
Q: What happens to my data if I disconnect or remove an org?
Disconnect: Auth tokens are deleted, but the org stays in your drawer flagged as "Auth Expired". You can reconnect later by tapping it, and your instance URL and username will be pre-filled.
Remove (Swipe Left): The org is permanently removed from your list. All associated local data is permanently wiped from your device. This includes your credentials, API usage counters, SOQL history, and that org's specific audit logs.
Visit our Support page to reach us via email, report bugs, or submit feature requests.