Salesforce recently started enabling the Refresh Token Rotation application security setting by default. This would trigger an OAuth request failure when attempting to use Qlik Salesforce connections, requiring Salesforce support to disable the option.
OAuth request failed with error invalid_grant_description: expired access/refresh token. Please update the credentials for the current connection.
As of November 2026, the Qlik Salesforce connector used by Qlik Cloud (already available as of November 5th), Qlik Sense Enterprise on Windows, and Qlik Sense Desktop (November 2026 IR and any SRs released after November 5th) supports the Salesforce Refresh Token Rotation security setting.
See the relevant release notes for details.
What is the Refresh Token Rotation?
When a Salesforce connection is authenticated against a Salesforce app, the connection receives an initial access token and an initial refresh token. When the access token expires, the connection sends the initial refresh token to Salesforce to obtain a new access token. Since the Refresh Token Rotation setting enforces single-use refresh tokens, the initial refresh token will be invalidated, and Salesforce will respond with not only a new access token, but also a brand-new refresh token.
See Salesforce help pages for more information.
What does this mean for me?
With the new changes to the Salesforce connector, connections will seamlessly support this new Refresh Token Rotation workflow if connections are used within the refresh token Time to Live limit (30 days by default).
If connections are not used within the refresh token Time to Live limit, then you will need to re-authenticate.
What do I need to do?
Qlik Cloud: Support was added November 5th, 2026. You may be required to re-authenticate existing connections.
Qlik Sense Enterprise on Windows and Qlik Sense Desktop: Upgrade to the respective November 2026 IR release or any service release published after November 5th. You may be required to re-authenticate existing connections.
But why am I still getting an error?
If you are still receiving an error that your OAuth request has failed, then one of the following situations has occurred:
You have recently changed the security setting for Refresh Token Rotation in Salesforce, and your previous refresh token has been invalidated.
Your Salesforce connection has not been used in the time limit defined by the refresh token Time to Live setting in Salesforce, meaning your refresh token has expired.
You have exceeded the maximum number of active refresh tokens enforced by Salesforce, which is 5.
To mitigate the OAuth error, re-authenticate your Salesforce connection.
Questions?
If you have questions or need assistance, our forums are open to you, and Support is only a chat away.
FAQ
This FAQ will be updated as commonly asked questions are answered.
Are there any limitations?
In Qlik Sense Enterprise on Windows, the Salesforce connector Refresh Token Rotation functionality is currently not supported in a multi-node environment.
Thank you for choosing Qlik,Qlik Support
...View More
Are you looking for field-testedbest practices on how to manage and maintain your Qlik Cloud tenant? Then look no further than ourQlik Cloud Admin Playbook, which is now available directly on Qlik Help.
Following the launch of our Qlik Sense Admin Playbook, this second release expands our administrative toolkit directly to our cloud offerings.
What is this playbook, and where can I find it?
The playbook provides you witha repository of field-tested administrative best practices, organized by cadence and category for Qlik Cloud tenants, and can be found here:Qlik Cloud Admin Playbook
It can also be accessed from the help site's top navigation bar > Playbooks (A) > Qlik Cloud Administrator Playbook (B) :
Do you collect feedback?
Absolutely.To suggest improvements, please use theLeave your feedback hereoption on whichever page you want to comment on.
Thank you for choosing Qlik,Qlik Support
...View More
Starting with the release of Talend Studio R2026-10, Talend Studio will adopt a new structured patching release model.
The current Talend Studio patching process
Each Talend product follows its own patching lifecycle and release cadence. With the release of Talend Studio 8.0.1 in 2021, updates have traditionally been delivered every month with the format RYYYY-MM (EX: R2022-01, R2026-05). These releases include bug fixes, customer-requested enhancements, product improvements, and security updates (CVE remediation).
While some customers can readily adopt a monthly patching schedule, many enterprise organizations require extensive testing, validation, and QA cycles before approving updates for production deployment.
The new Talend Studio lifecycle
Starting with the release of Talend Studio R2026-10, customers will have two options to patch Talend Studio.
The following types ofPatchReleaseswillbe available:
Monthly Releases: continue the traditional Talend Studio patching model.
Support Releases: A Support Release (SR) is a lighter version of the monthly release that focuses on CVE and security fixes and excludes new features, allowing customers to upgrade without taking on new functionality.
Talend Runtime
The same two-track approach will also apply to Talend Runtime. Starting with Talend Runtime R2026-10, customers will be able to choose between Monthly Releases and Support Releases, aligned with the Talend Studio baseline (every October).
This allows Studio and Runtime to follow the same patching track, so that jobs and services built in Studio are validated against a consistent Runtime version. See the supplemental article for details.
For more information, see:
Update paths | Talend Installation Guide
The new Talend Studio Lifecycle and Release Schedule (October 2026 and onwards); a supplemental article which goes into detail on:
The core differences betweenPatch Releases, such as whatSupport ReleasesandExtended Supportreleases include.
The recommendedUpgrade Paths
A timeline (projected; changes are possible) of upcoming releases
Thank you for choosing Qlik,Qlik Support
...View More
Hi everyone, Want to stay a step ahead of important Qlik support issues? Then sign up for our monthly webinar series where you can get first-hand insights from Qlik experts.
The Techspert Talks session from November looked at Migrating Talend to Qlik Talend Cloud.
But wait, what is it exactly?Techspert Talks is a free webinar held on a monthly basis, where you can hear directly from Qlik Techsperts on topics that are relevant to Customers and Partners today.
In this session we will cover:
Converting Configurations and Projects
Qlik Talend Cloud Advantages
Migration Toolkit
WATCH THE RECORDING
...View More
Qlik's 2026 Product Recap is out.
In it, we cover:
One definition of your business, built into your data products
Semantic Models in Data Products are our lead innovation, and they bring shared meaning into the data product itself, giving analytics and AI the context to understand your data.
Agentic AI that works the way your business works
Qlik Answers gets a streamlined architecture, custom skills, and advanced reasoning driven by the Qlik analytics engine.
Qlik Talend Studio AI Assistant brings an assistant directly into the tool your data developers already use, and it changes what a day in Studio looks like.
Agentic Data Stewardship keeps a human in charge while agents do the legwork.
MCP Tools for Declarative Pipelines came out of a request we heard again and again in testing: developers wanted to look inside their Qlik tenant while building.
How we offer you more choice, more control
Enterprise AI has to fit the environment it runs in. This release widens that fit.
Try new capabilities on your terms with Feature Preview. You can now browse upcoming features, turn them on for yourself, and turn them off whenever you like, with no waiting.
More cloud choice. Open Lakehouse support for Google Cloud arrives in public preview in November, extending support beyond AWS.
Developer flexibility. The Modern Script Editor and a new VS Code extension bring Qlik development into the tools your developers already use.
Enterprise control and readiness. AWS PrivateLink is generally available, and ISO 9001 certification is complete.
Ready to dive into the recap? Head over to AI Without Context Is Guessing With Confidence. | Product Innovation Blog.
Thank you for choosing Qlik,Qlik Support
...View More
Don't miss our previous Q&A with Qlik! Pull up a chair and chat with our panel of experts to help you get the most out of your Qlik experience.
WATCH HERE
...View More
A security issue has been remediated in Qlik Cloud related to the 2 critical PHP vulnerabilities released today (CVE-2026-109618 and CVE-2026-109619).
Only Qlik Cloud was impacted. Other Qlik products are NOT impacted.
The information in this post is disclosed in accordance with our published Security and Vulnerability Policies.
If you have any additional questions or concerns, you may contact our team directly at security@qlik.com.
Thank you for choosing Qlik,
The Qlik Security Team
...View More
Edit November 5th, 2026: Changed the impacted Direct Access Gateway release from 1.8.4 to 1.8.3.
BeginningJanuary 2027, theQlik Cloudand Direct Access Gateway(DAG)ODBC Connectors willno longer support connections secured with TLS 1.0 or TLS 1.1. To maintain uninterrupted connectivity, customers should upgrade their environments to use TLS 1.2 or later in advance.
For the relevant announcement and dates regarding Qlik Sense Enterprise on Windows, see ODBC Connector for Qlik Sense Enterprise on Windows: Upcoming End of Support for TLS 1.0 and TLS 1.1 in 2026.
Why will this change take effect?
InQlik Cloud, the change takes effect immediately on the 20th of January, 2027.
Direct Access Gateway will include the change with its upcoming1.8.3 release, meaning it will not be affected until an upgrade is performed.
Refer to the release notesandWhat's New upon release for details.
Why is this happening?
TLS 1.0 and TLS 1.1 are legacy encryption protocols that are no longer considered secure and have been deprecated across the industry for several years. Removing support for these older protocols in the ODBC connector aligns Qlik's connectivity stack with current security standards and reduces exposure to known vulnerabilities in outdated TLS implementations.
Who is affected?
This change affects the ODBC connector in Qlik Cloud and Direct Access Gateway only. Customers using Qlik Sense Enterprise on Windows should instead refer to the separate announcement covering that change.
Any data source connection made through the ODBC connector in Qlik Cloud or Direct Access Gateway that relies on TLS 1.0 or TLS 1.1 will be affected once support is removed, regardless of whether the TLS version is enforced by the data source itself, a network intermediary, or the client driver configuration.
What does this mean for me?
If your data source, ODBC driver, or the underlying operating system is currently configured to negotiate connections using only TLS 1.0 or TLS 1.1, those connections will fail once this change takes effect.
Reload tasks, extensions, and any other workflows using affected ODBC connections will no longer be able to connect to the data source.
This will impact you onJanuary 20, 2027 for Qlik Cloud, or following your Direct Access Gateway update to release 1.8.3.
What should I do?
Review and upgrade your environment so that all ODBC connections negotiate TLS 1.2 or greater before January 20, 2027 (Qlik Cloud) or before upgrading to Direct Access Gateway release 1.8.3.
If you are not already using TLS 1.2 or later, recreate the connection with the updated TLS configuration.
Questions?
If you have questions or need assistance planning your upgrade, our forums are open to you, and Support is only a chat away.
Thank you for choosing Qlik,Qlik Support
...View More
Hi everyone,
Want to stay a step ahead of important Qlik support issues? Then sign up for our monthly webinar series where you can get first-hand insights from Qlik experts.
The Techspert Talks session from October looked at AI Best Practices with Qlik Cloud.
But wait, what is it exactly?Techspert Talks is a free webinar held on a monthly basis, where you can hear directly from Qlik Techsperts on topics that are relevant to Customers and Partners today.
In this session we will cover:
AI in Qlik Cloud
Data prep best practices
How Answers works
Upcoming improvements
WATCH HERE
...View More
