We are attempting to connect one Salesforce org to multiple others (Production / Sandbox) using a web server login flow from a managed package. Our approach involves storing 'refresh_token' and 'access_token' in either custom settings or custom metadata. Is this method optimal, or could it potentially pose security risks.Is there any other ways to store token in salesforce.
If above ways are wrong, please suggest any other alternate ways to connect multiple salesforce org from managed package.
If you're looking for a coding approach, using Named Credentials with OAuth 2.0 is a secure way to connect multiple Salesforce orgs from a managed package. However, if you want a no-code alternative, Skyvia (https://skyvia.com/connectors/salesforce) provides a seamless way to sync data between Salesforce orgs without managing authentication manually. It also supports scheduled and automated syncs.
