Data Observability platform Help

Salesforce setup

SelectZero supports a custom integration with Salesforce using its own API

Creating Salesforce user

Creating profile

We need to create a profile with specific access scopes, so SelectZero can only see specific objects with read-only rights

  1. Under Salesforce "Setup" navigate to Users -> Profiles

  2. Clone a standard profile, such as "Standard Platform User"

  3. Under section "Standard Object Permissions" choose the objects you want to access (Give them "Read" rights)

  4. Save profile

Creating integration user

  1. Under your Salesforce application, go to "Setup" in the top right corner (Must have administrator rights)

  2. Under left side menu go to Users -> Users

  3. Create "New User"

  4. Fill in details

    salesforce_example.png
    • Last name - Give it a name that reflects it's used for SelectZero integration (for example selectzero)

    • Email - Use an email you have access to

    • User License - Salesforce Integration

    • Profile - Profile created in previous step

Creating External Client App

  1. Navigate to Apps -> External Client Apps -> External Client App Manager

  2. Press "New External Client App" from top right corner

  3. Create new app

    exampleSalesForceExternalApp.png
    • External Client App Name - A name for SelectZero integration

    • Contact email - Integration owner email

    • Distribution State - Local

    • Enable OAuth

      exampleSalesforceExternalAppOAuth.png
      • Callback URL - https://localhost/oauth/callback (we won't use it, but it's needed)

      • OAuth Scopes

        • Manage user data via APIs (api)

        • Perform requests at any time (refresh_token, offline_access)

  4. Open the created external app

  5. Under "Policies" tab press edit

    exampleSalesforceExternalAppPolicies.png
    • Under OAuth Policies

      • Permitted Users - Admin approved users are pre-authorized

      • Available Profiles - Minimum Access - API Only Integrations

      • Available Permissions Sets - External Client App Access

Finding External Client App Customer id

  1. Navigate to Apps -> External Client Apps -> External Client App Manager

  2. Open the app you created

  3. Under "Settings" tab open "OAuth Settings"

  4. Press "Consumer Key and Secret" button

    exampleSalesforceCertificates.png
  5. This will take you to a page with "Consumer Key" which will be used for SelectZero connection

Creating Salesforce connection

  1. From connections page add a new Salesforce connection

    salesforce_example.png
    • Server - Salesforce URL (Can be found in Salesforce Company Settings -> My Domain)

    • User - User created in step Creating Salesforce SelectZero user

    • Client id - Consumer Key from Salesforce

  2. After connection is added, certificate key pair is automatically generated

  3. Download connection public certificate from connection view

    Get public certiciate

Adding certificate to Salesforce

  1. Navigate to Apps -> External Client Apps -> External Client App Manager

  2. Open the app you created

  3. Under "Settings" press "Edit" button

  4. Under "OAuth Settings" find "Flow Enablement"

  5. Enable "Enable JWT Bearer Flow" and upload the certificate from previous step

Last modified: 04 February 2025