Skip to main content
Feedback

Salesforce connection

Salesforce is a cloud-based CRM platform that stores customer, sales, and operational data. To extract and load Salesforce data using Data Integration, you must first establish a secure connection between your Salesforce account and the Data Integration platform. The Salesforce connector supports three authentication methods: Credentials, OAuth2, and JWT Bearer (API-Only).

Prerequisites

Confirm the following before creating a Salesforce connection:

  • Salesforce edition with API access: Enterprise, Unlimited, and Developer editions include API access. Professional edition is available at an additional cost. Contact your Salesforce admin to confirm API access is enabled for your org.
  • API Enabled permission: The Salesforce user account used for the connection must have the API Enabled system permission. To verify, in Salesforce, navigate to Setup > Users > Profiles, select the profile, and confirm API Enabled is checked under System Permissions.
  • For Credentials authentication: You need your Salesforce username, password, and security token. Refer to Obtaining your Salesforce security token.
  • For OAuth2 authentication: Salesforce requires you to install connected apps in your org, or the authenticating user must hold the Approve Uninstalled Connected Apps or Use Any API Client permission. Your Salesforce admin may need to pre-authorize the Data Integration connected app before you can complete authentication. For more information, refer to Manage OAuth Access Policies for a Connected App.
  • For JWT Bearer authentication: Your Salesforce admin must configure a connected app for the JWT Bearer flow, with digital signatures enabled and a certificate uploaded. You need that app's Consumer Key, a Private Key (PEM) file matching the uploaded certificate, and the Salesforce username the connection authenticates as.

Understanding Credentials authentication

With Credentials authentication, you authenticate directly using your Salesforce UserName, Password, and security Token. No browser redirect is required.

Understanding OAuth2 authentication

When you connect using OAuth2, Data Integration redirects you to Salesforce to log in and approve the required permissions for Data Integration to access your Salesforce data. You do not need to create a connected app or configure a callback URL. Data Integration handles this as part of the integration.

Understanding JWT Bearer authentication

With JWT Bearer (API-Only) authentication, the connection authenticates as a Salesforce connected app using a certificate, with no interactive login. This method suits server-to-server integrations that run without a user present.

Obtaining your Salesforce security token

Required only for Credentials authentication.

  1. Log in to Salesforce.
  2. Click your avatar and select Settings.
  3. Under My Personal Information, select Reset My Security Token.
  4. Click Reset Security Token.
  5. Salesforce emails the new token to the address on your account. Use this value in the Token field when you create the connection.

Establishing a Salesforce connection

  1. Navigate to the Data Integration Console.
  2. Click Connections and select + New Connection.
  3. Choose Salesforce.
  4. Enter a Connection Name.
  5. Select one of the following environment types:
    • Production Environment: The live Salesforce system where real business data and processes run.
    • Sandbox Environment: An isolated testing environment that does not affect live data.
  6. Under Credentials Type, select your authentication method.

Option A: Credentials

  1. Enter your UserName.
  2. Enter your Password.
  3. Enter your Token. Refer to Obtaining your Salesforce security token.
  4. Click Test Connection.
  5. Click Save.

Option B: OAuth2

  1. Click Connect with Salesforce. Data Integration redirects you to the Salesforce login page.
  2. After Data Integration redirects you back, click Test Connection.
  3. Click Save.

Option C: JWT Bearer (API-Only)

  1. Enter your Consumer Key from your Salesforce connected app.
  2. Enter your Integration Username, the Salesforce user the connection authenticates as.
  3. Upload your Private Key (PEM) file by dragging it into the field or selecting Browse for a file.
  4. Optionally, enter an Audience URL to override the default login URL.
  5. Click Test Connection.
  6. Click Save.
On this Page