Salesforce | Insights

Prerequisites

You must be a Salesforce System Administrator.

🚧

Important information

Third-party documentation is subject to change. Updates might not be reflected in BeyondTrust documentation. For the most up-to-date information, refer to Salesforce documentation.

Create Salesforce external client application

Create custom profile

1. Navigate to Setup page by clicking on the gear icon.
2. From Setup, enter Profiles in the Quick Find box, and select Profiles.
3. In the Profiles list page, click New Profile.
4. In Clone Profile page
   1. Select Minimum Access - Salesforce for existing profile.
   2. Enter BT Insights Connector.
   3. Click Save.
5. On the new profile page, under System, select System Permissions.
   Enable the following:
   • System
     • API Enabled
     • API Only User
     • Customize Application: Requires View Setup and Configuration, Manage Custom Permissions
     • Manage Auth. Provider: Requires Manage Users, Author Apex
     • Manage Package Licenses
     • Modify Metadata Through Metadata API Functions
     • View All Data: Requires Read and View All on all standard and custom objects, View Setup and Configuration, View All Forecasts, View Event Log Files, View Dashboards in Public Folders, View Reports in Public Folders, View Login Forensics Events, View Real-Time Event Monitoring Data
     • View all External Client Apps
     • View Roles and Role Hierarchy
     • View Setup and Configuration: Requires View Roles and Role Hierarchy
     • View Devices* (only available if Mobile Device Tracking feature is enabled)
   • Users
     • View all Users
6. Click Save.

Create an integration user

1. From Setup, in the Quick Find box, enter Users, and then select Users.
2. Click New User.
   1. First name: BT Insights Connector
   2. Last name: User
   3. Enter an email address and a unique username in the form of an email address. By default, the username is the same as the email address.
   4. Record the username to use it later.
   5. User License: Salesforce
   6. Profile: BT Insights Connector
3. Click Save.

Create external client application

1. From Setup, in the Quick Find box, enter App Manager, and then select App Manager.
2. Click New External Client App.
3. On New External Client App page:
   1. Enter external client app name: BT Insights Connector
   2. Enter contact email
   3. Under API (Enable OAuth Settings), check Enable OAuth
   4. Under App Settings
      1. Callback URL: Any URL starts with HTTPS as it won’t be used (https://localhost:8080)
      2. OAuth Scopes
         1. Select Manage user data via APIs (api) in Available OAuth Scopes
         2. Click the top triangle/arrow to move scope to Selected OAuth Scopes
   5. Under Flow Enablement
      1. Check Enable Client Credentials Flow
   6. Under Security, ensure that all checkboxes are unchecked.
4. Click Create.
5. On newly created External client app page
   On the Policies tab, click Edit
   1. Scroll to OAuth Flows and External Client App Enhancements, check Enable Client Credentials Flow.
   2. Run As (Username): Enter the username of the integration user created earlier.
   3. Click Save.
      On the Settings page, navigate to OAuth Settings
   4. Under App Settings, click Consumer Key and Secret
   5. Verify identity (if requested).
   6. Record Consumer Key and Consumer Secret.

Create Salesforce connector

1. From Home go to Menu > Connectors.
2. Click View all cloud connectors.
3. Click Create Connector.
4. Select Salesforce.
5. Provide the following information to connect to Salesforce:
   • Name: A human-readable name for your Salesforce connector, typically the Salesforce org name.
   • Domain: Your Salesforce domain, e.g., https://your-domain.salesforce.com.
   • Consumer Key: Copy the Consumer Key recorded in Step 5 in Create External Client Application.
   • Consumer Secret: Copy the Consumer Secret recorded in Step 5 in Create External Client Application.
6. Click Create Connector.