Connecting Salesforce

Configure an External Client App to automate JIT and lifecycle management for Salesforce users

Step 1: Create an App Integration

1.1 Go to Setup > Apps > External Client Apps > External Client App Manager

1.2 In the heading, click on “New external client app”

1.3 Fill required fields in the Basic Information


1.4 Enable OAuth Settings (API > Enable OAuth) and set the settings below:
- Callback URL: any valid URL (we don't use it, but it is required)

- OAuth Scopes: Manage user data via APIs (api)
- Flow Enablement: Enable Client Credentials Flow

- Security: Keep defaults

1.5 Then create it.

Step 2: Update the External Client App Policies

2.1 Access the created External Client App page (after creation, you are redirected to it)


2.2 Click to edit the policies

2.3 Enable the Client Credentials Flow and set the Run As (Username)

Step 3: Get the app credentials

3.1 On the External Client App page, go to Settings tab

3.2 Open the  OAuth Settings and click on the button to get the Consumer Key and Secret

3.3 Verify your identity

3.4 Get the Consumer Key and Consumer Secret

Step 4: Get the company domain

4.1 Go to SetUp > Settings > My Domain

4.2 You will see the “My Domain Details”

4.3 The domain is the part before .salesforce.com of your “Current Domain URL” 

Current My Domain URL: orgfarm-5a7dad8e67-dev-ed.develop.my.salesforce.com
Domain: orgfarm-5a7dad8e67-dev-ed.develop.my

Step 5: Set up the integration

5.1 Navigate to the Connections page in Trustle from the left menu

5.2 Under Identity Providers find the Salesforce logo and choose Connect

5.3 Provide the Credentials from step 3 and the Domain from step 4. 

5.4 Click Test Connection

5.5 Upon successfully testing the connection, click Save Connection

Matthew Hathaway