Salesforce

Connect Salesforce to Trustle to get insight into over-privileged and unused accounts, and to adopt just-in-time access management.

Configure Salesforce

Step 1: Create an App Integration

1. Go to Setup → Apps → External Client Apps → External Client App Manager.

   

2. Click New external client app.

   

3. Fill in the required fields under Basic Information.

   

4. Enable OAuth settings under API → Enable OAuth, and set:

   • Callback URL: https://console.trustle.io/salesforce-callback. Trustle doesn’t use this URL, but Salesforce requires it.
   • OAuth Scopes: Manage user data via APIs (api).
   • Flow Enablement: Enable Client Credentials Flow.
   • Security: Keep the defaults.

   

5. Create the app.

Step 2: Create the Service Account Permission Set

1. Go to the Permission Set panel (Administration → Users → Permission Set).

   

2. Click New at the top of the table.

   

3. Give the permission set a name, for example “Trustle Integration Permission Set”.

   

4. Save it.

5. Go to System → System Permissions on the new permission set’s page.

   

6. Edit the permissions and enable Api Enabled.

   Note

   Enabling Api Enabled automatically enables other system permissions.

   

7. Enable Manage Users too (Users → Manage Users).

   Note

   Enabling Manage Users automatically enables other user permissions.

   

8. Save it.

Step 3: Create and Configure the Service Account

1. Go to the Users Administration page (Administration → Users → Users).

   

2. Create the service account user. Set it to the Minimum Access - Salesforce profile (Salesforce User License).

   

3. Go to the service account user’s page after you create the user. Add the permission set there (User → Permission Set Assignments → Edit Assignment).

   

4. Add the Trustle permission set and save it.

   

Step 4: Update the External Client App Policies

1. Open the external client app page. Salesforce redirects you here after you create the app.

   

2. Click to edit the policies.

   

3. Enable the Client Credentials Flow and set Run As (Username) to the Trustle service account.

   

Step 5: Get the App Credentials

1. Go to the Settings tab on the external client app page.

   

2. Open OAuth Settings and click the button to get the Consumer Key and Secret.

   

3. Verify your identity.

   

4. Get the Consumer Key and Consumer Secret.

   

Step 6: Get the Company Domain

1. Go to Setup → Settings → My Domain.

   

2. Find the My Domain Details section on this page.

   

3. The domain is the part of your Current Domain URL before .salesforce.com.

   For example, if the Current My Domain URL is orgfarm-5a7dad8e67-dev-ed.develop.my.salesforce.com, the domain is orgfarm-5a7dad8e67-dev-ed.develop.my.

Connect in Trustle

1. Go to the Connections page in Trustle from the left menu.
2. Under Identity Providers, find the Salesforce logo and click Connect.
3. Provide the Consumer Key and Consumer Secret from Get the App Credentials, and the domain from Get the Company Domain.
4. Click Test Connection.
5. Click Save Connection after the connection test succeeds.