---
description: Rezonate integration into Salesforce
---

# Salesforce Integration

Integrating with Salesforce can give Rezonate visibility into identities, privileges, and activities. These data points are then used to detect security gaps and to extend your identity-centric with salesforce identity information. The integration is only reading data.

{% hint style="info" %}
If your Salesforce tenant has an IP Restrictions policy, you will have to whitelist Rezonate's collector IP Address. More information available [collectors-ip-ranges](../troubleshooting-and-support/collectors-ip-ranges "mention")
{% endhint %}

**To Integrate please follow the following steps:**

Sign in to your salesforce tenant, with a privileged user, Find your instance URL copy it, and keep it for later.\
![](https://2355086414-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIkSba0W4HlnmPJ93gVOS%2Fuploads%2FJAg0t2QJSzpnlcTHxHqn%2Fimage.png?alt=media\&token=5d04b735-fbfa-45b7-aed4-e9c7e53dcbb2)

Click on Quick Settings, and then on Advanced setup \
![](https://2355086414-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIkSba0W4HlnmPJ93gVOS%2Fuploads%2FKJdj9at2E6zJV0deaVGi%2Fimage.png?alt=media\&token=1403462e-54e8-4c3d-a157-64cae568cd46)\


Select Apps -> Apps Manager  on the side-menu\
![](https://2355086414-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIkSba0W4HlnmPJ93gVOS%2Fuploads%2FGnMUCerwPYFin8FtG4tO%2Fimage.png?alt=media\&token=7143b558-84b1-4d1b-aad7-add4607a1bb9)\


Select New Connected App\
![](https://2355086414-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIkSba0W4HlnmPJ93gVOS%2Fuploads%2FgJyX8QoBQWCsvoDIxHdS%2Fimage.png?alt=media\&token=9c7c5e8d-3d5b-48dd-a0a6-acb55dedcc26)\


In the form please fill in the following information:

Connected App Name: **Rezonate**

API Name: **Rezonate**&#x20;

<figure><img src="https://2355086414-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIkSba0W4HlnmPJ93gVOS%2Fuploads%2FEEJlofQpIq9CC5exXGWX%2Fimage.png?alt=media&#x26;token=eb1bd251-53f4-4434-9de7-3b384cf2d422" alt=""><figcaption></figcaption></figure>

**After filing the basic information, make sure to tick the OAuth box and add the callback URL**&#x20;

```
https://app.rezonate.io/settings/authorize_salesforce
```

**Add the following OAuth Scopes:**

1. Manage user data via APIs (api)
2.  Perform requests at any time (refresh\_token,offline\_access)\
    \
    &#x20;

    <figure><img src="https://2355086414-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIkSba0W4HlnmPJ93gVOS%2Fuploads%2FOFGLbIM8OUgZJUiA1xPc%2Fimage.png?alt=media&#x26;token=1a6ba66a-1c44-40a2-9210-a173edc77591" alt=""><figcaption></figcaption></figure>

    Make sure to **remove the checkbox** from the "Require Proof Key for Code Exchange"\
    ![](https://2355086414-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIkSba0W4HlnmPJ93gVOS%2Fuploads%2FaWcpGzC49CplMsklaqsr%2Fimage.png?alt=media\&token=b09f247f-ba04-4816-b5b8-284530c6dfc8)
3. Also, make sure that the 2 checkboxes "Require secret for Web server flow" and "Require secret for refresh Token flow" are selected.\
   ![](https://2355086414-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIkSba0W4HlnmPJ93gVOS%2Fuploads%2FFHThSgYWthmNOPSb6T2B%2Fimage.png?alt=media\&token=ca347c37-c2fe-4c1b-a087-f7c83dc07045)\


Click the save\create button. After creating the application, you should see the button "Manager Consumer Details", and click on it.

<figure><img src="https://2355086414-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIkSba0W4HlnmPJ93gVOS%2Fuploads%2FCtSd7OcX7qje05M9Tss8%2Fimage.png?alt=media&#x26;token=14a8b75b-1cd6-4298-a6f5-5b6d67ec94f9" alt=""><figcaption></figcaption></figure>

You may be required to verify your identity, and after that, you will see a page with the key and secret, please copy them.

<figure><img src="https://2355086414-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIkSba0W4HlnmPJ93gVOS%2Fuploads%2F9vCu8CFkWCwJFmB0JSBu%2Fimage.png?alt=media&#x26;token=2972624f-a610-4966-bef9-21a92bda03f3" alt=""><figcaption></figcaption></figure>

***



### Creating a Limited Read-Only User for the Authorization Process

After we have created and configured the application, we will need to create a Read-Only user to authorize it. For that, create a user with the Read-Only profile role, and log in. We will use it to authorize the application in the next step.

### Finishing the integration from the Rezonate Side

Now that we have the app credentials and the read-only user. we can sign in to Rezonate, and install the integration. for this one, click on settings, integrations, Add Integration, and select Salesforce.

<figure><img src="https://2355086414-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIkSba0W4HlnmPJ93gVOS%2Fuploads%2F8jYoFuJn1jroq0NXmpzS%2Fimage.png?alt=media&#x26;token=5b0c9bc9-50cc-45b4-b883-68d9573e3e73" alt=""><figcaption></figcaption></figure>

Fill out the form with the recently collected information, and click Connect. Salesforce will ask you to authorize and approve the application, and you will be redirected to Rezonate, seeing that the integration was successfully added.\


<table><thead><tr><th width="324">Property</th><th>Value</th><th data-hidden></th></tr></thead><tbody><tr><td>Account Id</td><td>Your own account name (call it how you prefer)</td><td></td></tr><tr><td>Client Id</td><td>The Consumer Key you copied from earlier</td><td></td></tr><tr><td>Client Secret</td><td>Teh Consumer Secret you copied from earlier </td><td></td></tr><tr><td>Salesforce Url</td><td>The domain (starts with https://) for your salesforce tenant login</td><td></td></tr></tbody></table>

After filing the information click on integrate and the process is completed!



