<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D54z00009B5mh7CABOkta Classic EngineIntegrationsAnswered2024-04-17T10:09:26.000Z2023-05-10T18:53:54.000Z2023-05-16T23:08:20.000Z

31ycb (31ycb) asked a question.

Provisioning salesforce custom role

Hi,

 

I've integrated provisioning successfully between Okta and Salesforce. I have used my System administrator account in Okta, and it has the permissions needed as defined in the Prerequisites (custom profile) in https://help.okta.com/en-us/Content/Topics/Provisioning/Salesforce/sfdc-enable-provisioning.htm

 

Using my Salesforce system administrator is not ideal it has many permission sets, I need to use a service account in Salesforce.

Also, that service account has to be able to create the connected app needed in salesforce.

What other permission needed other then the one defined in the custom profile (in the link above), to be able to create the connected app, and any other permission to complete integration. (e.g least privilege permission)

 

Thanks,


  • User16594883467582706479 (Customer Support Online Experience)

    Hi, @31ycb (31ycb)​ 

     

    Thank you for posting on our Community page!

     

    As the article you mentioned states, the prerequisites are to create a custom user with the following permissions:

    “ A custom user profile in Salesforce (needed for both REST and SOAP integrations). Once you have created a custom profile in the Salesforce portal, edit the profile's Administrative Permissions to enable the following:

    • API Enabled.
      • Manage Users: Enabling this option automatically enables the following: Assign Permission Sets, Manage Internal UsersManage IP Addresses, Manage Login Access Policies, Manage Password Policies, Manage Profiles and Permission Sets, Manage Roles, Manage Sharing, Reset User Passwords and Unlock Users, View All Users, View Roles an, Hierarchy, View Setup and Configuration.
    • See also Salesforce Create or Clone Profiles documentation.
    • Assign the permissions directly to the profile. Don't add the permissions through permission sets.”

     

    Please check this table to see what Admin types have the permissions you need:

    https://help.okta.com/en-us/Content/Topics/Security/administrators-admin-comparison.htm#Applicat

     

    Or you can create a custom user:

    https://help.okta.com/en-us/Content/Topics/Security/custom-admin-role/custom-admin-roles.htm

     

    Thank you for reaching out to our Community and have a great day!

     

    _____________________________________________________________________________

    Community members help others by clicking Like or Select as Best on responses. Try it today.

    _____________________________________________________________________________

    Expand Post
This question is closed.
Loading
Provisioning salesforce custom role