
31ycb (31ycb) asked a question.
Hi,
I've integrated provisioning successfully between Okta and Salesforce. I have used my System administrator account in Okta, and it has the permissions needed as defined in the Prerequisites (custom profile) in https://help.okta.com/en-us/Content/Topics/Provisioning/Salesforce/sfdc-enable-provisioning.htm
Using my Salesforce system administrator is not ideal it has many permission sets, I need to use a service account in Salesforce.
Also, that service account has to be able to create the connected app needed in salesforce.
What other permission needed other then the one defined in the custom profile (in the link above), to be able to create the connected app, and any other permission to complete integration. (e.g least privilege permission)
Thanks,

Hi, @31ycb (31ycb)
Thank you for posting on our Community page!
As the article you mentioned states, the prerequisites are to create a custom user with the following permissions:
“ A custom user profile in Salesforce (needed for both REST and SOAP integrations). Once you have created a custom profile in the Salesforce portal, edit the profile's Administrative Permissions to enable the following:
Please check this table to see what Admin types have the permissions you need:
https://help.okta.com/en-us/Content/Topics/Security/administrators-admin-comparison.htm#Applicat
Or you can create a custom user:
https://help.okta.com/en-us/Content/Topics/Security/custom-admin-role/custom-admin-roles.htm
Thank you for reaching out to our Community and have a great day!
_____________________________________________________________________________
Community members help others by clicking Like or Select as Best on responses. Try it today.
_____________________________________________________________________________
Great thanks Laura!