Salesforce Certificate

Salesforce supports OAuth certificate authentication, allowing secure, certificate-based access to its APIs and services. The PeopleSync Salesforce Certificate is designed to work seamlessly with this authentication method.

As with the Entra ID App Certificate, the PeopleSync Salesforce Certificate’s public key needs to be uploaded to Salesforce.

When using Salesforce Certificate, PeopleSync will use the Salesforce OAuth 2.0 JWT Bearer Flow for Server-to-Server Integration.

PeopleSync will alert administrators about certificates that are set to expire in less than 30 days. These notifications appear in the backend log to ensure timely awareness. Additionally, if mail notifications are configured, PeopleSync will send email alerts, helping prevent service interruptions due to certificate expiration.

Salesforce Certificates contain the following information:

• Consumer Key : The Salesforce Consumer Key is a unique identifier assigned to each app registration within Salesforce. It is similar to the client id in Entra ID.

• Username: The Salesforce user whose permissions, sharing, and limits the issued access token will obey.

Creating an OAuth Application in Salesforce

1. In Salesforce Setup, go to  Apps > External Client Apps > Settings > External Client App Manager.

2. Click New Connected App. In the Basic Information section fill External Client App Name and Contact Email.

3. In the API (Enable OAuth Settings) section click Enable OAuth Settings.

4. Fill in the following OAuth settings:

5. Callback URL:  http://localhost:33333

6. Available OAuth Scopes : Perform requests at any time (refreshtoken, offline_access), Manage user data via APIs (api)

7. Enable JWT Bearer Flow.

8. Disable Require Proof Key for Code Exchange (PKCE) extension for Supported Authorization Flows

9. Click the Create button at the bottom of the page.

10. Under Settings > OAuth Settings, click the Consumer Key and Secret button. Make a note of the consumer key.

Creating a Salesforce Certificate

After you have created the OAuth Application in Salesforce, you can create the corresponding Salesforce Certificate in PeopleSync.

1. In PeopleSync Console, navigate to Agents > Action Accounts.

2. Click on the arrow next to the New icon and select Salesforce Certificate.

3. Enter the consumer key from your Salesforce OAuth application.

4. Enter the salesforce username that is being impersonated.

5. Click on the Download Public Key PEM) icon to download the certificate’s public key

6. Now go back to your Salesforce OAuth application.

7. In the Settings tab, click on Edit.

8. Below Enable JWT Bearer Flow, upload the Certificate from PeopleSync.

9. Save the OAuth Application.