Skip to main content
User provisioning with Salesforce
Bianca Wetter avatar
Written by Bianca Wetter
Updated over a week ago

Welcome to a new era of efficiency! Integrating Salesforce with Sana not only enhances data integrity and user management but also transforms your operational workflows into a more streamlined, secure, and user-friendly experience. Whether you're updating user roles, provisioning new users, or ensuring stringent security standards, this integration is your gateway to operational excellence.

Dive into our guide to discover how this powerful integration can make a significant difference in your daily operations and strategic outcomes. Let's get started on simplifying and securing your user provisioning with Salesforce and Sana!

💡 Note! To follow the below steps, you must have super-user access on your organization's Salesforce account.

How to set up Salesforce User Provisioning

Step 1: Create the Salesforce Profile

  1. In the quick find, type in 'Profile' and click on 'New Profile'.

  2. You must select an existing profile to clone from, you can use the 'Standard User' as a reference for the profile you'll be creating. For the profile name, you can name this as you see fit.

  3. Once the profile is created, click on edit and scroll down to the Administrative Permissions section, you have to enable the API enabled and API Only User option ticked.

Step 2: Create the Salesforce User

  1. In the quick find, type in 'Users' and click on 'New User'.

  2. Fill out the required information, under General Information.

    First name

    Last name

    Role - As you see fit

    Email - You would want to set this as the distribution/group list email

    User License - Salesforce / Salesforce Integration

    Profile - The profile created on Step 1.

  3. Click 'Save'.

Step 3: Create the Salesforce Connected App

  1. In the quick find, type in 'App Manager' and click on 'New Connected App'.

  2. Fill out the required information, under Basic Information and enable the permissions.

    Connected App Name

    Contact Email - You would want to set this as the distribution/group list email

    API (Enable OAuth Settings) - Enabled

    Callback URL - https://localhost

    Selected OAuth Scopes - Manage user data via APIs (api)

    Enable Client Credentials Flow - Enabled

  3. Click 'Save'.

⚠️ Note: You will only see the above screenshot once you've enabled the API (Enable OAuth Settings) option.

Step 4: Configure the Salesforce Running User under Client Credentials Flow

  1. In the quick find, type in 'App Manager' and locate the connected app you created in Step 3. Then, click on the dropdown and select 'Manage', followed by 'Edit Policies'.

  2. Scroll down until you reach the 'Client Credentials Flow' section. Click on the hourglass button and search for the Salesforce User you created in Step 2. Then, click 'Save'.

Step 5: Create the Salesforce Report and securing the Secret Key

  1. Now that you've completed the steps above, it's time to create the report containing the contacts/users you want to provision in Sana. You want to ensure that the report can be accessed by the API user / profile / connected app.

  2. In the quick find, type 'App Manager' and click on 'View/Manage' for the connected app we've created. Under 'API (Enable OAuth Settings)', you will find the 'Consumer Key and Secret'. Click on 'Manage Consumer Details' (you will need to share this information with us)

  3. After saving the Consumer Key and Secret, you will need to share the report ID and domain of your Salesforce organization. For reference, you can see that when viewing your report here

Interested in reading more about automating course enrollment with Salesforce in Sana? Read more in this article.

⚠️ Once you've completed the above steps, it's important to note the following to share with your Sana Integrations Specialist or Sana Engagement Manager. Please contact us first so we can give you instructions on how to securely share it.

  • Consumer Key and Secret

  • Report ID (Must contain first name, last name, email, unique ID)

  • Salesforce Domain

Alternative way of Integrating data to Sana?

You can alternatively, send us a SOQL query to your report and we can use that to integrate the data. You can read more about it here.

Watch the video instructions here

Et voilá - you are done! We continuously expand the customization capabilities of our integrations. So if you have ideas, feel free to reach out.

Did this answer your question?