--- title: "Connect Clarity Security and Salesforce" slug: "salesforce" description: "Learn how to connect Clarity Security to Salesforce to automate your identity life cycle management and user access reviews." tags: ["application", "connectors", "how-to", "marketplace"] updated: 2024-11-13T17:19:34Z published: 2024-11-13T17:19:34Z canonical: "help.claritysecurity.com/salesforce" --- > ## Documentation Index > Fetch the complete documentation index at: https://help.claritysecurity.com/llms.txt > Use this file to discover all available pages before exploring further. # Salesforce This guide will teach you how to set up the connector between [Salesforce](https://www.salesforce.com/) and [Clarity Security](https://claritysecurity.io/). **Estimated time to complete: 15** minutes If you encounter any problems, please contact your support team or [support@claritysecurity.io](mailto:support@claritysecurity.io). --- ## Supported Connector Capabilities Below are capabilities supported by the connector at this time. | **Method** | **Supported** | | --- | --- | | Provision User | Yes | | List Groups, Policies, and Roles | Yes | | Add User to Groups, Policies, and Roles | Yes | | Remove User from Groups, Policies, and Roles | Yes | | Deactivate User | Yes | | Delete User | No | --- ## How to Setup the Connector ### **Step 1: Log in to** [**Salesforce**](https://login.salesforce.com/) ### **Step 2: Click the Gear icon and then Setup** ![Gear - Setup for current app](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image-1679498715607.png?sv=2026-02-06&spr=https&st=2026-10-31T07%3A42%3A11Z&se=2026-10-31T08%3A42%3A11Z&sr=c&sp=r&sig=fagdOXeD8NetuNSyPNTVo00IbYTb29P0x3hC4mJVwro%3D) ### **Step 3: Search for App Manager** ![Search bar - app manager](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image-1679498727684.png?sv=2026-02-06&spr=https&st=2026-10-31T07%3A42%3A11Z&se=2026-10-31T08%3A42%3A11Z&sr=c&sp=r&sig=fagdOXeD8NetuNSyPNTVo00IbYTb29P0x3hC4mJVwro%3D) ### **Step 4: Click New Connected App** ![Lightning Experience App Manager - New connected app](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image-1679498737910.png?sv=2026-02-06&spr=https&st=2026-10-31T07%3A42%3A11Z&se=2026-10-31T08%3A42%3A11Z&sr=c&sp=r&sig=fagdOXeD8NetuNSyPNTVo00IbYTb29P0x3hC4mJVwro%3D) ### **5: Select Create a Connected App** ![](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Salesforce Create a Connected App.png?sv=2026-02-06&spr=https&st=2026-10-31T07%3A42%3A11Z&se=2026-10-31T08%3A42%3A11Z&sr=c&sp=r&sig=fagdOXeD8NetuNSyPNTVo00IbYTb29P0x3hC4mJVwro%3D) ### **6: Configure the new Connected App** ![](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Salesforce Application Settings(2).png?sv=2026-02-06&spr=https&st=2026-10-31T07%3A42%3A11Z&se=2026-10-31T08%3A42%3A11Z&sr=c&sp=r&sig=fagdOXeD8NetuNSyPNTVo00IbYTb29P0x3hC4mJVwro%3D) - **Connected App Name**: Descriptive Name for the App - **API Name**: Auto-filled - **Contact Email**: Email address - **Contact Phone**: Optional - **Logo Image URL**: Optional - **Icon URL and Info URL**: Optional - **Description**: A helpful description for the application. ### **Step 7: Configure OAuth Settings** You will need to check the **Enable OAuth Settings** box to see the following configuration options. ![](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Salesforce OAuth Settings(1).png?sv=2026-02-06&spr=https&st=2026-10-31T07%3A42%3A11Z&se=2026-10-31T08%3A42%3A11Z&sr=c&sp=r&sig=fagdOXeD8NetuNSyPNTVo00IbYTb29P0x3hC4mJVwro%3D) - **Enable OAuth Settings**: CHECK - **Callback URL**: https://**YOUR_TENANT**.claritysecurity.io/application/oauthProcessCode/salesforce - **Selected OAuth Scopes**: Add the following - **Full access (full)** - **Perform requests at any time (refresh_token, offline_access)** - **Require Proof Key for Code Exchange (PKCE) Extension for Supported Authorization Flows**: UNCHECK - **Require Secret for Web Server Flow**: UNCHECK - **Require Secret for Refresh Token Flow**: UNCHECK Click the **Save** button to complete the App creation ### **Step 8: Click Continue when prompted** ![New connected app Continue prompt](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image-1679498859964.png?sv=2026-02-06&spr=https&st=2026-10-31T07%3A42%3A11Z&se=2026-10-31T08%3A42%3A11Z&sr=c&sp=r&sig=fagdOXeD8NetuNSyPNTVo00IbYTb29P0x3hC4mJVwro%3D) ### **Step 9: Retrieve the Consumer Key and Consumer Secret** From the App page, locate and click the Manage Consumer Details button. ![](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Salesforce Manage Consumer Details.png?sv=2026-02-06&spr=https&st=2026-10-31T07%3A42%3A11Z&se=2026-10-31T08%3A42%3A11Z&sr=c&sp=r&sig=fagdOXeD8NetuNSyPNTVo00IbYTb29P0x3hC4mJVwro%3D) On the resulting page, copy and temporarily store the **Consumer Key** and Consumer Secret for use in later steps. Then click the **Back to Manage Connected Apps** button in the top right. > [!CAUTION] > Staged Consumer Details > > **Do Not** click on any of the button at the bottom of this page, you may invalidate the keys you just generated/copied. ![](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Salesforce View Consumer Key and Secret.png?sv=2026-02-06&spr=https&st=2026-10-31T07%3A42%3A11Z&se=2026-10-31T08%3A42%3A11Z&sr=c&sp=r&sig=fagdOXeD8NetuNSyPNTVo00IbYTb29P0x3hC4mJVwro%3D) ### **Step 10: Log in to Clarity Security** > https://your-tenant.claritysecurity.io/ ### **Step 11: Click On Applications and select Marketplace** ![Applications Marketplace](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image-1679498879927.png?sv=2026-02-06&spr=https&st=2026-10-31T07%3A42%3A11Z&se=2026-10-31T08%3A42%3A11Z&sr=c&sp=r&sig=fagdOXeD8NetuNSyPNTVo00IbYTb29P0x3hC4mJVwro%3D) ### **Step 12: Search for Salesforce and click Connect** ![Salesforce App Connector](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image-1679498889264.png?sv=2026-02-06&spr=https&st=2026-10-31T07%3A42%3A11Z&se=2026-10-31T08%3A42%3A11Z&sr=c&sp=r&sig=fagdOXeD8NetuNSyPNTVo00IbYTb29P0x3hC4mJVwro%3D) ### **Step 13: Fill out the Connect App form in Clarity** - **client_id:** This is the **Consumer Key** from Step 9. - **client_secret:** This is the **Consumer Secret** from Step 9. ![Common App Configuration Steps - Step 1](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image-1679498898944.png?sv=2026-02-06&spr=https&st=2026-10-31T07%3A42%3A11Z&se=2026-10-31T08%3A42%3A11Z&sr=c&sp=r&sig=fagdOXeD8NetuNSyPNTVo00IbYTb29P0x3hC4mJVwro%3D) #### Details for fields common to all applications can be found in the following article: [Common App Configuration Steps](/v1/docs/common-app-steps). ### Step 14: Fill out the App Settings form ![Configure App Step 2 - App Settings](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Configure%20App%202(3).png?sv=2026-02-06&spr=https&st=2026-10-31T07%3A42%3A11Z&se=2026-10-31T08%3A42%3A11Z&sr=c&sp=r&sig=fagdOXeD8NetuNSyPNTVo00IbYTb29P0x3hC4mJVwro%3D) ### Step 15: Fill out the User Settings form ![Configure App Step 3 - User Settings](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Configure%20App%203(2).png?sv=2026-02-06&spr=https&st=2026-10-31T07%3A42%3A11Z&se=2026-10-31T08%3A42%3A11Z&sr=c&sp=r&sig=fagdOXeD8NetuNSyPNTVo00IbYTb29P0x3hC4mJVwro%3D) ### Step 16: Validate Your Selections and Save Save Clicking the Save button will trigger the first full sync for your application (even if you selected Manual syncing). This includes Service Users, Entitlements, Service User Entitlements, Service User Attributes. --- ## Need Help? If you have any problems, contact your customer success team. You can also get in touch with our general support [via email](mailto:support@claritysecurity.io), open a [support ticket](https://support.claritysecurity.com/home). Our general support team is available Monday - Friday from 8:00 AM - 6:30 PM CST. A Service User is a user, or service account, discovered by Clarity in a downstream application. An Entitlement is an assignable permission found in a downstream application. Common examples include licenses, groups, and policies. Service User Entitlements are the pairings of users and active entitlement access in downstream applications. An attribute is a piece of information used to describe a service user, entitlement, or identity. Common examples include First Name, Last Name, Job Title, Department, etc.