Skip to main content

Documentation Index

Fetch the complete documentation index at: https://infisical.com/docs/llms.txt

Use this file to discover all available pages before exploring further.

Infisical supports the OAuth 2.0 Client Credentials flow to connect with your Salesforce org.

​
Configure a Connected App in Salesforce

1

Open Settings

In the top-right corner, click the gear icon.Gear IconClick the Setup option.Open Setup
2

Create a Connected App

In Salesforce Setup, search for External Client App Manager and select it from the results.Search External Client App ManagerClick New External Client App.Create External Client AppProvide a name, API name, and contact email.Basic Information
3

Enable OAuth Settings

Under API (Enable OAuth Settings):
  • Check Enable OAuth.
  • Provide a callback URL.
    The callback URL is only used by Salesforce’s OAuth Web Server Flow. Since this External Client App is used solely to rotate secrets via the Client Credentials Flow, the callback URL is never invoked — any valid URL (e.g. https://localhost) works.
  • Add the OAuth scopes your integration requires. For secret rotation, you must select Manage user data via APIs (api).
  • Check Enable Client Credentials Flow and Enable Token Exchange Flow (along with the sub-option Require secret for Token Exchange Flow). OAuth Scopes and Flow Enablement
Under Security, enable Require secret for Web Server Flow and Require secret for Refresh Token Flow.Save the Connected App by clicking Create. It may take a few minutes for the new app to become available.OAuth Security Settings
4

Configure the Policies

Go back to the External Client App Manager page and select the External Client App you just created. To do this, search again for External Client App Manager.External created appClick the app you just created, select the Policies tab, and click Edit.Policies TabUnder the OAuth Policies section, check Enable Client Credentials Flow and provide a username under Run As (Username) to specify which user the flow runs as.Policies
5

Copy the Consumer Key and Consumer Secret

Back on the Settings tab, go to the OAuth Settings section and click Consumer Key and Secret to open a new page where the values are displayed.Consumer Key and Secret ButtonCopy both the Consumer Key and Consumer Secret for later.Consumer Details
6

Enable access to External Client App Consumer

Search again for External Client Apps and click the Settings sub-option. Under External Client App Settings, enable Allow access to External Client App consumer secrets via REST API.Allow Access to Consumer Secrets
7

Identify Your My Domain URL

In Salesforce Setup, search for My Domain.Search My DomainCopy the Current My Domain URL (e.g. my-org.my.salesforce.com). This is your instance URL.My Domain URL

​
Setup Salesforce Connection in Infisical

  1. Navigate to App Connections in your organization or project.
  2. Select the Salesforce Connection option. Select Salesforce Connection
  3. Enter your Instance URL, Consumer Key, and Consumer Secret from the previous section, then click Connect to Salesforce. Create Salesforce Connection
  4. Your Salesforce Connection is now available for use. Salesforce Connection Created