# Salesforce

Integrating **Salesforce** with **CybrHawk** allows you to securely ingest audit, user, and application activity into the CybrHawk platform for centralized monitoring and incident response. The following steps guide you through configuring authentication, creating an integration user, and providing the necessary API credentials.

***

## Step 1. Configure Authentication for Username–Password Flow

1. Log in to Salesforce as a **System Administrator**.
2. Navigate to the **Setup** page.
3. Open **OAuth and OpenID Connect Settings**.
4. Enable the option **Allow OAuth Username–Password Flows**.

***

## Step 2. Create a Dedicated Integration User

1. In **Setup**, search for **Users** in the Quick Find box.
2. Click **New User**.
3. Complete the user creation form with the required details (name, email, profile/role).
4. Save changes.

![Salesforce New User](/files/pEGlrb6Au1ufnfjyhgJw)

> If license limits prevent creating a new user, you may reuse an existing user with sufficient permissions.\
> Salesforce will send a password reset email to the user. Keep the username and new password securely.

![Salesforce User Password Reset](/files/aHEVFQySybiqZj2ndIYZ)

***

## Step 3. Create a New Connected App

1. In **Setup**, search for **Apps**.
2. Go to **App Manager → New Connected App** (top-right corner).

<figure><img src="/files/LzPJ5P5d949X2uiIPszb" alt=""><figcaption></figcaption></figure>

3. Complete the required fields (you may use any valid email).

![Salesforce App Details](/files/9FXq0LbmkcZbh3qNrQCu)

4. Enable OAuth and configure the following scopes:

![Salesforce OAuth Scopes](/files/fz1q1BMFDMcQzNzPWb8V)

5. Save changes.

***

## Step 4. Relax IP Restrictions in OAuth Policy

1. Wait a few minutes for changes to propagate.
2. In **Setup**, search for **Apps → Connected Apps → Manage Connected Apps**.
3. Locate the Connected App you created and click its name.
4. Select **Edit Policies**.
5. In the **OAuth Policies** section, set **Enforce IP restrictions** to **Relax IP restrictions**.
6. Save changes.

***

## Step 5. Obtain the App’s Client ID and Client Secret

1. In **Setup**, go to **Apps → App Manager**.
2. Find the Connected App you created for CybrHawk integration.
3. From the row menu (dropdown on the right), select **View**.
4. In the API section, click **Manage Consumer Details** (requires a verification code sent to the admin email).
5. On the Consumer Details page, copy the following values:
   * **Consumer Key** (Client ID)
   * **Consumer Secret** (Client Secret)

***

## Step 6. Obtain Your Salesforce Domain

1. In **Setup**, search for **Domain**.
2. Go to **Company Settings → My Domain**.
3. In the **My Domain Details** section, copy the **Current My Domain URL**.

![Salesforce My Domain Settings](/files/q09ClymgRCScDVoerqZ3)

***

## Final Step. Provide Credentials to CybrHawk

Share the following values with your CybrHawk representative at [**socv2@cybrhawk.com**](mailto:socv2@cybrhawk.com):

1. **Username** — Salesforce integration user account username
2. **Password** — password for the integration user
3. **Client ID** — Consumer Key from the Connected App
4. **Client Secret** — Consumer Secret from the Connected App
5. **Domain URL** — Current My Domain URL from My Domain settings

CybrHawk will configure ingestion using these values.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://cybrhawksoc.gitbook.io/cybrhawk-docs/siem-integrations/software-as-a-service/salesforce.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
