📘

This tool uses personal credentials.

This tool query Salesforce using the user accounts: it respects the permissions set up on Salesforce and can adapts to what each user can access in Salesforce.

Users will need to have the "API access" permission on Salesforce in order to use this tool.

Please bear in mind that this tool is only available for Enterprise plan subscribers for the time being

Admin: Setup in Salesforce

Create an External Client App in Salesforce

Go to Salesforce Setup (⚙️ icon in the top right corner). In the search bar on the left sidebar, search for "External Client App Manager" and click "New External client App.”

Fill in basic information

• External Client App Name: "Dust Integration".
• API Name: will auto-populate.
• Contact Email: your email.
• Distribution State: Keep default value “Local”.

API (Enable OAuth Settings)

• Check the ◽ “Enable OAuth” box.

Set the callback URLs

https://dust.tt/oauth/salesforce/finalize
https://eu.dust.tt/oauth/salesforce/finalize

Select the OAuth scopes

• Access the identity URL service (id, profile, email, address, phone)
• Manage user data via APIs (api)
• Perform requests at any time (refresh_token, offline_access)
• Access custom permissions (custom_permissions)

Set up Flow Enablement & Security

Tick these options:

• Enable Client Credentials Flow
• Enable Authorization Code and Credentials Flow
• Require secret for Web Server Flow
• Require secret for Refresh Token Flow
• Require Proof Key for Code Exchange (PKCE) extension for Supported Authorization Flows

Click on “Create”. You should land here:

Get your credentials

• Click on the "Settings" tab and then the “Edit” button.
• Open the “OAuth Settings” dropdown menu.
• Click on “Consumer Key and Secret” and copy those for the Setup in Dust.

Admin: Setup in Dust

Go to Spaces > Administration > Tools in your Dust workspace, click Add Tools, and select Salesforce. Fill in your Salesforce Instance URL and the Client ID & Secret generated from your External App.

You will then be redirected to an oAuth flow to connect an admin Salesforce Account. This account only be used during the set up and users won't be able to query Salesforce from this account.

By default this tool is added to the Company data Space, so accessible in all the workspace.

Usage

Once the tool has been configured by the admin as described before, it can be selected on any agent: in the Agent Builder, simply click on Add Tool and select Salesforce.

When users use an agent with the Salesforce tool for the first time, they will get this error:

They will have to click on the Connect button to connect their own Salesforce credentials. After it will look like this:

And they can click on the Retry button to replay the agent answer.

We will use the user credential to execute the queries, meaning permissions defined on Salesforce are respected.