Please bear in mind that this tool is only available for Enterprise plan subscribers for the time being.

Admin: Setup in Salesforce

Create an External Client App in Salesforce

Go to Salesforce Setup (⚙️ icon in the top right corner). In the search bar on the left sidebar, search for "External Client App Manager" and click "New External client App.”

Fill in basic information

• External Client App Name: "Dust Integration".
• API Name: will auto-populate.
• Contact Email: your email.
• Distribution State: Keep default value “Local”.

API (Enable OAuth Settings)

• Check the ◽ “Enable OAuth” box.

Set the callback URLs

https://dust.tt/oauth/salesforce/finalize
https://eu.dust.tt/oauth/salesforce/finalize

Select the OAuth scopes

• Access the identity URL service (id, profile, email, address, phone)
• Manage user data via APIs (api)
• Perform requests at any time (refresh_token, offline_access)
• Access custom permissions (custom_permissions)

Set up Flow Enablement & Security

Tick these options:

• Enable Client Credentials Flow
• Enable Authorization Code and Credentials Flow
• Require secret for Web Server Flow
• Require secret for Refresh Token Flow
• Require Proof Key for Code Exchange (PKCE) extension for Supported Authorization Flows

Click on “Create”. You should land here:

Get your credentials

• Click on the "Settings" tab and then the “Edit” button.
• Open the “OAuth Settings” dropdown menu.
• Click on “Consumer Key and Secret” and copy those for the Setup in Dust.

Admin: Setup in Dust

Go to Spaces > Administration > Tools in your Dust workspace, click Add Tools, and select Salesforce. Fill in your Salesforce Instance URL and the Client ID & Secret generated from your External App.

Then chose the Credentials Type:

• Personal means that each user using the Salesforce tool will require to log in to Salesforce first. We will use the user credential to execute the queries, meaning permissions defined on Salesforce are respected.
• Workspace means we will use the credentials of the admin setting up the tool for all queries (meaning all users share their permissions when executing queries on Salesforce).

You will then be redirected to an oAuth flow to connect an admin Salesforce Account. In case of Personal credential type, this account will only be used during the set up and users won't be able to query Salesforce from this account.

By default this tool is added to the Company data Space, so accessible in all the workspace.

Usage

Once the tool has been configured by the admin as described before, it can be selected on any agent: in the Agent Builder, simply click on Add Tool and select Salesforce.

When users use an agent with the Salesforce tool for the first time, they will get this error if the Credential type was set to Personal:

They will have to click on the Connect button to connect their own Salesforce credentials. After it will look like this:

And they can click on the Retry button to replay the agent answer.