Salesforce Security

Prerequisites

Identity Provider URL: https://login.microsoftonline.com/91a9d7da-2e35-4d4d-acf1-203e9612a531/oauth2/v2.0/token

Client ID: a5f1b005-17d2-4b1a-ba88-8779c7abb80d

Client Secret: <You will be provided this by Integro Support>

Grant Type: Client Credentials

Scope: api://1613a9ca-d069-41d7-aea9-3fe8da1b47a4/.default

Integro Api Url: https://modular.data.integroerp.com

Create an External Credential

Create an external credential in Salesforce. The external credential holds the details of how Salesforce authenticates to  the Integro API using the OAuth 2.0 Client Credentials with Client Secret Flow.

Go to Setup > search for "Named Credentials" > External Credentials.

Click New and create an External Credential:

Label: Integro API External Credential (or any descriptive name). 

Name: Integro_API_External_Credential

Authentication Protocol: OAuth 2.0.

Authentication Flow Type: Client Credentials with Client Secret Flow

Scope: As Above

Identity Provider URL: As Above 

Save the External Credential.

Create an External Credential Principal

Create the external credential principal. The principal maps the external credential to user permissions to authorize users to make callouts to the Integro API.

1. In the external credential’s details, scroll to the Principals section.
2. To create a principal, click New.
3. Enter the information for the principal.
   1. Parameter Name: Integro API External Principal
   2. Sequence Number: 1
   3. Client ID: As Above
   4. Client Secret: As Above

Create an Associated Named Credential

Go to Setup > search for "Named Credentials" > click New Named Credential.

Label: Integro API Named Credential (or any descriptive name).

Name: Integro_API_Named_Credential

URL: As Above 

Enabled for Callouts: Yes

External Credential: Integro API External Credential (created above)

Generate Authorization Header: Yes

Save the External Credential.

Create a Permission Set

Go to Setup > search for "Permission Sets" > click New

Label: Make Changes to Integro (or any descriptive name).

Name: Make_Changes_to_Integro

Description: This will allow a user to update Integro via the Integro API

Save the Permission Set.

1. In the Apps Section of the Permission Set select External Credential Principal Access.
2. Under External Credential Principal Access click Edit.
3. Assign the External Credential Principal (you created above) under the Available External Credential Principals.
4. Click Save.