Salesforce

Sync users and profiles from Salesforce. Uses OAuth 2.0 client credentials via a Connected App.

Source connector

Source connector — pulls identity and access data from Salesforce into ComplianceScout where it is scored against your compliance frameworks and violation rules.

What ComplianceScout collects

After a successful sync, the following data is available in your ComplianceScout dashboard for violation detection and reporting.

  • All Salesforce users with active/inactive status, profile, and role hierarchy
  • Permission set assignments per user
  • Login history and last login timestamp
  • Profile permissions and permission set configurations

Required credentials

These fields are collected when you add the connector in the ComplianceScout dashboard. Secrets are encrypted at rest using AES-256-GCM and are never logged.

FieldTypeRequiredNotes
Instance URLURLOptionalOptional. Defaults to https://login.salesforce.com. Use https://test.salesforce.com for sandboxes.
Client ID (Consumer Key)TextRequiredConsumer Key from your Connected App settings.
Client secret (Consumer Secret)SecretRequiredConsumer Secret from your Connected App settings. The app must have "client_credentials" flow enabled.

How to set up this connector

Follow these steps to gather the credentials above and connect Salesforce to ComplianceScout.

  1. In Salesforce Setup (gear icon → Setup), search for "App Manager" and click New Connected App.

  2. Enable OAuth Settings, check "Enable for Device Flow" and "Enable Client Credentials Flow". Add OAuth scopes: api and refresh_token.

  3. Save the app and copy the Consumer Key (Client ID) and Consumer Secret.

  4. Under Manage → Edit Policies, set the Client Credentials Flow to run as a dedicated integration user with appropriate permissions.

  5. In ComplianceScout, go to Data & Secrets → Integrations → Add Connector → Salesforce, enter the credentials, then click Test and Save.

Ready to connect Salesforce?

Start a free trial — your tenant is provisioned instantly and you can wire up this integration from the connectors page.