Step 2: Obtain Salesforce Credentials

Demandbase connects to your Salesforce through an External Client App and a dedicated Salesforce user profile. You must obtain the Salesforce user credentials before you can authenticate the integration in Demandbase.

Prerequisites to Obtain Salesforce Credentials

• You must have the required Salesforce permissions. See Best Practices for Salesforce Object Permissions.
• Install the latest Demandbase App Package. See Step 1: Add Demandbase App Package in Salesforce.

Create an External Client App in Salesforce

1. Log in to Salesforce Lightning as an Admin user.
2. At the top right of the page, go to Setup.
3. In the left panel, quick find App Manager.
4. At the top right of the page, click the New App drop-down, and select New External Client App.
   
   
5. In the Basic Information section, enter the following:
   1. External Client App Name: Demandbase ABM
   2. API Name: Demandbase_ABM
   3. Contact Email: support@demandbase.com
   4. Distribution State: Local
      
6. In the API (Enable OAuth Settings) section, enter the following:
   1. Check the Enable OAuth checkbox.
   2. Callback URL: In separate lines, enter the following URLs:
      https://web.demandbase.com/admin/oauthcallback
      https://authentication.demandbase.com/oauth2/v1/authorize/callback
      Important: Do not separate the URLs using commas, semicolons, or any other characters.
   3. OAuth Scopes: Select the following scopes:  
      • Access the identity URL service (id, profile, email, address, phone)
      • Access unique user identifiers (openid)
      • Manage user data via APIs (api)
      • Perform requests at any time (refresh_token, offline_access)
      • (Optional) If you're integrating Pardot, add Manage Pardot services (pardot_api).
   4. Scroll down to the Security section and uncheck the Require Proof Key for Code Exchange (PKCE) Extension for Supported Authorization Flows checkbox.
   5. Click Create.
      

Verify Users Permitted to Oauth 

1. In Setup, quick find External Client App Manager.
2. Search for Demandbase ABM, and from the right dropdown, select Edit Policies.
3. In the Policies tab, expand OAuth Policies.
4. Go to Plugin Policies section > Permitted Users and select All users can self-authorize.
   Important: If you select the Admin approved users pre-authorized option, each user must be manually added to the External Client App.
5. Go to App Authorization section > Refresh Token Policy and select Refresh token is valid until revoked.
6. Click Save.
   

Obtain Consumer Key and Consumer Secret

1. In Setup, quick find External Client App Manager.
2. Search for and click on the name Demandbase ABM.
3. Go to Settings tab and expand OAuth Settings.
4. Go to App Settings section and click Consumer Key and Secret.
   
5. Verify your identity.
6. Copy the Consumer Key and Consumer Secret for Step 3: Add the Salesforce Integration.
   

Next Steps after Obtaining Salesforce Credentials

Follow the instructions in Step 3: Add the Salesforce Integration.