Step 2: Obtain Salesforce Credentials

Context

Demandbase connects to your Salesforce through a Connected App and a dedicated Salesforce user profile.

Prerequisites

Important: As a best practice, we highly recommend that you create a dedicated Salesforce API user profile that Demandbase can use to synchronize with Salesforce via the Salesforce API. This practice makes it much easier to manage authentication credentials in the event that the dedicated Salesforce user leaves the company or changes roles.
You must have Admin privileges within your Salesforce environment.
Make sure you have the required Salesforce permissions. See Best Practices: Salesforce Permissions.
Install our latest AppExchange Package: Salesforce AppExchange: Demandbase (ABX Cloud) Package.
Important: Even if you already had the Demandbase package installed, you'll need the latest version to access all of the components. When you log in to Salesforce and check out the AppExchange listing, it will tell you what version you have and what the latest version is.

Steps

Create a Connected App in Salesforce

1. Log in to Salesforce as an Admin user.
2. At the top right of the page, click Setup (Salesforce Classic) or the Setup Icon (Salesforce Lightning)
3. In Salesforce Classic:
  3.1. In the left panel, go to Build > Create > Apps.
  3.2. Scroll down to the Connected Apps section, click New.
4. In Salesfore Lightning:
  4.1. In the left panel, go to Apps > App Manager.
  4.2. At the top right of the page, click New Connected App.
5. In the Basic Information section:
  5.1. In Connected App Name, enter Demandbase ABM
  5.2. In Keep the default API Name, enter Demandbase_ABM.
  5.3. In Contact Email, enter support@demandbase.com
6. Check the Enable OAuth Settings checkbox.
7. In the API (Enable OAuth Settings) section:
  7.1. In Callback URL, enter in separate lines, https://web.demandbase.com/admin/oauthcallback and https://authentication.demandbase.com/oauth2/v1/authorize/callback
  Important: Do not separate the URLs using commas, semicolons, or other characters.
  7.2. In Selected OAuth Scopes, add the following scopes:
  - - Access the identity URL service (id, profile, email, address,
      phone)
    - Access unique user identifiers (openid)
    - Manage user data via APIs (api)
    - Perform requests at any time (refresh_token, offline_access)
    - (Optional) If you're integrating Pardot, add Manage Pardot services.
8. Uncheck the "Require Proof Key for Code Exchange (PKCE) Extension for Supported Authorization Flows" checkbox.
9. Click Save.
10. In the New Connected App warning page, click Continue .

Verify Users Permitted to Oauth

1. In Setup, quick find Connected Apps (Salesforce Classic) or Manage Connected Apps (Salesforce Lightning.)
2. Look for Demandbase ABM and click Edit .
3. In Permitted Users, select All users may self-authorize.
  Important: If you select the Admin approves users pre-authorized option, each user must be manually added to this Connected App.
4. In Refresh Token Policy, select Refresh token is valid until revoked.
5. Click Save.

Retrieve Consumer Key and Consumer Secret from Salesforce

1. In Salesforce Classic:
  - In Setup, go to Build > Create > Apps. Click the word Demandbase ABM (not Edit or Manage.)
2. In Salesforce Lightning:
  - In Setup, go to Apps > App Manager. Look for Demandbase ABM.
  - Scroll to the right and click on the arrow > View.
3. In the API (Enable OAuth Settings) section, click Manage Consumer Details.
4. Important: Copy the Consumer Key and Consumer Secret for Step 3: Add the Salesforce Integration.