Step 2: Obtain Salesforce Credentials

Demandbase connects to your Salesforce instance through a Connected App and a dedicated Salesforce user. 

Prerequisites

Important: As a best practice, we highly recommend that you create a dedicated Salesforce API user that Demandbase can use to synchronize with Salesforce via the Salesforce API. This practice will make it much easier to update, than if the dedicated Salesforce user is employee who leaves or changes roles. See the Salesforce instructions for how to Create a Secure Salesforce API User.

Make sure you have the required permissions. See Best Practices: Salesforce Permissions.

If you plan to use the Demandbase Pardot integration:

• Ensure that you set up OAuth permissions for the Pardot API. See the Salesforce documentation.
• Review Integrate Pardot with Demandbase.

Steps

1. Create a Connected App in Salesforce.

a. Login to Salesforce as an Admin user.

b. In SFDC Classic, navigate to Setup by clicking the arrow next to your user name in the top right.

c. In the left panel, navigate to App Setup > Create (OR Build > Create) and click Apps.

d. In the Connected Apps section, click New.
Connected Apps is at the bottom of the Apps screen, you may need to scroll all the way down to see it.

e. In the Basic Information section:

• • • Enter Demandbase ABM as the Connected App Name.
    • Keep the default API Name, Demandbase_ABM.
    • Enter support@demandbase.com as the Contact Email.

f. In the API (Enable OAuth Settings) section:

• • • Check Enable OAuth Settings checkbox to configure authentication settings.
    • Enter https://web.demandbase.com/admin/oauthcallback as the Callback URL.
    • Additionally, if SSO for SFDC will be enabled, add the additional oAuth Callback URL in a new row (without using commas or semi-colons.) https://authentication.demandbase.com/oauth2/v1/authorize/callback

• • • Add the following OAuth scopes:
      
      • If your SFDC Release version is prior to Winter '22 Patch 6.0 release
        • Access and manage your data (api)
        • Perform requests on your behalf at any time (refresh_token, offline_access)
        • Access your basic information
        • Allow access to your unique identifiers (openid)
      • If your SFDC Release version is after Winter '22 Patch 6.0 release
        
        • Manage user data via APIs (api)
        • Access the identity URL service (id, profile, email, address,
          phone)
        • Access unique user identifiers (openid)
        • Perform requests at any time (refresh_token, offline_access)
    • If you are using Pardot:
    • • Add the Access Pardot services scope which gives the app access to Pardot.

g. Click Save.

h. Click Continue in the New Connected App warning page.

2. Verify users permitted to OAuth.

The newly created connected app should be usable to all applicable users.

a. Login into Salesforce with the Admin user. 

b. In the left panel, navigate to App Setup > Manage Apps and click Connected Apps.

c. In the listing, click the Edit link next to the Demandbase ABM app.

d. Under the OAuth Policies section, make sure that the Permitted Users drop-down has the option All users may self-authorize selected.

e. Click Save.

Note: If you select the Admin approves users pre-authorized option, each User Profile that needs access will need to be explicitly added to this Connected App.

3. Retrieve Consumer Key and Secret from Salesforce.

a. Login into Salesforce with the Admin user. 

b. In the left panel, navigate to App Setup > Create and click Apps.

c. In the Connected Apps section, click the word Demandbase ABM (not Edit or Manage).

d. In the API (Enable OAuth Settings) section:

• • • Find the  Consumer Key.
    • Find the Consumer Secret, and select Click to reveal to see the secret.

Outcome

Copy your Consumer Key and Consumer Secret for the next step.

Next Step

Add Salesforce as a data source to Demandbase. See Add the Salesforce Integration.