Step 2: Obtain Salesforce Credentials

Demandbase connects to your Salesforce through an External Client App and a dedicated Salesforce user profile. You must obtain the Salesforce user credentials to authenticate in Demandbase.

Prerequisites

• You must have the required Salesforce permissions. See Best Practices for Salesforce Object Permissions.
• Install the latest Demandbase App Package. See Step 1: Add Demandbase App Package in Salesforce.

Steps: Create a External Client App in Salesforce

1. Log in to Salesforce Lightning as an Admin user.
2. At the top right of the page, click the Setup Icon.
3. In the left panel, quick find App Manager.
4. At the top right of the page, click New External Client App.
   
   
5. In the Basic Information section, enter the following:
   1. External Client App Name: Demandbase ABM
   2. API Name: Demandbase_ABM
   3. Contact Email: support@demandbase.com
   4. Distribution State: Local
      
6. In API (Enable OAuth Settings) section, enter the following:
   1. Check the Enable OAuth checkbox.
   2. Callback URL: In separate lines, enter the following URLs:
      https://web.demandbase.com/admin/oauthcallback
      https://authentication.demandbase.com/oauth2/v1/authorize/callback
      Important: Do not separate the URLs using commas, semicolons, or any other characters.
   3. OAuth Scopes: Select the following scopes:  
      • Access the identity URL service (id, profile, email, address, phone)
      • Access unique user identifiers (openid)
      • Manage user data via APIs (api)
      • Perform requests at any time (refresh_token, offline_access)
      • (Optional) If you're integrating Pardot, add Manage Pardot services (pardot_api).
   4. Scroll down to the Security section and uncheck the Require Proof Key for Code Exchange (PKCE) Extension for Supported Authorization Flows checkbox.
   5. Click Create.
      

Verify Users Permitted to Oauth 

1. In Setup, quick find External Client App Manager.
2. Search for Demandbase ABM, and from the right dropdown, select Edit Policies.
3. On the Policies tab, expand OAuth Policies.
4. Go to Plugin Policies section > Permitted Users and select All users can self-authorize.
   Important: If you select the Admin approved users pre-authorized option, each user must be manually added to the External Client App.
5. Go to App Authorization section > Refresh Token Policy and select Refresh token is valid until revoked.
6. Click Save.
   

Retrieve Consumer Key and Consumer Secret

1. In Setup, quick find External Client App Manager.
2. Search for and click on the name Demandbase ABM.
3. Go to the Settings tab and expand OAuth Settings.
4. Go to App Settings section and click Consumer Key and Secret.
   
5. Verify your identity.
6. Copy the Consumer Key and Consumer Secret for Step 3: Add the Salesforce Integration.
   

Next Step 

See Step 3: Add the Salesforce Integration.