Configuration Parameters

This section contains the information that this connector uses to connect and interact with the source. Each source type requires different information to create and maintain a connection.

The Salesforce connector uses the following connection parameters:

Note
All attributes marked with an asterisk (*) are mandatory attributes.

Timeout value in minutes

Default – One minute

Enable this to prevent emails from being sent when a user is created.

Enable this to exclude disabled users.

This works by adding the following condition to the where clause of the search query for users:

AND user.IsActive = true

Enable this to exclude users that have the flag value for IsFrozen set to true in Salesforce.

Note
To upgrade the existing source, you must add the account schema attribute IsFrozen.

This parameter defines the password used for logging in to the managed system.

This is the API user's Salesforce.com password. If the client's IP address has not been whitelisted in your organization, add a security token to your password for OAuth 2.0 authentication.

Password must be Account Password + Security Token.

For example, if you have account password such as SAilpoint123 and the security token is @34567, the combined password entry will be SAilpoin123@34567

Helps to determine the scope of the users or profiles that are retrieved during Account or Entitlement aggregation.

For example, specifying the following search query retrieves only Active Users during Account Aggregation:

select Id from User where IsActive = true

The scope of users or profiles retrieved during aggregation can be defined using custom attributes in the where clause as follows:

select Id from User where EMP_DEPARTMENT__c= 'tester'

Note
Only the where clause of the search query can be modified as required.

While configuring the Salesforce application if where clause in Search Query For User/Profile field contains an apostrophe (') then uses a backslash (\) prefix to apostrophe.

For example:

Find Id,username from user where lastname is buru'4

Expected Query: Select Id,username from user WHERE lastname ='buru\'4'

Note

If Manage Active Accounts is selected then it adds the following condition into the where clause of the user search query:

AND user.IsActive = true

Salesforce account with required permissions

Details necessary to distinguish the source from other similar connection sources.

Note
Not Applicable if Enable OAuth2 API is selected.

Enter the fully qualified URL to the root of the Salesforce server.

For example:

http://login.salesforce.com/services/Soap/u/26.0/

To find the URL of your site, log in to salesforce.com:

  1. Select Develop under the Application heading.

  2. Go to API > Generate Partner WSDL

  3. Select Generate.

The URL is located under the SalesforceService service name.

Option to Aggregate Only Active Users

The Salesforce source has an option to aggregate only active users.

To configure the Salesforce source to only aggregate active accounts:

  1. In the Salesforce, go to the Aggregation Filters panel.

  2. Check the Exclude Disabled Accounts box.