Skip to content

Salesforce Client ID

Service Name: Salesforce

Service Description: Salesforce is a cloud-based customer relationship management (CRM) platform that provides businesses with tools for sales, service, marketing, analytics, and application building.

Service Address: [https://salesforce.com](https://salesforce.com/)

Salesforce Client ID

SALESFORCE_CLIENT_ID

  • Validation Type: -

  • IP Allow list: Does not exist

  • Secret Access Scope: Grants access to Salesforce API resources and services based on the connected app's permissions.

  • Secret Revokement URL: https://help.salesforce.com/s/articleView?id=sf.connected_app_manage.htm

  • Secret Example: 3MVG9CEn_O3jvv0xMf5rhfiI8yRuZgV0asdeWEF9IhN5kUTgm

  • Suspicious Activity Investigation Instructions:

    • Review Salesforce Setup Audit Trail for unauthorized access or configuration changes

    • Check login history for unusual login patterns or locations

    • Monitor API usage reports for unusual spikes in activity

    • Review connected app usage metrics for unexpected behavior

    • Examine permission sets and profile assignments for unauthorized changes

  • Mitigation Instructions:

    • Log into Salesforce as an administrator

    • Navigate to Setup > Apps > App Manager

    • Find the connected app associated with the compromised client ID

    • Click the dropdown menu and select "Edit"

    • Under "OAuth Policies," click "Revoke Tokens" to invalidate all existing tokens

    • Consider regenerating a new consumer key (client ID) if necessary

    • Update the client ID in all authorized applications and services