Skip to content

Salesforce Secret

Service Name: Salesforce

Service Description: Salesforce is a cloud-based customer relationship management (CRM) platform that provides businesses with tools for sales, customer service, marketing automation, analytics, and application development.

Service Address: [https://www.salesforce.com/](https://www.salesforce.com/)

Salesforce Secret

SALESFORCE_SECRET

  • Validation Type: -

  • IP Allow list: Does not exist

  • Secret Access Scope: Grants access to Salesforce API and resources associated with the connected Salesforce organization.

  • Secret Revokement URL: https://help.salesforce.com/s/articleView?id=sf.remoteaccess_revoke_token.htm

  • Secret Example: A1B2C3D4E5F6A1B2C3D4E5F6A1B2C3D4E5F6A1B2C3D4E5F6A1B2C3D4E5F6A1B2

  • Suspicious Activity Investigation Instructions:

    • Review Salesforce Setup Audit Trail for unauthorized access or configuration changes

    • Check login history for suspicious IP addresses or login times

    • Review API usage metrics for unusual patterns or high volume requests

    • Monitor for unauthorized connected apps or integrations

    • Check for unexpected data exports or mass operations

  • Mitigation Instructions:

    • Log in to Salesforce as an administrator

    • Navigate to Setup > Apps > App Manager

    • Find the connected app associated with the compromised secret

    • Click "Manage" and then "Edit Policies"

    • Set "IP Relaxation" to "Enforce IP restrictions" or revoke all tokens

    • Alternatively, reset the consumer secret for the connected app

    • Create a new secret with proper security controls

    • Update all legitimate integrations with the new secret