Connecting to Salesforce (extractor)
You can connect your Salesforce instance to the Celonis Platform, enabling you to extract, transform, and model your Salesforce data within a data pool. This connection is based on single sign-on via OAuth authentication, requiring you to provide a username and password for a Salesforce user with the permissions to read and extract relevant process data.
And for a video overview of this process, watch:
Prerequisites for connecting to Salesforce
To connect to your Salesforce instance, you must meet the following prerequisites:
Access to a Salesforce user with sufficient permissions to read and extract process data. See: Configuring Salesforce user permissions.
Configuring Salesforce user permissions
To extract data from your Salesforce instance, you need access to a user with the ability to read and extract the relevant process data.
We recommend creating a profile in Salesforce with the following permissions enabled and then assigning this profile to a user account:
Administrative permissions:
API Enabled
Api Only User (optional)
Standard object permissions:
Select 'Read' permissions for all objects that should be extracted.
Select 'View all' permissions for all objects that should be extracted.
Custom object permissions:
Select 'Read' permissions for all objects that should be extracted.
For more information about users, profiles, and roles in Salesforce, see: Salesforce Help Center - Manage Users.
Creating a data connection between Salesforce and the Celonis Platform
With access to the necessary Salesforce user permissions, you can create a connection between your Salesforce tenant and the Celonis Platform from your data pool diagram:
Click Data Connections.
Click Add Data Connection and select Connect to Data Source.
Select Cloud - Salesforce.
Configure the following connection details:
Name: An internal reference for this data connection.
Salesforce Instance Type: Select between Production and Sandbox. This choice determines both the landscape you will login to and the data you have access to.
Authentication method: Select OAuth
Proxy service: Either select no proxy service or choose to use middleware. Using middleware provides an extra layer of security between the Salesforce instance and the Celonis Platform.
If using middleware, you're asked to provide three additional settings:
Authorize URL: The URL that should be called to authorize via OAuth with the middleware.
Token URL: The URL that should be called to request tokens from Salesforce via the middleware.
Data URL: The base URL that should be used used to call the APIs for fetching the data (the specific API requests will be appended),
Advanced settings - SSO URL: Enter either your production or sandbox URL here:
Production URL: https://login.salesforce.com.
Sandbox URL: https://test.salesforce.com
Click Save.
You're then prompted to allow access to your Salesforce instance - click Allow.
The connection between your Salesforce tenant and the Celonis Platform is establised. You can manage this connection at any time by clicking Options: