Connecting Salesforce
Pre-Connection Considerations
Prior to connecting GRAX to Salesforce, let's review some important components of the connection process.
GRAX Integration User
We require that you use dedicated Salesforce user and Permission Set for GRAX, rather than sharing a user and/or profile for GRAX and other integrations. This simplifies security, allows GRAX to automatically enforce and monitor permission problems, allows you to better audit issues, and maximizes concurrent API request limits that Salesforce imposes. GRAX uses this user for reading metadata and records for backup, deleting records for archives, and writing new records for restores. We refer to this user as the GRAX Integration User.
GRAX Auto Config
GRAX Auto Config creates the GRAX Integration user
permission set with the recommended configuration in Salesforce and assigns the permission set to the GRAX Integration User (the user you use to first connect the GRAX Application to your Salesforce org). This user is then used by GRAX to interact with Salesforce.
Connecting a New GRAX Application to Salesforce
If you've just finished installing GRAX and it's reachable at [your-grax-domain-and-port]/web
, you're all set to connect to Salesforce. You'll be greeted by this page:

- From the dropdown menu, select
Production
orSandbox
based on the type of org you are trying to connect.
NOTE:
Some Developer/Einstein orgs are considered production orgs.
- Click the
Connect with Auto Config
button - You'll be directed to Salesforce and prompted to sign-in. Be sure to sign-in as the
GRAX Integration User
- Follow the Salesforce OAuth login flow as normal, remembering to use your org's custom domain if applicable
NOTE:
Once connected, the integration user may be reviewed or updated within the
Settings
tab of your GRAX Application.
A successful connection attempt lands you back on [your-grax-domain-and-port]/login
, which looks slightly different now. Log in with your individual Salesforce user to enter the GRAX Application via SSO.

Changing or Moving Connections
If you've been using GRAX with a Salesforce org and would like to change the connected user or org, take the following steps:
- Click on the
Settings
tab - Click on the
Salesforce
subtab - Click
Update

- Click the
Connect with Auto Config
button - You'll be directed to Salesforce and prompted to sign-in. Be sure to sign-in as the
GRAX Integration User
- Follow the Salesforce OAuth login flow as normal, remembering to use your org's custom domain if applicable
Resetting GRAX
Resetting GRAX completely disconnects the GRAX App from Salesforce. In this state:
- Data backup and job history are not available
- Users will be unable to access GRAX with Salesforce credentials until a Salesforce connection is restablished
- Setup local users before resetting GRAX if access is needed
Resetting GRAX is usually done as part of a Sandbox Refresh. To reset the GRAX App:
- Navigate to
Settings
- Expand the
Salesforce
panel - Click
Reset GRAX

NOTE:
Salesforce data backed up by GRAX is retained on the connected storage service after resetting GRAX. However, the data is not visible in GRAX without a connection to the source Salesforce org.
What's Next?
If you're in the process of installing GRAX for the first time or need to otherwise (re)connect your longterm storage, see our related documentation.
Frequently Asked Questions
Why is there an option to "Skip Auto Config"?
While GRAX Auto Config makes connecting to Salesforce more convenient by creating the GRAX Integration user
permission set with the recommended configuration in Salesforce and assigning the permission set to the GRAX Integration User (the user you use to first connect the GRAX Application to your Salesforce org), some organizations may prefer to complete this setup manually. If your organization does not want to use the GRAX Auto Config functionality, choose Skip Auto Config
when (re)connecting a new Salesforce org.
Updated 20 days ago