Connecting Salesforce

Pre-Connection Considerations

Prior to connecting GRAX to Salesforce, let's review some important components of the connection process.

GRAX Integration User

We require that you use dedicated Salesforce user and Permission Set for GRAX, rather than sharing a user and/or profile for GRAX and other integrations. This simplifies security, allows GRAX to automatically enforce and monitor permission problems, allows you to better audit issues, and maximizes concurrent API request limits that Salesforce imposes. GRAX uses this user for reading metadata and records for backup, deleting records for archives, and writing new records for restores. We refer to this user as the GRAX Integration User.

GRAX Auto Config

GRAX Auto Config creates the GRAX Integration user permission set with the recommended configuration in Salesforce and assigns the permission set to the GRAX Integration User (the user you use to first connect the GRAX Application to your Salesforce org). This user is then used by GRAX to interact with Salesforce.

Connecting a New GRAX Application to Salesforce

If you've just finished installing GRAX and it's reachable at [your-grax-domain-and-port]/web, you're all set to connect to Salesforce. You'll be greeted by this page:

Initial Auto Config Page

• From the dropdown menu, select Production or Sandbox based on the type of org you are trying to connect.

Some Developer/Einstein orgs are considered production orgs by Salesforce.

• Click the Connect with Auto Config button

• You'll be directed to Salesforce and prompted to sign-in. Be sure to sign-in as the GRAX Integration User

• Follow the Salesforce OAuth login flow as normal, remembering to use your org's custom domain if applicable

Once connected, the integration user may be reviewed or updated within the Settings tab of your GRAX Application.

A successful connection attempt lands you back on [your-grax-domain-and-port]/login, which looks slightly different now. Log in with your individual Salesforce user to enter the GRAX Application via SSO.

SSO Page for a Connected GRAX App

Changing or Moving Connections

If you've been using GRAX with a Salesforce org and would like to change the connected user or org, take the following steps:

• Click on the Settings tab

• Click on the Salesforce subtab

• Click Update

Replace the Current Salesforce Connection

• Click the Connect with Auto Config button

• You'll be directed to Salesforce and prompted to sign-in. Be sure to sign-in as the GRAX Integration User

• Follow the Salesforce OAuth login flow as normal, remembering to use your org's custom domain if applicable

Resetting GRAX

Resetting GRAX completely disconnects the GRAX App from Salesforce. In this state:

• Data backup and job history are not available

• Users will be unable to access GRAX with Salesforce credentials until a Salesforce connection is restablished

  • Set up local users before resetting GRAX if access is needed

Resetting GRAX is usually done as part of a Sandbox Refresh. To reset the GRAX App:

1. Navigate to Settings

2. Expand the Salesforce panel

3. Click Reset GRAX

Destroy the Current Salesforce Connection

Salesforce data backed up by GRAX is retained on the connected storage service after resetting GRAX. However, the data is not visible in GRAX without a connection to the source Salesforce org.

What's Next?

If you're in the process of installing GRAX for the first time or need to otherwise (re)connect your longterm storage, see our related documentation.

Frequently Asked Questions

Why is there an option to "Skip Auto Config"?

While GRAX Auto Config makes connecting to Salesforce more convenient by creating the GRAX Integration user permission set with the recommended configuration in Salesforce and assigning the permission set to the GRAX Integration User (the user you use to first connect the GRAX Application to your Salesforce org), some organizations may prefer to complete this setup manually. If your organization does not want to use the GRAX Auto Config functionality, choose Skip Auto Config when (re)connecting a new Salesforce org.