In this article
| Table of Contents | ||||
|---|---|---|---|---|
|
Overview
You can use this account type to connect Salesforce Snaps with data sources that use Salesforce Mutual Authentication account. This account allows Salesforce snaps to use Salesforce mutually authenticated transport layer security authentication providing an additional layer of security. Mutual Authentication is also known as two-way authentication, as both the client and the server authenticate and verify themselves using Client Certificate Authentication. Each time you connect to a Salesforce API, the server checks if the client's certificate is valid for the client's org, and also checks the validity of the session ID using the Username, Password, and the Security Token.
Prerequisites
- Valid CA signed certificate.
KeyStore file with an intermediate certificate.
Limitations
- This account is not supported for Salesforce Subscriber and Salesforce Publisher Snaps.
- Mutual Authentication is intended for API use only and not for using any other services through the user interface (Salesforce.com).
Known Issue
Salesforce Mutual Authentication account fails on validation when you create the account for the first time and save it. As a workaround, click Apply and then click Validate for successful validation of the account.
Account Settings
...
Field Name
...
Description
...
Label*
Default Value: [None]
Example: Salesforce account
...
Specify a name for the account instance.
...
In this article
| Table of Contents | ||||
|---|---|---|---|---|
|
Overview
You can use this account type to connect Salesforce Snaps with data sources that use Salesforce Mutual Authentication account. This account allows Salesforce snaps to use Salesforce mutually authenticated transport layer security authentication providing an additional layer of security. Mutual Authentication is also known as two-way authentication, as both the client and the server authenticate and verify themselves using Client Certificate Authentication. Each time you connect to a Salesforce API, the server checks if the client's certificate is valid for the client's org, and also checks the validity of the session ID using the Username, Password, and the Security Token.
Prerequisites
- Valid CA signed certificate.
KeyStore file with an intermediate certificate.
Limitations
- This account is not supported for Salesforce Subscriber and Salesforce Publisher Snaps.
- Mutual Authentication is intended for API use only and not for using any other services through the user interface (Salesforce.com).
Known Issue
Salesforce Mutual Authentication account fails on validation when you create the account for the first time and save it. As a workaround, click Apply and then click Validate for successful validation of the account.
Account Settings
| Info | ||
|---|---|---|
| ||
|
Field Name | Field Type | Description | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
Label* Default Value: [None] | String | Specify a name for the account instance. | |||||||||
Username* Default Value:N/A | String | Specify a name for this account. | |||||||||
Password* Default Value: N/A | String | Specify the password for the account. | |||||||||
Security token Default Value: N/A | String | Specify a name for this account. | Password1234 | String | Specify a security token. To create a security token, log into your account in Salesforce and navigate to Personal Setup > My Personal Information > Reset My Security Token. | ||||||
Keystore* Default Value: N/A | String Specify the password for the account. | Security token Default Value: N/A | String | Keystore* Default Value:N/A | String | Enter the location of the KeyStore file that can be in your SLDB or any other unauthenticated endpoints. You can upload the KeyStore file to the SLDB by clicking Note | Enter the location of the KeyStore file that can be in your SLDB or any other unauthenticated endpoints. The Keystore value must include intermediate certificates; however, including root certificate is optional.
| ||||
Keystore Password* Default Value: N/A | String | Enter the password for the KeyStore. | |||||||||
Login URL Default Value:https://login.salesforce.com/ | String | Enter your salesforce.com login URL if it is different from "https://login.salesforce.com/". Usually it is not required, but if you are using CipherCloud for Salesforce, you should enter the login URL issued by CipherCloud with the Sandbox checkbox deselected. | |||||||||
Sandbox Default Value: Deselected | N/A | Select this option if the username is for a sandbox account or deselect if it is for a production account. |
Troubleshooting
| Error | Reason | Resolution |
|---|---|---|
| Error occurred while executing request to Salesforce.com | The input view document data is not a Map. | Ensure that the input view document data is a map. |
| Client certificate error: unable to get local issuer certificate. | The certificate chain is incomplete or missing. | You should get the intermediate certificate to attach to the pem. For more information about creating creating certificate chain, see Salesforce Mutual Authentication Setup. |
| Unable to load Private Key. | Expects Private Key. | Follow the instructions in stack overflow link and update the encoded type of private key file using Notepad++. |
...