Versions Compared

Old Version 6

changes.mady.by.user Kalpana Malladi

Saved on

compared with

New Version Current

changes.mady.by.user Kalpana Malladi

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Table of Contents
minLevel1
maxLevel7

Mutual Authentication Setup

Snaps in the Salesforce Snap Pack that use the Salesforce Mutual Authentication account must configure the setup in the Salesforce portal to function without any issue.

To enable mutual authentication in Salesforce, follow these steps:

  1. Log into the Salesforce portal.

  2. Navigate to Go to Setup > Security Controls > Certificate and Key Management. The following page is displayed.

  3. By default, you cannot view the Mutual Authentication Certificate section. In such a case, you need to raise a request to the Salesforce Support team to enable this section.

  4. Once this section is enabled, you need a CA signed certificate to upload in this section. See “Create CA signed certificate” for more information.

  5. Once you have the CA signed certificate, click Upload Mutual Authentication Certificate.

  6. Provide a label and name for your certificate.

  7. Click Choose File to locate the certificate.

  8. Click Save to save the upload.

  9. Create a custom profile to enable the “Enforce SSL/TLS Mutual Authentication” user permission for an API Only user.

...

NOTE :
Info

  • You can verify the accuracy of the chosen intermediate certificate using the following command:

openssl verify -CAfile gdig2.crt.pem 887539a9e02f4af2.pem

  • You can attach the pem file with the certificate pem using the below command.

cat 887539a9e02f4af2.pem gdig2.crt.pem > gdIntermedite.pem

Cfm round rect
titleCertificate Chain

The certificate chain order must meet the following requirements:

  • Start with the server or client certificate and then add its signing certificate.

  • If more than one intermediate certificate exists between the server or client certificate and the root, add each certificate as the one that signed the previous certificate.

  • The root certificate is optional, and generally should not be included.

Additional Helpful Commands

...