In this article
| Table of Contents | ||||
|---|---|---|---|---|
|
Overview
You can use this account type to connect Salesforce Snaps with data sources In this article
| Table of Contents | ||||
|---|---|---|---|---|
|
Overview
You can use this account type to connect Salesforce Snaps with data sources that use Salesforce Mutual Authentication account. This account allows Salesforce snaps to use Salesforce mutually authenticated transport layer security authentication providing an additional layer of security. Mutual Authentication is also known as two-way authentication, as both the client and the server authenticate and verify themselves using Client Certificate Authentication. Each time you connect to a Salesforce API, the server checks if the client's certificate is valid for the client's org, and also checks the validity of the session ID using the Username, Password, and the Security Token.
...
- Valid CA signed certificate. For more information, see Creating CA Signed Certificate.
KeyStore file with an intermediate certificate.
...
- This account is not supported for Salesforce Subscriber and Salesforce Publisher Snaps.
- Mutual Authentication is intended for API use only and not for using any other services through the user interface (Salesforce.com).
Known Issue
Salesforce Mutual Authentication account fails on validation when you create the account for the first time and save it. As a workaround, click Apply and then click Validate for successful validation of the account.
Account Settings
...
Field Name
...
Description
...
Specify a name for the account instance.
Default Value: [None]
Example: Salesforce account
...
Specify a name for this account.
Default Value: N/A
Example: admin@sf.com
...
Specify the password for the account.
Default Value: N/A
Example: ********@1
...
Specify a security token. To create a security token, log into your account in Salesforce and navigate to Personal Setup > My Personal Information > Reset My Security Token.
Default Value: N/A
Example: 1234
...
Enter the location of the KeyStore file that can be in your SLDB or any other unauthenticated endpoints. You can upload the KeyStore file to the SLDB by clicking 
Upload.
| Note |
|---|
The Keystore value must include intermediate certificates; however, including root certificate is optional. |
...
Validate for successful validation of the account.
Account Settings
Field Name | Field Type | Description | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Label* Default Value: [None] | String | Specify a name for the account instance. | |||||||||||
Username* Default Value:N/A | String | Specify a name for this account. | |||||||||||
Password* Default Value: N/A | String | Specify the password for the account. | |||||||||||
Security token Default Value: N/A | String | Specify a security token. To create a security token, log into your account in Salesforce and navigate to Personal Setup > My Personal Information > Reset My Security Token. | |||||||||||
Keystore* Default Value:N/A | String | Enter the location of the KeyStore file that can be in your SLDB or any other unauthenticated endpoints. The Keystore value must include intermediate certificates; however, including root certificate is optional.
| |||||||||||
Keystore Password* Default Value: N/A Keystore Password* jks | String | Enter the password for the KeyStore. | |||||||||||
Login URL Default Default Value: N/A | Login URL | :https://login.salesforce.com/ | String | Enter your salesforce.com login URL if it is different from "https://login.salesforce.com/". Usually it is not required, but if you are using CipherCloud for Salesforce, you should enter the login URL issued by CipherCloud with the Sandbox checkbox deselected.
Example:
| |||||||||
Sandbox Default Value: Deselected | N/A | Select this option if the username is for a sandbox account or deselect if it is for a production account. Default Value: Deselected |
Troubleshooting
. |
Troubleshooting
| Error | Reason | Resolution |
|---|---|---|
| Keystore error | The Salesforce Mutual Authentication account fails if the Keystore file and pipeline are in different projects. | If the file is in the same folder, you can enter only the filename. If not, you must enter the complete absolute path. |
| Error occurred while executing request to Salesforce.com | The input view document data is not a Map. | Ensure that the input view document data is a map. |
| Client certificate error: unable to get local issuer certificate. | The certificate chain is incomplete or missing. | You should get the intermediate certificate to attach to the pem. For more information about creating creating certificate chain, see Salesforce Mutual Authentication Setup. |
| Unable to load Private Key. | Expects Private Key. | Follow the instructions in stack overflow link and update the encoded type of private key file using Notepad++. |
| When you use the default Login URL and validate the Account, it encounters a connection timeout error. | Provide the complete host name of the Salesforce instance for the Mutual Authentication Account. |
| Insert excerpt | ||||||
|---|---|---|---|---|---|---|
|
...