In this article

Overview

You can use this account type to connect Salesforce Snaps with data sources that use Salesforce Mutual Authentication account. This account allows Salesforce snaps to use Salesforce mutually authenticated transport layer security authentication providing an additional layer of security. Mutual Authentication is also known as two-way authentication, as both the client and the server authenticate and verify themselves using Client Certificate Authentication. Each time you connect to a Salesforce API, the server checks if the client's certificate is valid for the client's org, and also checks the validity of the session ID using the Username, Password, and the Security Token.

Prerequisites

Limitations

Known Issue

Salesforce Mutual Authentication account fails on validation when you create the account for the first time and save it. As a workaround, click Apply and then click Validate for successful validation of the account.

Account Settings


Field Name

Type

Description

Label*

Default Value: [None]
Example: Salesforce account

String

Specify a name for the account instance.


Username*

Default Value:N/A
Example:admin@sf.com

String

Specify a name for this account.

Password*

Default Value: N/A
Example: ********@1

String

Specify the password for the account.


Security token

Default Value: N/A
Example:1234

String

Specify a security token. To create a security token, log into your account in Salesforce and navigate to Personal Setup > My Personal Information > Reset My Security Token.


Keystore*

Default Value:N/A
Example: x590_certificate.jks

String

Enter the location of the KeyStore file that can be in your SLDB or any other unauthenticated endpoints. You can upload the KeyStore file to the SLDB by clicking  Upload. 

The Keystore value must include intermediate certificates; however, including root certificate is optional.


Keystore Password*

Default Value: N/A
Example: x590_certificate.jks

String

Enter the password for KeyStore.


Login URL

Default Value:https://login.salesforce.com/
Example:https://login.salesforce.com/

String

Enter your salesforce.com login URL if it is different from "https://login.salesforce.com/". Usually it is not required, but if you are using CipherCloud for Salesforce, you should enter the login URL issued by CipherCloud with the Sandbox checkbox deselected.

Sandbox

Default Value: Deselected

N/A

Select this option if the username is for a sandbox account or deselect if it is for a production account.


Troubleshooting

ErrorReasonResolution
Error occurred while executing request to Salesforce.comThe input view document data is not a Map.Ensure that the input view document data is a map.
Client certificate error: unable to get local issuer certificate.The certificate chain is incomplete or missing.You should get the intermediate certificate to attach to the pem. For more information about creating creating certificate chain, see Salesforce Mutual Authentication Setup.
Unable to load Private Key.Expects Private Key.

Follow the instructions in stack overflow link and update the encoded type of private key file using Notepad++.

https://stackoverflow.com/questions/18460035/unable-to-load-private-key-pem-routinespem-read-biono-start-linepem-lib-c6

Related Content