Salesforce Integration

​

Overview

​

Prerequisites

• A Salesforce org (any edition with API access)
• System Administrator or equivalent permissions to create External Client Apps
• API access enabled for the org

​

Salesforce External Client App Setup

​

Step 1: Access Setup

1. Log in to your Salesforce org
2. Navigate to Setup (gear icon → Setup)
3. In Quick Find, search for External Client App Manager
4. Click New External Client App

​

Step 2: Create an External Client App

1. Fill in the basic information:
   • External Client App Name: Enter a name (e.g., “CrewAI Integration”)
   • API Name: Auto-populated from the name
   • Contact Email: Your admin email
   • Distribution State: Leave as Local
2. Under API (Enable OAuth Settings), check Enable OAuth Settings
3. Set the Callback URL: Default configuration (NGINX with shared hostname):
   https://<YOUR_APPLICATION_HOST>/oauthsvc/oauth/add
   
   Separate OAuth hostname (GKE/ALB with path: "/"):
   https://<YOUR_OAUTH_HOST>/oauth/add
   
   See OAuth Redirect URI Patterns for the correct redirect URI format based on your ingress configuration.
4. Under Selected OAuth Scopes, add the following (see Required Scopes below):
   • Manage user data via APIs (api)
   • Perform requests at any time (refresh_token, offline_access)
   • Access unique user identifiers (openid)
   • Access the identity URL service (profile, id)
5. Click Save

​

Step 3: Get Your Credentials

1. After saving, click Manage Consumer Details and verify your identity
2. Copy the Consumer Key (Client ID) and Consumer Secret (Client Secret)

​

Step 4: Configure Security Policies

1. Go back to the External Client App and click Manage
2. Click Edit Policies
3. Under OAuth Policies:
   • Set Permitted Users to All users may self-authorize
   • Set IP Relaxation to Relax IP restrictions (recommended for server-to-server use)
   • Set Refresh Token Policy to Refresh token is valid until revoked
4. Click Save

​

Required Scopes

​

Configure CrewAI Helm Values

oauth:
  enabled: true
  secrets:
    salesforce:
      clientId: "your-salesforce-consumer-key"
      clientSecret: "your-salesforce-consumer-secret"

​

Activate the Integration

​

Available Actions

​

Related Guides

• Google Workspace Integrations - Gmail, Calendar, Drive, Sheets, Slides, Docs, Contacts
• Microsoft 365 Integrations - Outlook, OneDrive, Teams, SharePoint, Excel, Word
• HubSpot Integration - Contacts, companies, deals, tickets, products
• Notion Integration - Workspaces, databases, pages, and comments