EmpowerID includes a Salesforce connector that allows organizations two Salesforce connectors – the standard connector and a SCIM connector – that organizations can use to bring the user data (user accounts, permissions sets, profiles and roles) in their Salesforce domain domains to EmpowerID, where it that information can be managed and synchronized with data in any connected back-end user directories. Once connected, you can manage this data from EmpowerID in the following ways:
...
Inventory Objects and their corresponding components in EmpowerID
Object in Salesforce | Component in EmpowerID |
|---|---|
User | Account |
Profile | Profile Group |
User Role | Primary Role Group |
Permission Set | SF Permission Set |
User License | Group License |
Permission Set Assignment | Group Account |
...
User License | |
Attribute in Salesforce | Attribute in EmpowerID |
ID | LicenseIdentifier |
Name | Name |
User | ||
Salesforce Attribute | SCIM Attribute (For SCIM Connector Version) | EmpowerID Person Attribute |
active | active | Active |
ID | SystemIdentifier | |
Department['urn:ietf:params:scim:schemas:extension:enterprise:2.0:User'].['department'] | Department | |
Manager | ['urn:ietf:params:scim:schemas:extension:enterprise:2.0:User']['manager']['value'] | ManagerPersonID |
Street | addresses[?(@.type=='work')].streetAddress | StreetAddress |
Alias | Alias | EmailAlias |
city | city | |
Country | country | Country |
emails[?(@.type=='work')].value | ||
Name | Name | |
LastName | LastName | |
FirstName | FirstName | |
ProfileId | ExtensionAttribute15 | |
UserRoleId | ExtensionAttribute14 | |
state | state | |
displayName | FriendlyName | |
| Info |
|---|
When EmpowerID inventories Salesforce, it creates an account in the EmpowerID Identity Warehouse for each Salesforce user, a group for each Salesforce profile, a group for each Salesforce role, and a group for each Salesforce permission set. EmpowerID distinguishes these groups from one another by group type. Groups created for Salesforce profiles have a group type of ProfileGroup (GroupTypeID of 15), while groups created for roles have a group type of PrimaryRoleGroup (GroupTypeID of 16). This information becomes important if you use EmpowerID to create users in Salesforce as each Salesforce user must have a profile. |
| Insert excerpt | ||||||
|---|---|---|---|---|---|---|
|
...
Next Steps
About the Salesforce SCIM Connector
Connect to Salesforce using the SCIM Connector - Requires an Azure TenantAbout the Salesforce SCIM Connector