Page Comparison

This topic demonstrates how to connect EmpowerID to Salesforce in both the EmpowerID Web application and the EmpowerID Management Console.

To connect EmpowerID to Salesforce using the Web Application

1. From the navigation sidebar of the EmpowerID Web interface, expand Admin > Applications and Directories and then click Account Stores and Systems.
2. On the Find Account Store page that appears, click the Actions tab and then click Create Account Store.
   
   
   
   
3. From the Select a system type screen, search for Salesforce and then click the Salesforce.com record to select it.
4. Click Submit.
   
   
   
   
5. In the Salesforce settings page that appears, do the following:
   1. In the Username field, type the username of the Salesforce account you created in Salesforce for EmpowerID.
   2. Type the password for the account in the Password and Confirm Password fields.
   3. In the Service Account Token field, type the value of the token generated by Salesforce for the selected user account.
   4. In the URL field, enter https://<YourSalesforceDomain>/services/Soap/c/34.0.
      
      
      
      
   5. Click Submit.
      
      Next, configure how you want EmpowerID to manage the Salesforce account store by following the steps outlined in the To configure EmpowerID to manage the Salesforce account store section.
      

To connect EmpowerID to Salesforce using the EmpowerID Management Console

1. Log in to the EmpowerID Management Console as an administrator.
2. From the EmpowerID Management Console, click the EmpowerID icon and select Configuration Manager from the menu.
3. In Configuration Manager, click the Account Stores node and then click the Add New button located above the grid.
   
   
   
   
4. In the Add New Security Boundary window that opens, select the Salesforce.com Security Boundary type from the drop-down list and then click OK.
   
   
   
   
5. In the Add Salesforce Connection window that appears, do the following:
   1. In the Username field, type the username of the Salesforce account you created in Salesforce for EmpowerID.
   2. Type the password for the account in the Password and Confirm Password fields.
   3. In the Service Account Token field, type the value of the token generated by Salesforce for the selected user account.

   4. In the URL field, replace login.salesforce.com with your domain.

      Info
      If the values entered in the Add Salesforce Connection window are incorrect, EmpowerID cannot authenticate to Salesforce and the connection fails.

      
      
      
      

6. Click OK to close the Add Salesforce Connection window.

If the connection is successful, EmpowerID creates the Salesforce connection and opens the Account Store Details screen for the Salesforce account store. This screen contains settings for configuring how EmpowerID manages the Salesforce account store.

Anchor
configure configure

To configure EmpowerID to manage the Salesforce account store

1. From the General pane of the Salesforce Account Store Details screen, enable each desired feature by toggling the icon to the right of each feature from a red sphere to a green check box. For example, if you wish to allow password synchronization to occur between EmpowerID and Salesforce, toggle the red sphere to the right of Allow Password Sync to a green check box.
   
   
   
   
2. In the Inventory pane of the Account Store Details screen for the Salesforce account store, toggle the icon to the right of the Allow Automatic Person Provision On Inventory setting from a red sphere to a green check box. This instructs EmpowerID to create a linked EmpowerID Person object for each new, unique Salesforce user account discovered during the inventory process.
3. In the Inventory pane of the Account Store Details screen for the Salesforce account store, click the Edit button to the right of Business Role for New Inventory Provision and select a Business Role for each new Person provisioned during the inventory of your Salesforce. 
   
   
   
   
4. Click OK to close the Business Role Selector.
5. Back in the Inventory pane of the Account Store Details screen for the Salesforce account store, click the Edit button to the right of Location For New Inventory Provision and select a Location to use for each Person EmpowerID provisions during the inventory of your Salesforce from the Location Selector.
   
   
   
   
6. Click OK to close the Location Selector.

1. Navigate to the attribute flow rule configuration page located at https://<YourEmpowerIDServer>/ui#Common/Find/AttributeFlowRules
2. In the advanced search, search for your Salesforce Account Store. By default, all Attribute Flow Rules are set to allow no attribute flow (indicated by the red sphere).
3. From the Attribute Flow Rules editor, toggle each Attribute Flow Rule to achieve the desired behavior. When selecting the rules you have the following options for each attribute:
   
    No Sync - When this option is selected, no information flows between EmpowerID and Salesforce.
    Bidirectional Flow - When this option is selected, changes made within EmpowerID update Salesforce and vice-versa.
    Account Store Changes Only - When this option is selected, changes can only be made to the selected attribute(s) in Salesforce and passed to EmpowerID.
    EmpowerID Changes Only - When this option is selected, changes can only be made to the selected attribute(s) in EmpowerID and are then passed to Salesforce.
   
   In our example, we have set the Attribute Flow Rules to EmpowerID Changes Only for all attributes except the Manager attribute, which is set to No Sync. In this way, all attributes except for the Salesforce ManagerId can only be changed in EmpowerID.
   
   
   
4. Return to the Account Store Details screen for the Salesforce domain.
5. From the Inventory pane of the Account Store Details screen for the Salesforce account store, click the red sphere to the left of Enable Inventory so that the red sphere becomes a green check box. This allows EmpowerID to inventory your Salesforce domain and create the appropriate user accounts and Person objects in EmpowerID.
   
   
   
   
6. After several minutes, refresh the Account Store data by pressing the Refresh Data button located a the top of the Account Store Details screen to see that EmpowerID has inventoried the accounts in your Salesforce domain and provisioned the requisite number of EmpowerID Persons for those accounts.