EmpowerID includes a Salesforce connector that allows organizations to bring the user data (user accounts, permissions sets, profiles and roles) in their Salesforce domain to EmpowerID, where it can be managed and synchronized with data in any connected back-end user directories. Once connected, you can manage this data from EmpowerID in the following ways:
Account Management
Inventory user accounts
Create, Update and Delete user accounts
Enable and Disable user accounts
Group Management
Inventory groups
Inventory group memberships
Create groups
Add and Remove members to and from groups
Attribute Flow
Users in Salesforce are inventoried as accounts in EmpowerID. The below table shows the attribute mappings of Salesforce user attributes to EmpowerID Person attributes.
Salesforce Attribute | Corresponding EmpowerID Attribute | Description |
|---|---|---|
FirstName | FirstName | First Name of a user |
LastName | LastName | Last Name of a user |
Name | Name | Full Name of a user |
Email address of a user | ||
Phone | Telephone | Telephone number of a user |
Title | Title | Job title of a user |
IsActive | Active | Active status of a user |
Department | Department | Department in which a user works |
Company | Company | Company where a user works |
City | City | City where a user is located |
Country | Country | Country of user |
ManagerId | ManagerPersonID | Employee ID of user’s manager |
When EmpowerID inventories Salesforce, it creates an account in the EmpowerID Identity Warehouse for each Salesforce user, a group for each Salesforce profile, a group for each Salesforce role, and a group for each Salesforce permission set. EmpowerID distinguishes these groups from one another by group type. Groups created for Salesforce profiles have a group type of ProfileGroup (GroupTypeID of 15), while groups created for roles have a group type of PrimaryRoleGroup (GroupTypeID of 16). This information becomes important if you use EmpowerID to create users in Salesforce as each Salesforce user must have a profile.