AppExchange (Salesforce)
Note:For Sandbox integrations, select the AppExchange Sandbox application from the Managed Applications screen.
AppExchange (Salesforce) is Salesforce’s cloud computing marketplace through which end users can access, download, and install software applications. AppExchange offers a mix of free and paid applications organized into collections, categories, and industry solutions that encompass a variety of fields, including small business, customer service, education, manufacturing, and real estate.
SaaS Management offers a method to see the AppExchange (Salesforce) application in your environment and the capability to manage those applications. How we do that is by using our Single Sign-On capabilities. For SSO integration details, refer to Single Sign-On (SSO) vs. Direct Integrations in Choosing a Data Source. After authorizing your AppExchange (Salesforce) integration, you can access the following information using the available SaaS Management integration tasks.
Application Discovery
With the Application Discovery integration task enabled, you can:
| • | View all of your organization’s AppExchange applications that are managed in SaaS Management |
| • | Filter, select, or remove AppExchange applications you no longer wish to manage in SaaS Management |
SSO Application Roster
With the SSO Application Roster integration task enabled, you can view the AppExchange applications assigned to each user.
The AppExchange (Salesforce) integration details are explained in the following sections.
| • | Information Stored |
| • | Minimum Permissions Required |
| • | Authentication Method |
| • | Credentials Required |
| • | Integrating AppExchange (Salesforce) with SaaS Management |
| • | API Endpoints |
The following table describes the available integration task and stored data.
|
Integration Task |
Information Stored |
|||||||||||||||||||||
|
Application Discovery |
|
|||||||||||||||||||||
|
SSO Application Roster |
|
Note:The information stored is subject to change as enhancements are made to the product.
Minimum API required permissions are based on the Scopes Required and AppExchange User Profile.
|
Scopes Required |
Description |
Integration Task Name |
|
Access your basic information |
To read user details |
SSO Application Roster |
|
Access and manage your data (API) |
Access and manage your data |
Application Discovery SSO Application Roster |
|
Perform requests on your behalf at any time (refresh_token, offline_access) |
To make an authenticated API call |
Required for Authentication |
To authorize and grant the above scopes to our OAuth Client application, you must have System Administrator user profile permissions or follow the instructions provided below to create a user with custom permissions to grant the above scopes.
| • | Create a New AppExchange Permission Set |
| • | Assign the AppExchange Permission Set to a User |
Create a New AppExchange Permission Set
Complete the following steps to create a new AppExchange permission set to a user.
To create a new AppExchange permission set:
| 1. | After signing in to Salesforce, navigate to Setup. |
| 2. | In the quick find box, search for Permission Set and select the same. |
| 3. | Click New to create a permission set. |
| 4. | Enter a name under the Label field and leave the License as None, so that it can be assigned to a different user and permission set licenses. |
| 5. | Click Save to create the permission set, which redirects you to the Permission Set Overview page. |
| 6. | Click the System Permissions link. |
| 7. | Click the Edit button to update the permissions. |
| 8. | Based on the required SaaS Management integration tasks, enable the AppExchange system permissions. See the table below for details. |
|
AppExchange System Permissions |
SaaS Management Integration Tasks |
|
API Enabled API Only User Manage Package Licenses View Setup and Configuration View All Users |
SSO Application Roster Application Discovery |
| 9. | Click Save to update the permission set. |
Assign the AppExchange Permission Set to a User
Complete the following steps to assign the AppExchange permission set to a user.
Important:This AppExchange permissions set information is subject to change as enhancements are made to Salesforce.
To assign the AppExchange permission set to a user:
| 1. | After signing in to Salesforce, navigate to Setup -> Administration -> Users -> Users. |
| 2. | Is the user a new user or an existing user? |
| a. | For a new user, click New User. |
| b. | For an existing user, click edit on the selected user. |
| 3. | Enter the necessary user details. |
| 4. | In the User License dropdown, select Salesforce as the license type. |
| 5. | In the Profile dropdown, select the Minimum Access - Salesforce profile to assign to the user. |
| 6. | Scroll down to Permission Set Assignment: |
| a. | Click Add to enable the created permission set. |
| b. | Click Save to complete the assignment. |
| 7. | Click Save to create or update the selected user. |
OAuth2 with Authorize Flow. For details, refer to the Salesforce instructions in OAuth 2.0 Web Server Flow for Web App Integration.
| • | Username and password of the user with necessary minimum permissions |
| • | Salesforce Instance |
Note:Username and password are required only for authorization. These credentials are not stored in SaaS Management.
Integrating AppExchange (Salesforce) with SaaS Management
To integrate AppExchange (Salesforce) with SaaS Management, perform the following steps.
Tip:For better AppExchange and AppExchange Sandbox integration performance, use your browser's incognito mode or private browsing feature.
To integrate AppExchange (Salesforce) with SaaS Management:
| 1. | To use the AppExchange (Salesforce) API endpoints, enter your organization’s Salesforce Instance in the SaaS Management integration setup page. To find your organization’s assigned Salesforce Instance, refer to the Find your Salesforce information. |
| • | Salesforce portal URL format example 1: For https://na9.salesforce.com, na9 is the Salesforce Instance value. |
| • | Salesforce portal URL format example 2: For https://company.my.salesforce.com, the complete domain company.my is the Salesforce Instance value. |
| 2. | In SaaS Management, add the Salesforce application. Refer to Adding an Application. |
Note:For Sandbox integrations, select the AppExchange Sandbox application
| 3. | Click Authorize, which will redirect you to the Salesforce portal. |
| 4. | Sign in to the Salesforce portal using the credentials of the user with the necessary Minimum Permissions Required. |
| 5. | To grant access to the REST APIs used in the integration, click Allow in the Salesforce Allow Access window. After integrating AppExchange (Salesforce) with SaaS Management, an Integrated Applications tab is displayed. For details, refer to AppExchange (Salesforce) Integrated Applications Tab. Each integrated application has a Users Tab to track user activity. At this time, Setting Activity Thresholds is not available for integrated applications. Therefore, the Activities (# Days) column in the integration application’s Users tab is blank. |
AppExchange (Salesforce) Integrated Applications Tab
The Integrated Applications tab lists all the applications that are integrated via a Single Sign-On (SSO) Application Integration when the Application Discovery Integration Task is enabled. For details, refer to the Integrated Applications Tab and Adding Discovered SSO Enabled Applications to Your List of Managed SaaS Applications.
For AppExchange (Salesforce), the Integrated Applications tab columns listed to the right of the App Name column are pulled in from AppExchange (Salesforce). The table below summarizes the key features.
|
Column |
Description |
|
Users Available |
This column displays True or False. True—The list of users assigned to this application, if any, will be available in the Users tab. This is a “Managed Application” in the context of AppExchange (Salesforce). False—No user information is available. This is an “Unmanaged Application” in the context of AppExchange (Salesforce). |
|
Options |
Click the Edit button in the upper-right corner of the Integrated Applications tab to display the options Manage or Ignore. Select the appropriate option based on whether or not you wish to manage a particular AppExchange (Salesforce) application. |
Access Token URL
https://login.salesforce.com/services/oauth2/token
Application Discovery
https://<<SalesforceInstance>>.salesforce.com/services/data/v52.0/query
https://<<SalesforceInstance>>.salesforce.com/services/data/v52.0/tooling/query
SSO Application Roster
https://<<SalesforceInstance>>.salesforce.com/services/data/v52.0/query