AppExchange (Salesforce)

Note:For Sandbox integrations, select the AppExchange Sandbox application from the Managed Applications screen.

AppExchange (Salesforce) is Salesforce’s cloud computing marketplace through which end users can access, download, and install software applications. AppExchange offers a mix of free and paid applications organized into collections, categories, and industry solutions that encompass a variety of fields, including small business, customer service, education, manufacturing, and real estate.

SaaS Management offers a method to see the AppExchange (Salesforce) application in your environment and the capability to manage those applications. How we do that is by using our Single Sign-On capabilities. For SSO integration details, refer to Single Sign-On (SSO) vs. Direct Integrations in Choosing a Data Source. After authorizing your AppExchange (Salesforce) integration, you can access the following information using the available SaaS Management integration tasks.

Application Discovery

With the Application Discovery integration task enabled, you can:

View all of your organization’s AppExchange applications that are managed in SaaS Management
Filter, select, or remove AppExchange applications you no longer wish to manage in SaaS Management

SSO Application Roster

With the SSO Application Roster integration task enabled, you can view the AppExchange applications assigned to each user.

The AppExchange (Salesforce) integration details are explained in the following sections.

Information Stored
Minimum Permissions Required
Authentication Method
Credentials Required
Integrating AppExchange (Salesforce) with SaaS Management
API Endpoints

Information Stored

The following table describes the available integration task and stored data.

Available Integration Tasks

Integration Task

Information Stored

Application Discovery

Application ID
Application Name
App Instance ID
Additional Details (Managed)

SSO Application Roster

User ID
Email
First Name
Last Name
Active Date
Application ID
App Instance ID

Note:The information stored is subject to change as enhancements are made to the product.

Minimum Permissions Required

Minimum API required permissions are based on the Scopes Required and AppExchange User Profile.

Scopes Required

Scopes Required

Scopes Required

Description

Integration Task Name

Access your basic information

To read user details

SSO Application Roster

Access and manage your data (API)

Access and manage your data

Application Discovery

SSO Application Roster

Perform requests on your behalf at any time (refresh_token, offline_access)

To make an authenticated API call

Required for Authentication

AppExchange User Profile

To authorize and grant the above scopes to our OAuth Client application, you must have System Administrator user profile permissions or follow the instructions provided below to create a user with custom permissions to grant the above scopes.

Create a New AppExchange Permission Set
Assign the AppExchange Permission Set to a User

Create a New AppExchange Permission Set

Complete the following steps to create a new AppExchange permission set to a user.

To create a new AppExchange permission set:

1. After signing in to Salesforce, navigate to Setup.
2. In the quick find box, search for Permission Set and select the same.
3. Click New to create a permission set.
4. Enter a name under the Label field and leave the License as None, so that it can be assigned to a different user and permission set licenses.
5. Click Save to create the permission set, which redirects you to the Permission Set Overview page.
6. Click the System Permissions link.
7. Click the Edit button to update the permissions.
8. Based on the required SaaS Management integration tasks, enable the AppExchange system permissions. See the table below for details.

AppExchange System Permissions

SaaS Management Integration Tasks

API Enabled

API Only User

Manage Package Licenses

View Setup and Configuration

View All Users

SSO Application Roster

Application Discovery

9. Click Save to update the permission set.

Assign the AppExchange Permission Set to a User

Complete the following steps to assign the AppExchange permission set to a user.

Important:This AppExchange permissions set information is subject to change as enhancements are made to Salesforce.

To assign the AppExchange permission set to a user:

1. After signing in to Salesforce, navigate to Setup -> Administration -> Users -> Users.
2. Is the user a new user or an existing user?
a. For a new user, click New User.
b. For an existing user, click edit on the selected user.
3. Enter the necessary user details.

4. In the User License dropdown, select Salesforce as the license type.
5. In the Profile dropdown, select the Minimum Access - Salesforce profile to assign to the user.
6. Scroll down to Permission Set Assignment:
a. Click Add to enable the created permission set.
b. Click Save to complete the assignment.
7. Click Save to create or update the selected user.

Authentication Method

OAuth2 with Authorize Flow. For details, refer to the Salesforce instructions in OAuth 2.0 Web Server Flow for Web App Integration.

Credentials Required

Username and password of the user with necessary minimum permissions
Salesforce Instance

Note:Username and password are required only for authorization. These credentials are not stored in SaaS Management.

Integrating AppExchange (Salesforce) with SaaS Management

To integrate AppExchange (Salesforce) with SaaS Management, perform the following steps.

Tip:For better AppExchange and AppExchange Sandbox integration performance, use your browser's incognito mode or private browsing feature.

To integrate AppExchange (Salesforce) with SaaS Management:

1. To use the AppExchange (Salesforce) API endpoints, enter your organization’s Salesforce Instance in the SaaS Management integration setup page. To find your organization’s assigned Salesforce Instance, refer to the Find your Salesforce information.
Salesforce portal URL format example 1: For https://na9.salesforce.com, na9 is the Salesforce Instance value.
Salesforce portal URL format example 2: For https://company.my.salesforce.com, the complete domain company.my is the Salesforce Instance value.
2. In SaaS Management, add the Salesforce application. Refer to Adding an Application.

Note:For Sandbox integrations, select the AppExchange Sandbox application

3. Click Authorize, which will redirect you to the Salesforce portal.
4. Sign in to the Salesforce portal using the credentials of the user with the necessary Minimum Permissions Required.
5. To grant access to the REST APIs used in the integration, click Allow in the Salesforce Allow Access window. After integrating AppExchange (Salesforce) with SaaS Management, an Integrated Applications tab is displayed. For details, refer to AppExchange (Salesforce) Integrated Applications Tab. Each integrated application has a Users Tab to track user activity. At this time, Setting Activity Thresholds is not available for integrated applications. Therefore, the Activities (# Days) column in the integration application’s Users tab is blank.

AppExchange (Salesforce) Integrated Applications Tab

The Integrated Applications tab lists all the applications that are integrated via a Single Sign-On (SSO) Application Integration when the Application Discovery Integration Task is enabled. For details, refer to the Integrated Applications Tab and Adding Discovered SSO Enabled Applications to Your List of Managed SaaS Applications.

For AppExchange (Salesforce), the Integrated Applications tab columns listed to the right of the App Name column are pulled in from AppExchange (Salesforce). The table below summarizes the key features.

AppExchange (Salesforce) Integrated Applications Tab Column Descriptions

Column

Description

Users Available

This column displays True or False.

True—The list of users assigned to this application, if any, will be available in the Users tab. This is a “Managed Application” in the context of AppExchange (Salesforce).

False—No user information is available. This is an “Unmanaged Application” in the context of AppExchange (Salesforce).

Options

Click the Edit button in the upper-right corner of the Integrated Applications tab to display the options Manage or Ignore. Select the appropriate option based on whether or not you wish to manage a particular AppExchange (Salesforce) application.

API Endpoints

Access Token URL

https://login.salesforce.com/services/oauth2/token

Application Discovery

https://<<SalesforceInstance>>.salesforce.com/services/data/v52.0/query

 

https://<<SalesforceInstance>>.salesforce.com/services/data/v52.0/tooling/query

SSO Application Roster

https://<<SalesforceInstance>>.salesforce.com/services/data/v52.0/query