Introduction

Salesforce is a Cloud Based CRM platform used by sales, marketing, support and business teams. Here we can store sensitive customer data. The user in salesforce is assigned by Profiles, Roles, Permission Sets. In salesforce maintaining access is challengeable because it contains customer sensitive information and data and also it connects to multiple third-party systems.

Here we are integrating Salesforce into ISC to manage user management and governance. In salesforce manual user management leads to orphan accounts, delayed access removal, Over-permissioned user, compliance risks. So, In ISC provides identity governance, automated provisioning, Lifecycle management, Certification campaigns, Access reviews.

After Integration SailPoint can manage:

• Automate user onboarding (Joiner process).

• Updating access when employee changes the role (Mover process).

• Disable access when employee leaves (Leaver process).

• Assigning roles and permission sets automatically.

• Performing periodic access certifications.

• Maintaining audit logs for compliance.

Pre-Requisites

After login into salesforce instance the login account has the system administrator profile. Using the System admin profile, we can customize and configure the application based on requirements. Some required permissions are needed as follows.

• System administrator profile permissions.

• Has access to all functionality that does not require an additional license.

• Can create, edit, and delete custom profiles.

• Can reset password of multiple user accounts.

• Can add multiple user accounts.

• user accounts and profile permissions are accessible.

• Enable and disable user accounts.

Salesforce Setup

1. System Administrators can configure Users, Roles, and Profiles from the Setup area.

2. To access these settings when logged in to Salesforce, select your name, then select Setup from the drop-down menu.

3. The Users, Roles, and Profiles settings are all available under Users in the Administration Setup menu.

4. Create users with different profiles and access.

5. Get the service account username and password.

6. Get security token it needs to be mapped with the password.

In the above picture we can create users, profiles, permission sets, roles and assign it to the users. Also, we can reset the passwords.

In the above picture we can edit the given details, also we can add/update/remove permission set assignments, permission set groups, permission set license, User provisioning accounts, authentication settings, login history.

Integrating into SailPoint ISC

Choose specific Connector type as Salesforce SAAS and configure.

In Connection Settings

• Choose the authentication type as Basic.

• Provide Salesforce instance URL.

• Provide Service account and password [password + security token].

After providing the details start with test connection.

Account Management Settings

After test connection all salesforce attributes are pulled into ISC. These are some of the attributes from salesforce Id, Username, Email, FirstName, LastName, IsActive, ProfileId, UserRoleId, isFrozen attribute.

Correlation Configuration Settings

• In correlation need to map how accounts link to identities using attributes like

• Identity.email = Salesforce.email

Aggregation settings

• Start aggregation in ISC.

• After aggregation all the accounts from salesforce pulled into SailPoint ISC.

• Profiles and roles also imported from salesforce as entitlements.