Deep dive into salesforce connected app part 1
Download as PPTX, PDF2 likes400 views
The document provides an overview of Salesforce Connected Apps, detailing their framework for integrating external applications with Salesforce through APIs and security protocols like OAuth and SAML. It outlines authentication and authorization processes, the roles of connected app developers and admins, and key considerations for deploying connected apps. Additionally, it discusses the implications of forward-looking statements regarding Salesforce's business performance and market conditions.
Deep dive into salesforce connected app part 1
- 1. Deep Dive into Salesforce Connected App - Part 1 @msrivastav13 | mohith.shrivastava@salesforce.com Mohith Shrivastava, Lead Developer Evangelist
- 2. Forward-Looking Statement Statement under the Private Securities Litigation Reform Act of 1995: This presentation contains forward-looking statements about the company’s financial and operating results, which may include expected GAAP and non-GAAP financial and other operating and non-operating results, including revenue, net income, diluted earnings per share, operating cash flow growth, operating margin improvement, expected revenue growth, expected current remaining performance obligation growth, expected tax rates, the one-time accounting non-cash charge that was incurred in connection with the Salesforce.org combination; stock- based compensation expenses, amortization of purchased intangibles, shares outstanding, market growth and sustainability goals. The achievement or success of the matters covered by such forward-looking statements involves risks, uncertainties and assumptions. If any such risks or uncertainties materialize or if any of the assumptions prove incorrect, the company’s results could differ materially from the results expressed or implied by the forward-looking statements we make. The risks and uncertainties referred to above include -- but are not limited to -- risks associated with the effect of general economic and market conditions; the impact of geopolitical events; the impact of foreign currency exchange rate and interest rate fluctuations on our results; our business strategy and our plan to build our business, including our strategy to be the leading provider of enterprise cloud computing applications and platforms; the pace of change and innovation in enterprise cloud computing services; the seasonal nature of our sales cycles; the competitive nature of the market in which we participate; our international expansion strategy; the demands on our personnel and infrastructure resulting from significant growth in our customer base and operations, including as a result of acquisitions; our service performance and security, including the resources and costs required to avoid unanticipated downtime and prevent, detect and remediate potential security breaches; the expenses associated with new data centers and third-party infrastructure providers; additional data center capacity; real estate and office facilities space; our operating results and cash flows; new services and product features, including any efforts to expand our services beyond the CRM market; our strategy of acquiring or making investments in complementary businesses, joint ventures, services, technologies and intellectual property rights; the performance and fair value of our investments in complementary businesses through our strategic investment portfolio; our ability to realize the benefits from strategic partnerships, joint ventures and investments; the impact of future gains or losses from our strategic investment portfolio, including gains or losses from overall market conditions that may affect the publicly traded companies within the company's strategic investment portfolio; our ability to execute our business plans; our ability to successfully integrate acquired businesses and technologies, including delays related to the integration of Tableau due to regulatory review by the United Kingdom Competition and Markets Authority; our ability to continue to grow unearned revenue and remaining performance obligation; our ability to protect our intellectual property rights; our ability to develop our brands; our reliance on third-party hardware, software and platform providers; our dependency on the development and maintenance of the infrastructure of the Internet; the effect of evolving domestic and foreign government regulations, including those related to the provision of services on the Internet, those related to accessing the Internet, and those addressing data privacy, cross-border data transfers and import and export controls; the valuation of our deferred tax assets and the release of related valuation allowances; the potential availability of additional tax assets in the future; the impact of new accounting pronouncements and tax laws; uncertainties affecting our ability to estimate our tax rate; the impact of expensing stock options and other equity awards; the sufficiency of our capital resources; factors related to our outstanding debt, revolving credit facility, term loan and loan associated with 50 Fremont; compliance with our debt covenants and lease obligations; current and potential litigation involving us; and the impact of climate change. Further information on these and other factors that could affect the company’s financial results is included in the reports on Forms 10-K, 10-Q and 8-K and in other filings it makes with the Securities and Exchange Commission from time to time. These documents are available on the SEC Filings section of the Investor Information section of the company’s website at www.salesforce.com/investor. Salesforce.com, inc. assumes no obligation and does not intend to update these forward-looking statements, except as required by law.
- 3. Agenda ● What is a Connected App? ● Authentication vs Authorization ● Single Sign-On(SSO) , SAML 2.0 ● Connected App Use Cases ● Demo ● Connected App Developers vs Connected App Admins ● Access Data with API Integrations ● Key Considerations when deploying Connected Apps ● References
- 4. A connected app is a framework that enables an external application to integrate with Salesforce using APIs and standard protocols, such as Security Assertion Markup Language (SAML), OAuth, and OpenID Connect. ● For example, when you log in to your Salesforce mobile app and see your data from your Salesforce org, you’re using a connected app. ● Salesforce CLI leverages connected app when you connect your CLI to the Salesforce ● Salesforce Workbench leverages connected app to authenticate and authorize to Salesforce What is a Connected App?
- 5. Authentication ● A user provides an identifier to signify the account they wish to access and enters login credential for the account. ● Credentials provided by the user are validated against credentials previously registered during user provisioning. Authentication vs Authorization Authorization ● When a user account is created in salesforce, it is often necessary to specify what the account can do and the privilege it has. ● Example account can access data via web, Access and Manage your data
- 6. OAuth 2.0 ● It is a protocol that provides authorization solution. ● Enables an app to call an api on its own behalf or users behalf and the call is constrained to the scope of an authorized request. ● Salesforce also adds authentication elements.
- 7. 1. You open the Salesforce mobile app. 2. An authentication prompt displays, in which you enter your username and password. 3. The Salesforce mobile app sends your credentials to Salesforce and initiates the OAuth authorization flow. 4. Salesforce sends the mobile app access and refresh tokens as confirmation of a successful validation of the user and the mobile app. 5. You approve the request to grant access to the Salesforce mobile app. 6. The Salesforce mobile app starts. OAuth 2.0
- 8. SSO and SAML 2.0 SSO ● Single Sign-on (SSO) is the ability to log in once and then access additional protected resources or application with the same authentication requirements, without requiring one to re enter credentials ● Identity Provider - A trusted service that enables users to access other external applications without logging in again. ● Service Provider - A service that accepts identity on behalf of the external application from an identity provider. SAML 2.0 ● SAML is an XML-based framework for exchanging security information between business partners ● SAML enables apps to delegate authentication to Identify Provider. ● Identify provider authenticates and returns an assertion with details of user and the authentication event
- 9. ● Access Data with API Integration ● Integrate other Service Providers within your Salesforce org ● Manage Access to third party apps ● Provide Authorization For External API Gateways Connected App Use Cases
- 11. Connected App Developer vs Admin Connected App Developer ● A connected app developer is a Salesforce developer or ISV who builds API integrations or external apps that can access Salesforce data as a connected app. ● As a developer, you can build a connected app for your org, but other Salesforce orgs can install and use it too. Connected App Admin ● Install, Uninstall, Block connected apps from the Salesforce org. ● Explicitly defining who can use the connected apps and where they can access the apps from. ● Add Permissions and Profiles and IP Relaxation
- 12. ● Deploying Connected apps metadata You cannot set the consumerKey in Metadata API. It is included in a retrieve operation for informational purposes. If you try to move the connected app to another org, you must remove the consumerKey from the .zip file before the deployment to an org. A new key will be generated in the destination org. Mobile settings of connected apps are not supported in change sets and must be manually migrated. You cannot add Connected App metadata to Unmanaged Package or Unlocked Package Key Considerations when deploying connected apps
- 13. Connected Apps https://help.salesforce.com/articleView?id=connected_app_overview.htm&type=5 Authorize Apps with OAuth https://help.salesforce.com/articleView?id=remoteaccess_authenticate.htm&type=5 Connected Apps Basics Trailhead Module https://trailhead.salesforce.com/en/content/learn/modules/connected-app-basics Creating a Connected App Unit https://trailhead.salesforce.com/en/content/learn/projects/build-a-connected-app-for-api-integration/create-a- connected-app References