Salesforce

Connect Salesforce to your agents for CRM data and Chatter.

Overview

A Salesforce credential lets agents query and update CRM records, access Chatter feeds, and react to webhook triggers for leads, opportunities, and cases.

Why "Bring Your Own Key" (BYOK)?

Salesforce connected apps live in your org. BYOK keeps OAuth credentials and API access under your control.

Benefits:

• Your org — production or sandbox, under your Salesforce admin policies
• Scoped access — request only the OAuth scopes your agents need
• Your rate limits — API usage counts against your org limits

Prerequisites

Before connecting, you'll need:

1. A Salesforce account with permission to create connected apps
2. Access to Setup → App Manager in your Salesforce org

Step 1: Create a connected app

1. In Salesforce, go to Setup → App Manager
2. Click New Connected App
3. Fill in basic information (name, contact email)
4. Enable Enable OAuth Settings
5. Set the callback URL:

1. Select OAuth scopes based on your needs (see Capabilities)
2. Save and copy the Consumer Key (client ID) and Consumer Secret

Step 2: Connect in inference shell

Configure credentials

1. Go to Vault → credentials
2. Find Salesforce and click Configure
3. Enter:
   • Client ID (SALESFORCE_CLIENT_ID)
   • Client Secret (SALESFORCE_CLIENT_SECRET)
4. Optional: set Is sandbox (SALESFORCE_IS_SANDBOX) to true if connecting to a sandbox org (uses test.salesforce.com for login)
5. Click Save credentials

Authorize the connection

1. Click Connect
2. Sign in to Salesforce and approve the requested permissions
3. Done — the credential status shows Connected

Capabilities

Triggers

Using in apps

Declare Salesforce requirements in your app:

1# inf.yml2credentials:3  - key: salesforce.api4    description: Query and update CRM records56  - key: salesforce.chatter7    description: Post to Chatter feeds8    optional: true

At runtime, your app receives:

1SALESFORCE_ACCESS_TOKEN=oauth2-access-token2SALESFORCE_INSTANCE_URL=https://your-org.my.salesforce.com

Use the instance URL and access token with the Salesforce REST API.

Next

→ Credentials overview
→ Using credentials in apps