PingOne Privilege

Configuring Agentforce

Connect Salesforce Agentforce as a workload agent application so AI discovery for workload agents can review the agents running in the platform. Learn more in Discover and manage workload agents.

  1. In the PingOne Privilege admin console, go to AI Security > Workload Agents.

  2. Click the Add Application tab.

  3. In the list of available applications, find Agentforce and click Integrate.

  4. Enter a Name for the connection.

  5. (Optional) Enter a Description.

  6. Click Next.

  7. Create a Connected App:

    1. In Salesforce, go to Salesforce Setup > App Manager.

    2. Ensure Client Credentials Flow is enabled.

    3. Assign a Run-As user to the app.

    4. Ensure the app has the following OAuth scopes:

      • api

      • wave_api

    5. Ensure the app has the required IAM roles:

      • BotDefinition: Read

      • BotVersion: Read

      • BotInvocableAction: Read

      • NamedCredential: Read (Tooling API)

      • Organization: Read

      • BotVersion: Edit

      • NamedCredential: Edit (Tooling API)

      • BotDefinition: Delete

  8. Click Next.

  9. Provide credentials using one of these methods:

    • Enter the Instance URL, Client ID, and Client Secret.

    • Click JWT Bearer Flow as an alternative to Client Secret for certificate-based authentication.

      1. Enter your Salesforce Username.

      2. Paste your JWT Private Key (PEM).

  10. Click Next.

  11. Review the summary, then click Add Connection.

You can now validate that the connection is active in the Active Applications tab.