Salesforce Other Documents Integrations Language English Integration Content Type Product documentation Audience Administrator
Before PingFederate can access the Salesforce API,
it needs an access token. To get the access token, you need to register PingFederate as an
application in the Salesforce Setup console. For detailed configuration instructions, see
Create a Connected App in the Salesforce documentation.
Note: The
following steps follow the Salesforce Lightning interface. For Salesforce Classic, see
the Salesforce documentation.
Sign on to Salesforce as an administrator.
On the Setup console, create a new connected app.
In the search bar, enter App Manager.
Click Apps > App Manager.
On the Salesforce Lightning App Manager window, click
New Connected App.
Under Basic Information, enter your PingFederate server
details.
In the Connected App Name field, enter a name of your
choosing, such as PingFederate Provisioning.
In the API Name field, enter a name of your choosing
without spaces or special characters , such as
PingFederateProvisioning.
In the Contact Email field, enter your email
address.
Optional: In the Description field, enter a description to
display to end users.
Under API (Enable OAuth Settings), configure OAuth.
Select Enable OAuth Settings.
In the Callback URL field, enter
https://oauth.pingone.com/ocs/ppm/rest/v1/oauth/oastempcredresponse/.
In the Available OAuth Scopes list, add the
following:
Access and manage your data (api)
Access custom permissions (custom_permissions)
Perform requests on your behalf at any time (refresh_token,
offline_access)
Click Save. If you receive a message that says allow 2-10
minutes for the changes to take effect, click Continue.
On the application detail screen, note the Consumer Key and
Consumer Secret.
On the Connected App Edit window, under OAuth
policies, for Refresh Token Policy, check that
Refresh token is valid until revoked is selected. Click
Save.