Salesforce Integration Setup

When connecting Salesforce from the Ema Integrations page, you will see three options for authentication.

Authentication Options

Option 1: Provide Your Own Salesforce App (Recommended)

Most clients prefer this method. You configure and provide your own Client ID and Client Secret. The steps for creating and configuring your Salesforce Connected App, setting permissions, and completing setup are documented in detail below.

Option 2: Salesforce Production Account

This method uses Ema's Client ID and Client Secret. Clients still log in with their own Salesforce user credentials.

1. On the Ema Integrations page, choose "Salesforce Production Account."
2. A login page opens -- use your Salesforce credentials to log in.
3. After login, the Salesforce Admin will see Ema's app listed under Connected Apps (Salesforce > Settings > Connected Apps).
4. The Admin must click Install to finalize the connection. Once installed, Ema can use this connection.

Option 3: Salesforce Sandbox Account

Choose this option when testing in a Salesforce Sandbox (login URL starts with https://test.salesforce.com instead of production https://login.salesforce.com).

1. On the Ema Integrations page, click on Salesforce Sandbox Account.
2. Log in with your sandbox user credentials.
3. If your org uses a custom domain, click Use Custom Domain, provide your domain, and continue login.
4. Once logged in, the Salesforce Admin will see Ema's app listed under Connected Apps. It will show as uninstalled until the Admin explicitly installs it.
5. Once installed, the sandbox integration works the same way as production.

Detailed Instructions: Provide Your Own Salesforce App

Step 1: Navigate to the Ema Integrations Page

1. Go to the Integrations page in the Ema Portal.
2. All Apps > Salesforce.
3. Select Connect on Intelligent Actions integration.
4. Select Provide your own Salesforce App.
5. Note the Redirect URL and Permissions (three) displayed on the screen -- these are used in Step 2.

Step 2: Create / Configure a Salesforce Connected App

1. Sign in to Salesforce, click the gear icon > Setup.
2. Go to Platform Tools > Apps > App Manager.
3. Click New External Client App (or open an existing one). Give it a name and contact email.
4. In API (Enable OAuth Settings):
   • Check Enable OAuth Settings.
   • In Callback URL, paste the redirect URL from Step 1 (for example, https://passport.paragon.ema.co/oauth).
   • Select the OAuth scopes as shown on the Ema Integration login screen.
   • In Flow Enablement, select Enable Authorization Code and Credentials Flow.
   • In Security, disable "Require PKCE" if it is enabled.
   • In Security, enable Require secret for Refresh Token Flow.
   • Click Create.
5. After saving, copy the Consumer Key and Consumer Secret from the app's OAuth Settings.

Step 3: Set Up Permissions for the Connected App

1. Create the permission set:

   • In Salesforce Setup, go to Users > Permission Sets.
   • Click New and fill in:
     • Label: Ema Integration Access (or any name you prefer)
     • API Name: auto-fills when you click the field
     • User License: -- None -- (important so you can assign it to any user)
     • Description: (optional) "Ema connected app"
   • Click Save.

2. Turn on the special permission:

   • Once saved, under System, click System Permissions.
   • Click Edit.
   • Find Approve Uninstalled Connected Apps (use browser Find: Ctrl/Cmd+F).
   • Check the box and Save.

3. Assign it to a user:

   • Click Manage Assignments > Add Assignments.
   • Select at least one user who will perform the Salesforce authorization. The user should be an admin; select no expiry when assigning.
   • Click Assign > Done.

4. If the App status is not enabled in External Client App Manager:

   • Have the assigned user go to the Ema Integrations Page > Salesforce integration settings and connect their Salesforce account.
   • In Salesforce Setup, go to Connected Apps OAuth Usage (Quick Find: "Connected Apps OAuth Usage").
   • Find your app in the list and click Install.

Step 4: Establish Connection from Ema and Enable Tools

1. Go back to the Salesforce login from the Ema Integrations page (same as Step 1).
2. Enter the Salesforce Client ID and Client Secret, then click Continue. You will be redirected to the Salesforce login page.
3. Log in using the same credentials as the assignee from Step 3. When prompted, select Allow.
4. After login, enable the tools on the next tab so they can be used in AI Employees.

Step 5: Use Salesforce in an AI Employee

1. Add the Intelligent Actions agent in the AI Employee workflow.
2. In agent configuration, go to + Add.
3. Select Salesforce.
4. Add all tools you want to include in the agent.
5. (Optional) Configure each tool separately as needed.