Salesforce

How does Trelica work with Salesforce?

Trelica helps IT teams keep on top of what SaaS software has been bought, how much money is being spent on it, how well it's being used and whether everything is compliant from a security and privacy point of view.

Trelica can connect directly to different SaaS tools (like Salesforce) to extract up-to-date information about which of your users are using Salesforce, and how regularly they are logging in. This will help you improve engagement, deprovision unused seats, and prepare for your license renewal.

Finding your Salesforce URL

To connect to the API you need to be using a custom Salesforce URL. You can configure this, or check your URL by clicking on the Settings cog icon, and choosing Setup in the menu:

Then go to My Domain in the Company Settings menu. This will either let you configure a domain (using a 4 step wizard), or see your current domain. You will need to enter the domain into Trelica later so make a note of it.

Installing the AppExchange package

Trelica needs to access a Salesforce OAuth client. You can configure this by installing a Salesforce AppExchange package. Click on this link to initiate the installation:

https://login.salesforce.com/packaging/installPackage.apexp?p0=04t4J000001cwIF

You will see a screen prompting you to install the Trelica Connection App.

1. Choose Install for Admins Only.
2. Click to acknowledge that you are installing a Non-Salesforce Application.
3. Click Install.

Once installation is complete you will see a confirmation screen. Click Done:

Viewing the installed package in Salesforce

You can see and manage the newly installed package by going to Platform Tools > Apps > Packaging > Installed Packages:

Configuring Trelica

If you received an email asking you to set up the integration, then just click on the link, otherwise login to Trelica and go to Admin > Integrations to get started.

In the Search... box, just type in Salesforce:

Then click on the Salesforce logo to get started.

Connecting to Salesforce

Click the Connect button at the top-right:

You will now be asked to enter the URL for your Salesforce instance. This is the URL you noted in the step Finding your Salesforce URL above.

Click Connect again and you will then be asked to login to Salesforce and shown a message explaining that Trelica wants to connect to your organization's Salesforce site.

Click Allow and you will be taken back to Trelica.

After a short pause, Trelica will start to synchronize with Salesforce and you'll see a green tick when everything is done.

If you click on the View application button then you can go through to the Salesforce profile page and see more information:

At this point you may wish to review the user list or fill in more information about the number of seats you have, when you renew your Salesforce license.

Creating a user with limited privileges

If you're connecting the integration with a user intended solely to integrate Salesforce with Trelica, to follow the principle of least privilege as Trelica recommends, you can create a user with the following privileges:

1. Go to ADMINISTRATION > Users > Profiles
2. Click New Profile
3. Clone Existing Profile Minimum Access - Salesforce (User License: Salesforce)
4. Name the profile Trelica API Profile
5. Tick the following settings:
   • Connected App Access
     • Trelica
   • Administrative Permissions
     • API Enabled
     • Manage Package Licenses
     • Manage Profiles and Permission Sets
     • View All Profiles
     • View All Users
     • View Setup and Configuration
     • View Roles and Role Hierarchy
6. Click Save
7. Go to ADMINISTRATION > Users > Users
8. Create a new user and assign the Trelica API Profile

FAQ

‘insufficient access rights on cross-reference id’ error when creating or deactivating a user

This is likely caused by an Apex automation creating or updating a custom object record when a user gets created or deactivated. The Trelica integration user doesn't have access to this object. Please consult with your Salesforce administrator to ensure the Trelica user has appropriate permissions and reach out to support@trelica.com if you need further help.

See https://help.salesforce.com/s/articleView?id=000385619&type=1

Manually creating a Connected App

If you can't install the package from AppExchange you can manually create the Trelica Connected App. Please contact Trelica support before starting this process.

1. Search for App Manager and click New Connected App
2. Enter the following values:

   Connected App Name	Trelica
   API Name	Trelica
   Contract Email	support@trelica.com
   Logo Image URL	https://www.trelica.com/trelica-crest-dark_256
   Icon URL	https://www.trelica.com/trelica-crest-dark_256
   Enable OAuth Settings	Checked
   Callback URL	https://app.trelica.com/IntegrationsApi/Integrations/Salesforce/AuthCallback https://eu.trelica.com/IntegrationsApi/Integrations/Salesforce/AuthCallback (Add on separate lines - it's fine to enter both URLs)
   OAuth scopes	Access unique user identifiers (openid) Manage user data via APls (api) Perform requests at any time (refresh_token, offline_access)

   

3. Click Save.
4. On the new page click Manage Consumer Details to 
   
5. You will be asked to reauthenticate.
6. On the new page copy the Consumer Key and Consumer Secret and paste them into Trelica when prompted.