Let Oomnitza be your single source of truth!
With Oomnitza you get visibility of Salesforce user data as the data is automatically transformed into consumable information and actionable insights.
Connect Oomnitza + Salesforce in minutes
Get the information and insights that you need to reduce costs and the time that you spend on administration tasks such as:
Configurable dashboards and list views of key information
Configurable workflows that you can create:
For managing the provisioning of hardware to employees
For tracking the assignment of virtual machines (VMs) to employees
For deactivating underutilized SaaS accounts
For deleting the subscriptions of the SaaS accounts of employees who have left the company
Configurable reports to share information about users with your colleagues and management
Before you start
Complete these actions:
- Set up the Oomnitza connector
- Create 0Auth 2.0 credentials
- Add 0Auth 2.0 credentials to the vault in Oomnitza
Set up the Oomnitza connector
To set up the Oomnitza connector on your platform, see Oomnitza connector.
Set the global subdomain address for Salesforce
Instead of entering the subdomain address for Salesforce each time you create a workflow, you can set a global default for the subdomain address.
- Log in to Oomnitza.
- Click Settings > Global Settings.
- Select Salesforce.Subdomain and click Edit variable.
- Enter your subdomain address. For example, if your subdomain address is “https://<mycompany.my>.salesforce.com”, you enter <mycomany.my> as the subdomain address.
When you create Oomnitza integrations or add credentials in Oomnitza for Salesforce, the subdomain address will be automatically populated.
Create 0Auth 2.0 credentials
To stream Salesforce user data into Oomnitza, you must add 0Auth 2.0 credentials to the credentials vault in Oomnitza.
To do this:
Create OAuth 2.0 credentials for Salesforce
To learn more about creating 0Auth 2.0 credentials for Salesforce, see:
- Generating a Client ID and Client Secret Key for Salesforce Connections
- OAuth 2.0 Web Server Flow for Web App Integration
- OAuth 2.0 Refresh Token Flow for Renewed Sessions
- OAuth Tokens and Scopes
- OAuth 1.0.A Authorization Error Codes
Add 0Auth 2.0 credentials to the vault in Oomnitza
When you’ve created your 0Auth 2.0 credentials, complete this task:
- Click Settings > Credentials, and then click Add new credentials (+).
- Enter the information details and the authorization details.
- Authenticate and then click Create.
For more information, see Oomnitza vault.
You also need to enter values in the following fields
The value that you enter enter a value is
full refresh_token offline_access. For more information, see the OAuth scopes section in OAuth Tokens and Scopes.
The subdomain is automatically set if you’ve added it to your global settings. See Set the global subdomain address for Salesforce.
Integrate Salesforce with Oomnitza
Info and connect details
- Click Settings.
- On the Integrations page, scroll down to User Integrations.
- In the Extended section, click NEW INTEGRATION.
- In the New User Integration sidebar, click Salesforce.
- To integrate Oomnitza with the Salesforce User Load, click APPLY and then click NEXT twice.
On the Connect page, complete these steps:
- Enter a descriptive name for the integration such as Salesforce Users. That'll be the name of the integration that is shown on the Integrations page.
- From the User Selection list, select User plus SaaS User.
- Select Cloud as the installation type.
- From the Credentials list, select the credentials from the Oomnitza vault that you added for the connection.
- Enter the name of the user of the integration.
- Enter your Salesforce subdomain.
- Click Next.
Map the Salesforce fields to Oomnitza fields and create custom mappings to get the information that you need to manage your desktop assets.
You can map the following Salesforce fields to Oomnitza:
- Salesforce Username
- User ID
- Connector Sync Time
- Is Active?
- User Role ID
- User Type
- User’s Last Login
More information Object Reference for Salesforce and Lightning Platform | User.
Use a filter to exclude system users
By default, information is collected about all active users of Salesforce. For example, when the Salesforce Object Query Language (SOQL) query is run to collect user information, user information is also collected about guests and other types of system users.
To exclude the user information, such as user information about guests and automated processes, complete these steps:
- On the Mappings page, click Edit Connector.
- Click create/update the record in Oomnitza if.
- Click Add Condition.
- For each type of user, complete these steps:
- Select Connector field value.
- Select User Type.
- Select does not equal.
- Enter the type of user, such as
- Click Save.
Only the user information that you want to upload is streamed to Oomnitza.
Before you create workflows to get actionable insights, you must retrieve information about SaaS users.
Retrieve SaaS user information
- Click Software.
- From the Workflow list, click SaaS Users.
- Click Add (+).
- Enter the name of the workflow such as Retrieve Salesforce SaaS information. You can also enter a description of the workflow so you know what the purpose of the workflow is.
- Click Add new.
Edit the begin block
The begin block is the workflow’s trigger. In this case, you create a workflow that retrieves SaaS user information from Salesforce.
- Click Edit.
- Enter a description of the workflow such as Upload SaaS user info for Salesforce.
- Configure the schedule so that the user information is streamed to Oomnitza when your system is least busy.
- Select run for Active records.
- Click Add Rule and add this rule: SaaS name = Salesforce.
- Click Save.
Learn more about the Begin block
Edit the SaaS User Role retrieval block
- Drag and drop the SaaS User Role retrieval block onto the Sandbox, and then click Edit.
- Select Salesforce User Role and click the arrow (>).
- Complete the following actions:
- Select the credentials that you added to the Oomnitza vault.
- Enter the subdomain. You don’t need to do this if you set up a global subdomain.
- Enter the version of the Salesforce API.
By default, the Deactivate checkbox is selected. This means that information about SaaS user accounts that were deactivated in Salesforce won’t be uploaded to Oomnitza.
Learn more about the SaaS user role.
Connect the blocks
To complete the workflow, you connect the blocks.
- Link the boxes as shown in the diagram.
- Validate, launch, and save your workflow.
Depending on the schedule that you configured in the Begin block, the SaaS user information, such as the user role and last login date is streamed to Oomnitza.
Deactivate SaaS users
You can easily create a workflow in Oomnitza to deactivate SaaS users in salesforce.
- To create a new workflow, complete the steps in Retrieve SaaS user information.
- Edit the Begin block, and add rules to specify the criteria that you want to use for deactivating users such as:
- SaaS name = Salesforce
- Last login date Days before 30
- Save your changes.
- Drag and drop the API block onto the sandbox.
- Click Edit.
- Select Salesforce Deactivate User.
- Add the following information:
- API version
- Save your changes and link the boxes to create the workflow.
- Validate, launch, and save your workflow.
Depending on the criteria that you specified in the Begin block, the SaaS account in Salesforce will be deactivated when the workflow is run.