- 22 Sep 2024
- 3 Minutes to read
- Print
- DarkLight
- PDF
Salesforce - Create User
- Updated on 22 Sep 2024
- 3 Minutes to read
- Print
- DarkLight
- PDF
Salesforce - Create User creates a user in Salesforce for each asset that matches the parameters of the selected saved query, and the other Enforcement Action settings or the assets selected on the relevant asset page.
- Not all asset categories are supported for all Enforcement Actions.
- See Actions supported for Activity Logs, Adapters Fetch History, and Asset Investigation modules.
- See Actions supported for Vulnerabilities.
- See Actions supported for Software.
General Settings
- Action name - The name of this Enforcement Action. The system sets a default name. You can change the name.
- Configure Dynamic Values - Toggle on to enter a Dynamic Value statement. See Creating Enforcement Action Dynamic Value Statements to learn more about Dynamic Value statement syntax.
- Use stored credentials from the Salesforce Adapter - Select this option to use the first connected adapter credentials.
- Select Adapter Connection - Select which adapter connection to use for this Enforcement Action.
Note:To use this option, you must successfully configure a Salesforce adapter.
Required Fields
These fields must be configured to run the Enforcement Set.
- Profile ID - The ID for the in Salesforce. To retrieve this ID, in Salesforce GUI, navigate to Setup > Users > Profiles, and click a profile to populate the ID as a parameter in the URL in the address bar.
Compute Node - The Axonius node to use when connecting to the specified host. For more details, see Connecting Additional Axonius Nodes.
Additional Fields
These fields are optional.
- Draft - Select this option to create a draft user.
- User enabled - Select this option if you want the created user to be an active user.
- Time Zone Sid Key - Time zone sid key address for the created user.
- Locale Sid Key - Locale Sid key address for the created user.
- Email Encoding Key - Email encoding key address for the created user.
- First Name - First name of the created user.
- Last Name - Last name of the created user.
- Email - Email address for the created user.
- Username - Username for the created user.
Connection and Credentials
When Use stored credentials from the adapter is toggled off, some of the connection fields below are required to create the connection, while other fields are optional.
- Domain (required) - The full URL of the Salesforce server.
- User Name and Password (required) - The credentials for a user account that has the Required Permissions to perform this action.
- User Secret (required) - The Salesforce security token associated with a user account to perform this action.
- Consumer Key (required) - A consumer key associated with a user account that has the Required Permissions to perform this action.
- Consumer Secret (required) - A consumer secret associated with a consumer key.
- Verify SSL (optional) - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.
- 2FA Secret Key - The secret generated in Salesforce for setting up 2-factor authentication for the Salesforce user created for collecting SaaS Management data. For more information on how to generate this secret key, see Set Up Two Factor Authentication.
- SSO Username and Password - If your organization accesses Salesforce with an SSO provider (such as Google, Microsoft 365, Okta, etc.) enter your credentials for the SSO platform in the SSO Username and SSO Password fields.
- Use Unified Login Domain - Select this option to use the
http://login.salesforce.com
URL for logging in instead ofsub-domain.salesforce.com
(if the main domain is a sandbox, the URL will betest.salesforce.com
). This allows you to directly login with Salesforce credentials instead of using an external SSO. - HTTPS Proxy (optional) - Connect the adapter to a proxy instead of directly connecting it to the domain.
- HTTPS Proxy User Name (optional) - The user name to use when connecting to the server using the HTTPS Proxy.
- HTTPS Proxy Password (optional) - The password to use when connecting to the server using the HTTPS Proxy.
- Gateway Name - Select the Gateway through which to connect to perform the action.
APIs
Axonius uses the Salesforce - Create a Record API.
Required Permissions
The value supplied in User Name and Consumer Key must have permissions to create users in Salesforce users.
For more details about other Enforcement Actions available, see Action Library.