# Salesforce

Salesforce Connector - Sync users, profiles, roles, permission sets, and permission set groups from Salesforce

## Prerequisites

- A Mesh administrator account with permission to manage connectors.
- `salesforce_username` — Salesforce username (for example user@example.com or user@example.com.sandboxname)
- `instance_url` — Salesforce instance URL (for example https://login.salesforce.com or https://test.salesforce.com for sandbox)
- Credentials for authentication: salesforce_password, security_token (stored write-only).

## Authentication

**Method:** Basic authentication

Mesh authenticates with a username and password.

| Field | Required | Secret | Description |
| --- | --- | --- | --- |
| `salesforce_password` | Yes | Yes (write-only) | Salesforce password |
| `security_token` | No | Yes (write-only) | Salesforce security token (optional if IP is trusted) |

## Capabilities

<CapabilityMatrix
  capabilities={[
    { name: "Identity & entitlement sync", supported: true },
    { name: "Writeback / remediation", supported: false, notes: "Read-only" },
  ]}
/>

## Data model

_This information is not yet available from the connector schema._

## Setup

1. Gather the required value: `salesforce_username`.
2. Gather the required value: `instance_url`.
3. Create the required credentials in the source system: salesforce_password, security_token.
4. In Admin → Connectors, add the connector and enter its configuration.
5. Save and run an initial collection.

## Troubleshooting

_This information is not yet available from the connector schema._