OAuth2 Flow

Data Sync facilitates the OAuth2 flow through Salesforce's robust security features, including Connected App, Auth. Provider, and Named Credential. To configure this, let's go through the setup process, assuming our goal is to set up a connection in the DSP Installation Org with a Connection to the org named "Org B":

• Create a Connected App in Org B: Navigate to the App Manager within Org B to create a new Connected App. Ensure you activate the OAuth Flow. Initially, use a temporary URL for the Callback URL. In the "scope" section, select "refresh_token" and include any additional scopes required for the integration user's data access.
• Create an Auth. Provider in DSP Installation Org:
  • Copy and paste the Consumer Key and Consumer Scret from the Org B's Connected App to the Auth. Provider.
  • Authorize Endpoint URL: Use "https://test.salesforce.com/services/oauth2/authorize" for a sandbox environment or "https://login.salesforce.com/services/oauth2/authorize" for production.
  • Token Endpoint URL,: Use "https://test.salesforce.com/services/oauth2/token" for a sandbox environment or "https://login.salesforce.com/services/oauth2/token" for production.
  • Default Scopes: Set "refresh_token" and any additional scopes enabled in Org B's Connected App. Use space to seperate the scopes.
• Update Callback URL in Org B's Connected App: Upon save of the Auth. Provider, a Callback URL will be generated. Update the Connected App's Callback URL to match the value. In this example, the URL is "https://enterprise-e--dev.sandbox.my.salesforce.com/services/authcallback/Salesforce_Org_B".
• Create Named Credential in DSP Installation Org:
  • URL: the domain URL of the Org B. This can be found in the "My Domain Settings".
  • Identity Type: Select "Named Principal".
  • Authentication Protocol: Choose "OAuth 2.0".
  • Auth. Provider: Pick the one you just set up.
  • Scope: Use "refresh_token full" or any scopes you need.
  • Enable "Generate Authorization Header," "Allow Merge Fields in HTTP Header," and "Allow Merge Fields in HTTP Body."
• Test Connection: Verify that the setup works as expected.

For a more detailed walkthrough, refer to the instructional video below: