> For the complete documentation index, see [llms.txt](https://docs.teleskope.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.teleskope.ai/connectors/saas/salesforce.md).

# Salesforce

Teleskope connects to Salesforce using OAuth 2.0. A Salesforce administrator completes a one-time authorization that grants Teleskope persistent access to your organization.

## Supported Editions

| Cloud            | Supported Editions                            |
| ---------------- | --------------------------------------------- |
| Sales Cloud      | Enterprise, Unlimited, Developer              |
| Service Cloud    | Enterprise, Unlimited, Developer              |
| Health Cloud     | Enterprise, Unlimited                         |
| Experience Cloud | Enterprise, Performance, Unlimited, Developer |

Both **Production** and **Sandbox** environments are supported.

## Requirements

* A Salesforce account with the **System Administrator** profile (or equivalent) — this ensures Teleskope can access all relevant objects

{% hint style="warning" %}
**Service account recommended.** The OAuth token is tied to the authorizing user. If that user is deactivated, all future scans and automated actions will fail. Use a dedicated Teleskope service account with System Administrator access.
{% endhint %}

## Connecting Salesforce to Teleskope

{% stepper %}
{% step %}

### Navigate to Settings

In the Teleskope UI, go to **Settings → Connectors → Salesforce**.
{% endstep %}

{% step %}

### Begin Authorization

Click **Enroll New** and select your environment:

| Environment   | Login domain           |
| ------------- | ---------------------- |
| Production    | `login.salesforce.com` |
| Sandbox       | `test.salesforce.com`  |
| {% endstep %} |                        |

{% step %}

### Authorize in Salesforce

You will be redirected to Salesforce's login page. Sign in with the service account and click **Allow** to grant Teleskope the following OAuth scopes:

{% hint style="info" %}
**SSO users:** If your org enforces SSO, use the **Use Custom Domain** option on the Salesforce login page and enter your org's domain before signing in. Alternatively, pre-authenticate via SSO in a separate tab before starting this step.
{% endhint %}

| Scope            | Purpose                                                       |
| ---------------- | ------------------------------------------------------------- |
| `api`            | Query and manage records via the Salesforce REST API          |
| `web`            | Access your org from a browser-based context                  |
| `refresh_token`  | Maintain access without requiring re-authorization            |
| `offline_access` | Continue operating when the authorizing user is not logged in |
| {% endstep %}    |                                                               |

{% step %}

### Confirm Enrollment

After authorizing, you are redirected back to Teleskope. Your Salesforce organization will appear in the enrolled organizations list under **Settings → Connectors → Salesforce**.
{% endstep %}
{% endstepper %}