Skip to main content

Connect to Data in Salesforce

If you have data in Salesforce and want to be able to use that data in questions in LiveRamp Clean Room, you can create a Salesforce data connection.

Note

This solution is designed for Salesforce solutions that use Salesforce's "traditional" infrastructure, like Salesforce Sales Cloud. As a company, Salesforce has built and acquired a wide and diverse range of products. But that diversity means that everything labeled "Salesforce" may not fit the instructions below. As a result, Salesforce-owned solutions that do not use the features mentioned below (e.g., Objects) will require further development and discussions.

A Salesforce data connection can be used in the following clean room types:

  • Hybrid

  • Confidential Computing

After you’ve created the data connection and Clean Room has validated the connection by connecting to the data in your cloud account, you will then need to map the fields before the data connection is ready to use. This is where you specify which fields can be queryable across any clean rooms, which fields contain identifiers to be used in matching, and any columns by which you wish to partition the dataset for questions.

After fields have been mapped, you’re ready to provision the resulting dataset to your desired clean rooms. Within each clean room, you’ll be able to set dataset analysis rules, exclude or include columns, filter for specific values, and set permission levels.

To configure a Salesforce data connection, see the instructions below.

Overall Steps

Perform the following overall steps in Salesforce to configure a Salesforce Hybrid data connection:

  1. Create a Salesforce Connected App

  2. Configure the Connected App.

  3. Generate an initial access token.

  4. Get the consumer key and consumer secret.

  5. Create or clone an existing profile.

  6. Create a new user.

Note

For additional information, see these Salesforce resources

Once you've performed the procedures above in Salesforce, perform the following overall steps in LiveRamp Clean Room:

  1. Add the credentials.

  2. Create the data connection.

  3. Map the fields.

For information on performing these steps, see the sections below.

After you've performed all of the overall steps, the data will be ready to be provisioned into a clean room and a query. For instructions, see "Clean Room Owner Implementation Guide".

Perform Steps in Salesforce

Perform the steps in the sections below in Salesforce to configure a Salesforce data connection.

Create a Salesforce Connected App

Procedure. To create a Salesforce Connected App:

  1. In Salesforce, log in with your developer account.

  2. In the upper-right corner, hover over the gear icon and then select Setup.

    image18.png

  3. In the left-hand pane, search for “App Manager” and open it.

    image20.png

  4. Click New Connected App.

    image17.png

  5. On the New Connected App page, enter the Connected App name, API name, and contact email.

    Note

    A client would enter the email address of someone who is creating the Connected app or a generic email.

    image21.png

  6. Scroll down to "API (Enable OAuth Settings)" and select the check box for "Enable OAuth Settings".

    image3.png

  7. For the Callback URL, provide a Callback (for example, "https://www.liveramp.com").

  8. For the Selected OAuth Scopes, select one of the following options:

    • Manage user data via APIs (api)

    • Perform requests at any time (refresh_token, offline_access)

  9. Click Add → Save

The New Connected App can take up to 10 minutes to take effect.

image4.png

Configure the Connected App

Procedure. To configure the Connected App:

  1. From the Manage Connected Apps page in Salesforce, click Manage for the app you created in the previous procedure.

    image11.png

  2. From the page that opens, click Edit Policies.

  3. Make the following settings:

    image10.png

    • Permitted Users: All users may self-authorize.

    • IP Relaxation: Relax IP restrictions.

    • Refresh Token Policy: The refresh token is valid until revoked.

  4. Click Save.

Generate an Initial Access Token

Procedure. To generate an initial access token:

  1. In Salesforce, navigate back to the Connected App list and select Manage.

  2. From the row for the Connected App, select "Manage" from the dropdown on the far right of the row.

    image13.png

  3. Scroll to "Initial Access Token for Dynamic Client Registration" and click Generate.

    image15.png

  4. Click OK to confirm.

    Habu-Click_OK.png

Get the Consumer Key and Consumer Secret

Note

Disable any pop-up blockers before performing these steps.

Procedure. To get the consumer key and consumer secret:

  1. In Salesforce, navigate to the Connected App list.

  2. From the row for the Connected App, select "View" from the dropdown on the far right of the row.

  3. Go to the API (Enable OAuth Settings) section, and click Manage Consumer Details.

    image12.png

  4. Take note of the Consumer Key and Consumer Secret.

    image22.png

Create or Clone an Existing Profile

Procedure. To create or clone an existing profile:

  1. In Salesforce, navigate to Profiles under Administration > Users.

    image6.png

  2. Clone a profile and give it a name (such as "LiveRamp API Profile").

  3. After the profile has been successfully created, select the new profile and click Edit.

  4. Under "Custom App Settings", uncheck any check boxes that are checked.

  5. Under "Connected App Access", check the check box for the newly created connected app.

    image24.png

  6. Under "Administrative Permissions", check the check boxes for "API Enabled" and "Api Only".

    image14.png

  7. Under "General User Permissions", clear any check boxes that are selected.

  8. Under "Standard Object Permissions", select the check boxes for the objects that the profile should have access to (such as "Contacts").

    image9.png

  9. Click Save.

  10. Navigate back to the Profile page.

  11. Under "Field-level Security", select the checkbox for the object that this profile has access to (such as "Contacts").

  12. Click Edit and select the check boxes for the fields that this profile should have access to.

    image8.png

  13. Click Save.

Create a New User

Procedure. To create a new user:

  1. From the profile in Salesforce that was created above, navigate to the View Users page and click New User.

  2. Create a new user (such as "Api User LiveRamp") and then click Save.

    image23.png

  3. Log in to Salesforce with the new user created above. Note the UserName and Password.

  4. Navigate to the Settings and select Reset My Security Token.

  5. Click Reset Security Token to have the token emailed to you.

    image7.png

  6. Once the email arrives, note the token.

Perform Steps in LiveRamp Clean Room

Once the above steps have been performed in Salesforce, perform the overall steps in the sections below in LiveRamp Clean Room.

Add the Credentials

Note

Make sure you are adding to the correct organization in LiveRamp Clean Room (e.g., don't add to the "HQ" organization).

Procedure. To add credentials:

  1. From the LiveRamp Clean Room navigation pane, select Data Management → Credentials.

  2. Click Add Credential.

    add_credential.png

  3. Enter a descriptive name for the credential.

    image19.png

  4. Complete the fields as follows:

    • Domain: Enter the domain name used as your org-specific subdomain in Salesforce login and application URLs.

    • Consumer Key and Consumer Secret: Enter the Consumer Key and Consumer Secret.

      Note

      These can be found from Setup, enter Apps, then select App Manager, then select View. Next to Consumer Key and Secret, click Manage Consumer Details.

    • Username: Enter the username generated in the "Create a New User" section above.

    • Password: Enter the password generated in the "Create a New User" section above.

    • Security Token: Enter the token generated in the "Create a New User" section above.

  5. Click Save Credential.

You can specify which object and fields (comma-separated fields) the data connection is for, restricting the data pull to those specific Salesforce objects and fields.

Create the Data Connection

After you've added the credentials to LiveRamp Clean Room, create the data connection:

Note

if your cloud security limits access to only approved IP addresses, talk to your LiveRamp representative before creating the data connection to coordinate any necessary allowlisting of LiveRamp IP addresses.

  1. From the LiveRamp Clean Room navigation pane, select Data Management → Data Connections.

  2. From the Data Connections page, click New Data Connection.

    data_cxn_new.png

  3. From the New Data Connection screen, select "Salesforce".

    image5.png

  4. Select the credentials created in the previous procedure from the list.

    image16.png

  5. Complete the following fields in the Set up Data Connection section:

    • To use partitioning on the dataset associated with the data connection, slide the Uses Partitioning toggle to the right.

    • Category: Enter a category of your choice.

    • Dataset Type: Select Generic.

    • Fields: Specify which fields (comma-separated fields) the data connection is for.

    • Salesforce Object: Specify which Salesforce object the data connection is for.

    Note

    The data pull is restricted to the specified Salesforce objects and fields.

  6. Review the data connection details and click Save Data Connection.

    All configured data connections can be seen on the Data Connections page.

Map the Fields

Once the above steps have been performed in Google Cloud Platform, perform the overall steps in the sections below in LiveRamp Clean Room.

Note

Before mapping the fields, we recommend confirming any expectations your partners might have for field types for any specific fields that will be used in questions.

  1. From the row for the newly created data connection, click the More Options menu (the three dots) and then click Edit Mapping.

    The Map Fields screen opens, and the file column names auto-populate.

  2. For any columns that you do not want to be queryable, slide the Include toggle to the left.

    Note

    Ignore the field delimiter fields because this was defined in a previous step.

  3. Click Next.

    The Add Metadata screen opens.

    image-20240612-162557.png

  4. For any column that contains PII data, slide the PII toggle to the right.

  5. Select the data type for each column.

  6. For columns that you want to partition, slide the Allow Partitions toggle to the right.

  7. If a column contains PII, slide the User Identifiers toggle to the right and then select the user identifier that defines the PII data.

  8. Click Save.

Your data connection configuration is now complete and the status changes to "Completed".

You can now provision the resulting dataset to your desired Hybrid or Confidential Computing clean room.

In this section: