Setting Up Salesforce for Authentication

In order to login to the CapStorm/Container using Salesforce, you will first need to set up a connected app in your Salesforce org. This connected org will need to have OAuth Settings enabled along with a handful of other settings. This article walks through each step required to create a Salesforce Connected App that can be used to enable Salesforce authentication in the CapStorm/Container. For more information on setting up Connected Apps in Salesforce, please visit Salesforce’s official documentation.

Note: the screenshots and instructions in this page use sample values for a number of parameters.

• http://localhost:8080 is the host/port used for the CapStorm/Container.

  • You will need to use the host and port values that are applicable to your environment.

  • Your values for the host, port, and protocol should be used for the Callback URL parameter and the Start URLparameter.

• The Connected App Name and contact details should be changed to reflect proper values for your organization.

Steps to Setup the Connected App

1. Login to Salesforce and go to Setup

2. In the Quick-Find search bar, type App Manager and select it

3. In the top right, click New Connected App

4. Enter a name for the app in the Connected App Name field

   • The API name will auto-fill when you click enter

   • Note: This name can be anything you’d like

5. Add a Contact Email

   • 

6. In the API (Enable OAuth Settings) section, select Enable OAuth Settings

7. In the Callback URL box, enter **http://localhost:8080/j_security_check**

8. For the Selected OAuth Scopes, add the below scopes

   • Access the identity URL service (id,profile,email,address,phone)

   • Access unique user identifiers (openid)

   • 

9. Disable the below settings

   • Require Proof Key for Code Exchange (PKCE) Extension for Supported Authorization Flows

   • Require Secret for Web Server Flow

   • Require Secret for Refresh Token Flow

10. Enable the below settings

    • Enable Authorization Code and Credentials Flow

    • Enable Token Exchange Flow

    • 

11. Enable Configure ID Token

12. Set Token Valid for to 10 Minutes

13. Select Include Standard Claims and Include Custom Attributes

    • 

14. Under Web App Settings, enter http://localhost:8080 next to Start URL

    • 

15. Click Save

16. In the API (Enable OAuth Settings) section, click the Manage Consumer Details button

    • 

17. Note the Consumer Key and the Consumer Secret; You will need these for setup in the application.

    • Consumer Key = OIDC_CLIENT_ID

    • Consumer Secret = OIDC_CLIENT_SECRET