Skip to main content

Connect Salesforce to Anzenna

Integrate Anzenna with Salesforce to monitor CRM data access, user activity, and security events through Event Monitoring.

Prerequisites​

  • Salesforce Administrator access
  • Anzenna account

  • Salesforce Event Monitoring enabled (typically requires Enterprise or Unlimited edition)

  • Ability to create External Client Apps in Salesforce

Overview​

The integration provides:

  • Event log file monitoring
  • User authentication tracking
  • Data access auditing
  • API call monitoring
  • Report and dashboard access logs
  • Security event tracking

Step-by-Step Instructions​

Part 1: Download Certificate from Anzenna​

  1. Log into Anzenna at

    app.anzenna.ai

  2. Navigate to Settings > Integrations

  3. Find the Salesforce integration card

  4. Click to enable and view integration details

  5. Copy the certificate URL displayed

  6. Download the certificate file (cert.pem) — save this file for upload to Salesforce

Part 2: Enable Event Monitoring in Salesforce​

  1. Log into your Salesforce instance

  2. Go to Setup (gear icon)

  3. Navigate to Security > Event Monitoring

  4. Click Enable to activate Event Monitoring

  5. Enable Generate event log files

  6. Navigate to Event Manager

  7. Select Report Event for storage to ensure logs are available via API

Part 3: Create External Client App​

  1. In Setup, go to Apps > App Manager

  2. Under External Client Apps, click External Client App Manager

  3. Click New to create a new external client application

  4. Enter application details:

  5. Click Save

Part 4: Configure OAuth Settings​

  1. In the app settings, click Enable OAuth Settings

  2. Configure the following OAuth scopes:

Required Scopes:

  • api — Access and manage your data

  • refresh_token, offline_access — Perform requests on your behalf at any time

  1. Enable JWT Bearer Flow for certificate-based authentication

  2. Click Choose File under Use Digital Signatures

  3. Upload the cert.pem file you downloaded from Anzenna

  4. Click Save

Part 5: Configure OAuth Policies​

  1. Scroll to the OAuth Policies section

  2. Under Permitted Users, select Admin approved users are pre-authorized

  3. Under Refresh Token Policy, select Refresh token is valid until revoked

  4. Configure IP Relaxation based on security requirements:

    • Relax IP restrictions (recommended for Anzenna)

    • Or add Anzenna's IP addresses to allowed list

  5. Click Save

Part 6: Retrieve Consumer Key​

  1. In the External Client App settings, locate OAuth Settings

  2. Find the Consumer Key field

  3. Click Copy to copy the Consumer Key value

Important

The Consumer Key is essential for authentication. Store it securely.

Part 7: Complete Connection in Anzenna​

  1. Return to Anzenna > Settings > Integrations

  2. Find the Salesforce integration

  3. Paste the Consumer Key into the designated field

  4. Enter your Salesforce URL: 

    https://your-instance.salesforce.com

  5. Enter the associated admin email

  6. Click Save to establish the connection

  7. Verify successful connection — status should show Connected

Verification​

  1. Check integration status shows Connected

  2. Wait 30 minutes for initial sync

  3. Navigate to Anzenna's Activity dashboard

  4. Verify Salesforce events are appearing

  5. Check Event Monitoring logs are accessible

What Data is Collected​

Event Log Files​

  • Login events
  • Logout events
  • URI (page view) events
  • API calls
  • Report exports
  • Dashboard views

User Activity​

  • Data access patterns
  • Record modifications
  • Export activities
  • Search queries
  • File downloads

Security Events​

  • Failed login attempts
  • Permission changes
  • Profile modifications
  • Setup audit trail
  • Security health checks

API Activity​

  • REST API calls
  • SOAP API calls
  • Bulk API operations
  • Metadata API access

Event Monitoring Details​

Log File Types​

Anzenna monitors these Salesforce event log files:

Log TypeDescription
LoginSuccessful login attempts
LoginAsLogin-as-user events
LogoutUser logout events
URIPage views and navigation
APIAPI call details
ApexExecutionApex code execution
ReportReport generation
DashboardDashboard views

Data Retention​

Event logs retained per Salesforce license — typically 30 days for most editions. Event Monitoring add-on may extend retention.

Troubleshooting​

Connection Fails​

Certificate errors:

  • Verify cert.pem file was uploaded correctly

  • Ensure certificate hasn't expired

  • Check file wasn't corrupted during download

  • Try re-downloading from Anzenna

Consumer Key Issues​

Invalid Consumer Key:

  • Verify key was copied completely
  • Check for extra spaces or line breaks
  • Ensure External Client App is active
  • Confirm JWT Bearer Flow is enabled

No Event Data​

Events not appearing:

  • Verify Event Monitoring is enabled
  • Check that event log generation is active
  • Wait 24 hours for first logs to generate

  • Ensure your Salesforce edition supports Event Monitoring

  • Review Event Manager settings

OAuth Policy Errors​

Authorization failures:

  • Check "Admin approved users are pre-authorized" is selected

  • Verify refresh token policy allows long-term access

  • Review IP relaxation settings
  • Ensure admin email matches in both systems

Security Considerations​

  • Certificate-based auth — Uses JWT Bearer Flow

  • OAuth 2.0 — Industry-standard authentication

  • Read-only access — Integration only reads event logs

  • Audit trail — All API access logged in Salesforce

  • Revocable — Integration can be disabled anytime

Best Practices​

  1. Test in sandbox — Use Salesforce sandbox first

  2. Monitor initial sync — Check for errors in first 48 hours

  3. Document Consumer Key — Store securely

  4. Regular reviews — Audit integration quarterly

  5. Understand event retention — Know license limitations

  6. Configure alerts — Anzenna alerts for critical events

  7. Ensure compliance — Meet data privacy requirements

Integration Maintenance​

Regular Checks​

Perform monthly:

  • Verify connection status
  • Check event log availability
  • Review sync timestamps
  • Test sample queries

Certificate Management​

Certificates typically don't expire, but:

  • Monitor certificate validity
  • Document renewal process
  • Test certificate rotation procedure
  • Keep backup of certificate files

External Client App Management​

  • Review OAuth token usage
  • Check for connection errors
  • Verify policies remain configured
  • Audit permissions annually

Salesforce Edition Requirements​

Event Monitoring Availability​

EditionEvent MonitoringNotes
Essentials❌ Not available-
Professional❌ Not available-
Enterprise✅ Add-on requiredPurchase separately
Unlimited✅ IncludedStandard feature
Performance✅ IncludedEnhanced features
Edition Check

Verify your Salesforce edition includes or supports Event Monitoring before starting setup.

Need help? Contact

Anzenna Support

for assistance.