---
updatedAt: 2026-08-18T04:57:37.000Z
agentTools:
projectIndex: https://help.zluri.com/llms.txt
---
# Connect Salesforce (Client-Credential Flow)
Connect Salesforce (Client-Credential Flow) to Zluri
Zluri has two Salesforce connectors. This **Form Based** connector authenticates using the OAuth 2.0 **Client Credentials** flow (server-to-server). You create your own Connected App, enable the Client Credentials Flow, and assign a Run-As user. No Salesforce username, password, or security token is required.
There are two versions of Salesforce, **Classic** and **Lightning Experience**, and the steps to create the OAuth application differ slightly. Both are described below. The **Run-As user** step (after the app is created) is the same for both.
## Prerequisites
* Administrator access to the Salesforce org with permission to create and manage Connected Apps.
## Salesforce Lightning
1. Sign in to the Salesforce account.
2. Select **Setup**.
3. In the **Search Setup** box at the top of the screen, type **App Manager**.
4. Select **App Manager**.
5. Select **New Connected App** under **External Client Apps > Settings**.
6. A new screen appears for creating the connected app.
7. Provide a suitable **Name**, **API Name**, and **Contact Email**.
8. Select the **Enable OAuth Settings** checkbox.
9. Add the following callback URL:
10. In **Selected OAuth Scopes**, add the following scopes:
* Manage user data via APIs (api)
* Access Connect REST API resources (chatter\_api)
* Perform SQL queries on Data Cloud data (cdp\_query\_api)
11. Select **Enable Client Credentials Flow** and accept the alert that appears.
12. Scroll to the bottom and select **Save**, then select **Continue**.
## Assign the Run-As user (required for Client Credentials Flow)
1. Open the Connected App's detail page, select **Manage**, then select **Edit Policies**.
2. In the **Client Credentials Flow** section, use the **Run As** lookup field to select the integration user in the org, then select **Save**.
### The Run-As user's permissions govern what Zluri can read. Assign a least-privilege user with read access to Users, LoginHistory, Permission Set Licenses, and (if syncing roles) Permission Sets. Use it only for this integration, never for interactive UI logins.
## Salesforce Classic
1. Sign in to the Salesforce account.
2. Select **Setup**.
3. In the **Quick Find / Search** box on the left, type **app**, then under the **Create** section select **Apps**.
4. In the **Connected Apps** section, select **New**.
5. Provide a suitable **Name**, **API Name**, and **Contact Email**.
6. Select the **Enable OAuth Settings** checkbox.
7. Add the callback URL:
8. In **Selected OAuth Scopes**, add the following scopes:
* Manage user data via APIs (api)
* Access Connect REST API resources (chatter\_api)
* Perform SQL queries on Data Cloud data (cdp\_query\_api)
9. Select **Enable Client Credentials Flow** and accept the alert that appears.
10. Scroll to the bottom, select **Save**, then select **Continue**.
## Assign the Run-As user (required for Client Credentials Flow)
1. Open the Connected App's detail page, select **Manage**, then select **Edit Policies**.
2. In the **Client Credentials Flow** section, use the **Run As** lookup field to select the integration user in the org, then select **Save**.
### The Run-As user's permissions govern what Zluri can read. Assign a least-privilege user with read access to Users, LoginHistory, Permission Set Licenses, and (if syncing roles) Permission Sets. Use it only for this integration, never for interactive UI logins.
## Get your credentials and connect
1. On the Connected App details page, locate the **Consumer Key** and **Consumer Secret**.
2. In Zluri, enter these values to connect:
* **Consumer Key**: from the Connected App.
* **Consumer Secret**: from the Connected App.
* **Sub-Domain**: the Salesforce My Domain label (for example, for `https://zluri.my.salesforce.com` the sub-domain is `zluri`).
* **License Types** *(optional)*: a comma-separated list to filter users by license type.
## Reference
For more details on the Client Credentials Flow, refer to the official Salesforce documentation.
Got questions? Feel free to [submit a ticket](https://support.zluri.com/support/tickets/new) or contact us directly at .