Need More Details on the Salesforce Integration

[Hannah Meneley]

I am looking for some more details on the Salesforce Integration.  Can anyone help me with the following: 

1. I would like to understand exactly how the connection is made/authenticated to SalesForce as the existing documentation is unclear. 
2. Also, is there the have ability for the SalesForce integration to be authenticated with a SalesForce integration account specially setup for the Atlassian integration.  We would like to limit this account to the required SalesForce fields, is that going to cause issues?  Can the SalesForce integration account be setup to Api-only?

[Rohan Swami]

Hi Hannah, here's some extra info from one of our engineers:

1. We use OAuth authorization (3LO) with these scopes
   a.Access the identity URL service (id, profile, email, address, phone)
   b. Access unique user identifiers (openid)
   c. Manage user data via APIs (api)
   d. Perform requests at any time (refresh_token, offline_access)
2. Should be ok to use a separate account for Integration only. But it would require the user to be logged into the integration account when the JPD asks to authorize.

Usually a separate account is used when doing site-to-site connection (2LO) . Admin connects to sites on behalf of "Integration user" and then all other users unfurl on behalf of it
Our scenario (3LO) is that users use their own Salesforce credentials to unfurl, and cannot do unfurling on behalf of someone else.

Please let me know if this helps.