Learn how to manage Salesforce Users. You must have Account Admin-level access to manage Salesforce Users.
Salesforce Multi-Factor Authentication (MFA) + Single Sign-On (SSO) with Spekit
- As of Tuesday, February 1, 2022, Salesforce will require all customers to enable multi-factor authentication (MFA) to access Salesforce.
- If users are currently logged in to Spekit with Salesforce, they will not be affected until they log out, at which point they will be required to perform the MFA for Salesforce.
- If an employee manually logs out, they need to do the MFA for Salesforce again.
- Enabling SSO will provide a one-click login experience with Spekit without the extra codes from Salesforce.
- We encourage your organization to adopt Single Sign-On (SSO) to avoid additional login friction if your organization logs in with Salesforce to access Spekit.
Note: Regardless of whether you use SSO to log into Spekit, Salesforce will still require an MFA through the identity provider (IdP) or Salesforce mobile app.
If you have questions, please contact your Customer Success Manager to get the Single Sign On (SSO) process started with Spekit.
Spekit supports OKTA, One Login, Ping One, and Azure.
Salesforce OAuth authorization for the Spekit App
When setting up Spekit, users with a System Administrator profile in Spekit can authenticate with Salesforce using OAuth. End-users can sign in using Salesforce OAuth or sign in directly with their Spekit username and password.
Source:https://help.salesforce.com/articleView?id=remoteaccess_authenticate.htm
How to Relax IP Restrictions for the Spekit OAuth in Salesforce
The internal Salesforce Administrator will need to make the changes shown below.
Reason for this change: Users in your organization using their Salesforce usernames to authenticate with Spekit could run into an issue where they see IP Blocked when they attempt to log in.
Adjusting the IP Restrictions to Relax IP Restrictions for the Spekit OAuth in Salesforce for the Spekit Web App will resolve the abovementioned issue.
1.) Log in to your Salesforce org.
2.) Click Setup.
3.) In the Quick Find, search for OAuth.
4.) Click Connected Apps OAuth Usage.
5.) Locate Spekit OAuth on the Connected Apps OAuth Usage list, and click Manage App Policies.
6.) Locate the IP Restriction field, and it will show Enforce IP restrictions, and click Edit Policies.
7.) Locate the IP Restriction field, click the drop-down, and select Relax IP restrictions.
8.) Scroll down, and click Save.
9.) Locate the IP Restriction field, and you will see it shows Relax IP restrictions.
Do users need a Salesforce license to use Spekit?
No. While Spekit uses your Salesforce metadata as a baseline, the goal is to create a source of truth and reference for anyone in your organization to access the information and definitions they need around your data points and business terminology.
To this end, any Spekit user can access the information in Spekit using the Web App or Chrome Extension, regardless of whether or not they have a Salesforce license.
How to invite a Salesforce User to join Spekit
As the Account Admin, you need to sync your Salesforce instance for available Salesforce users to be shown to invite.
From the Spekit Web App:
1.) Go to Setiings
2.) Click Connect on the left navigation bar.
3.) Click Sync now button in the Salesforce section and the sync process will start.
Note: Please do not navigate on the Spekit Web App until the sync completes.
4.) When the sync completes you will see a blue notification on the bottom left of the page and you will receive an email confirming it is completed.
5.) in the Spekit Web App, go to Settings. Click on Teams & Users in the left navigation bar.
6.) Click Invite Synced Salesforce Users.
7.) Select the users you want to invite and click the blue Invite button.
6.) Select a Team and Select a Team-specific role for the users.
7.) Click the blue Add # user.
You will receive a notification in the bottom left corner of your screen that says: User successfully invited.
How to accept a Spekit invite as a Salesforce user
The invited Salesforce user will receive an Accept Invite email like the one below.
1.) Click on the blue Accept Invite button.
The Salesforce user is transitioned to a screen that asks them to log in with Salesforce.
2.) Click the blue button Login with Salesforce to proceed.
The Salesforce user will be taken to the Salesforce login screen.
3.) Enter their Salesforce username and password.
The Salesforce user will be asked to Allow Access to the following.
4.) Click the blue Allow button to proceed.
The Salesforce user will now be logged into the Spekit dashboard.
5.) Click the blue Install from the Chrome Store.
6.) Click the blue Add to Chrome button to install the Spekit Chrome Extension.