Salesforce Troubleshooting

What are the most common reasons Salesforce fails to connect to Spekit?

Most connection issues are caused by unmet requirements. Before troubleshooting further, confirm the following are all in place:

• The connecting user's Salesforce Profile has the API Enabled system permission.
• The connecting user's Salesforce Profile has the Modify Metadata Through Metadata API Functions system permission.
• The Spekit Connected App in Salesforce is set to Relax IP Restrictions.

Check out Setting up Salesforce for more information on how to enable these settings in Salesforce.

Why don't my new Salesforce fields or objects appear in Spekit?

Spekit does not automatically sync changes from Salesforce. A Spekit Administrator must perform a manual sync to pull in any new fields or objects.

Why don't my new Salesforce users appear in Spekit?

Spekit does not automatically sync user changes from Salesforce. A Spekit Administrator must perform a manual sync.

How do I perform a manual sync?

1. Go to the Settings page → Connect page → look for the Salesforce native integration in Spekit.
2. Click Sync now.

Why are Spekit users getting an OAUTH_APPROVAL_ERROR_GENERIC error when logging in?

This error typically means the Spekit OAuth application has not yet been installed in your Salesforce instance. Because of this, users are unable to self-authorize an uninstalled OAuth app.

To resolve this, a Salesforce Administrator will need to install the Spekit OAuth app in your Salesforce org. Please refer to the Setting up Salesforce article in the Spekit Help Center for step-by-step instructions on how to install it.

Why am I getting a 500 error when trying to authenticate with Salesforce for the first time?

This error most commonly occurs when your organization enforces IP address restrictions at login. Follow the steps below to confirm the cause and resolve it.

Step 1: Confirm the IP address is the issue

1. Log into Salesforce.
2. Go to Setup → Identity → Login History.
3. Search the Application Name column for Spekit to find your login attempt.
4. Confirm the Status column reads Restricted IP.
5. Write down the IP address shown in the Source IP column - you will need this in the steps below.

Step 2: Resolution options

Try the following solutions in order:

Option 1: Create a Trusted IP range in Network Access

1. Go to Setup → Security → Network Access.
2. Click New to create a new trusted IP range.
3. Enter the IP address you recorded from Login History as both the Start and End IP address.
4. Click Save, then try signing into Spekit again.

Option 2: Add the IP address to the User Profile

1. If login still fails after Option 1 and the same IP address appears, go to Manage Users → Profiles → Login IP Ranges.
2. Click New and enter the IP address.
3. Click Save, then try signing into Spekit again.

Option 3: Append the Security Token to your Password

1. From your Salesforce personal settings, enter Reset in the Quick Find box and select Reset Security Token.
2. A new security token will be sent to the email address on your Salesforce account.
3. Try logging into Spekit again by appending the security token directly to the end of your password.

How do I resolve an IP address restriction error while connecting to Salesforce?

To connect your Salesforce org to Spekit, your Salesforce user must have the Modify Metadata permission and no IP restrictions in place.

Step 1: Set the IP range for all Salesforce users in the org

Spekit uses Port 443. Add the following IP addresses to your Salesforce trusted IP ranges:

• 3.139.185.210
• 3.18.141.125
• 3.19.233.113
• 3.124.215.118

To add these IP ranges in Salesforce:

1. Click Setup in Salesforce.
2. In the Quick Search on the left side of the page, search for Network Access and click it.
3. Click New.
4. Enter the Start IP Address and End IP Address for the range.
5. Enter Spekit in the Description field.
6. Click Save. Repeat for each IP address to be added.

Step 2: Append the Security Token to your Password

1. Open your Salesforce personal Settings.
2. Enter Reset in the Quick Find box and click Reset Security Token.
3. A new security token will be sent to the email address on your Salesforce account.
4. Try logging into Spekit again by appending the security token directly to the end of your password.

Step 3: Check Connected Apps OAuth Usage

If the issue persists and is not related to IP addresses, check your Connected Apps OAuth Usage settings:

1. Open Salesforce and click the gear icon, then select Setup.
2. In the search box, enter OAuth and select Connected Apps OAuth Usage.
3. Locate the Spekit line item in the list.
4. Click the Install button and select Allow profiles to connect to the new Connected App for Spekit.

How can a customer with IP restrictions connect Spekit to Salesforce?

Customers with IP restrictions can connect Spekit to Salesforce by adding Spekit as a Content Security Policy (CSP) Trusted Site. This approach helps prevent cross-site scripting (XSS) and other code injection attacks while allowing Spekit to make requests to Salesforce.

To set this up, follow Salesforce's official guide on creating CSP Trusted Sites: Create CSP Trusted Sites to Access Third-Party APIs.

When defining the CSP Trusted Site, add Spekit's URL to the list of allowed sites. This permits Spekit to make external API requests and use WebSocket connections without being blocked by Salesforce's CSP header.

What does the "Could not complete sync" error mean?

This error appears when you go to the Connect page and click Sync Now, and a red error message appears in the bottom-left corner of the screen. It indicates that something has changed with the Salesforce connection since it was originally set up.

Below are the most common causes and how to resolve each one:

• The Salesforce user used to connect Spekit is no longer active.
  Go to the Connect page and check the name listed next to Connected by. Contact your Salesforce Administrator to confirm that user has not been deactivated.
• The Salesforce user does not have the required permissions to sync.
  Update the Salesforce User Profile to meet the required permissions outlined in the Common Troubleshooting section above.
• The Salesforce OAuth token is no longer valid or needs to be reset.
  Contact support@spekit.co and the Spekit Support team will assist you in resetting the token.

Why don't Spek icons appear inside a Visualforce page or iFrame?

Some pages, such as Visualforce pages, use iFrames to display content. Because an iFrame runs on a different URL from the main page, Spek icons will not appear inside it unless you add the iFrame's URL to the relevant Topic.

How do I find the URL of an iFrame or Visualforce page?

1. Right-click anywhere inside the Visualforce page or iFrame.
2. Click View Frame Source from the context menu.
3. A new tab will open and the Chrome address bar will display a URL beginning with view-source: followed by the iFrame URL - for example: view-source:https://yourorg.visual.force.com.
4. Everything after view-source: is the URL you need. Copy this URL (leaving out the view-source: prefix) and add it to the Topic in Spekit where you want Spek icons to appear.

Why don't Spek icons appear on the Edit Quote screen in CPQ?

The Edit Quote screen in Salesforce CPQ uses a Visualforce page, which requires a few additional steps to enable Spek icons.

Steps to enable Spek icons on the Edit Quote screen

1. Open the Salesforce CPQ app and navigate to the CPQ Quote object (SBQQ__Quote__c).
2. Click to open a Quote record (for example, Q-00000).
3. Click Edit Lines.
4. Follow the steps in How to Find the URL of an iFrame or Visualforce Page above to get the correct Visualforce URL for this page. It will contain sbqq - the prefix for the CPQ managed package.
5. Create a new or edit an existing Topic in Spekit and add the URLs for the Salesforce one.app and the Salesforce CPQ prefix (e.g. https://sbqq.[yourorg].visual.force.com).
6. Open a new browser tab, paste the copied URL into the address bar, and press Enter. The Edit Quote Visualforce page will load on its own.