Salesforce Troubleshooting

What are the most common reasons Salesforce fails to connect to Spekit?

Most connection issues are caused by unmet requirements. Before troubleshooting further, confirm the following are all in place:

• The connecting user's Salesforce Profile has the API Enabled system permission.
• The connecting user's Salesforce Profile has the Modify Metadata Through Metadata API Functions system permission.
• The Spekit Connected App in Salesforce is set to Relax IP Restrictions.

Why don't Spek icons appear inside a Visualforce page or iFrame?

Some pages, such as Visualforce pages, use iFrames to display content. Because an iFrame runs on a different URL from the main page, Spek icons will not appear inside it unless you add the iFrame's URL to the relevant Topic.

How do I find the URL of an iFrame?

1. Right-click anywhere inside the Visualforce page or iFrame.
2. Click View Frame Source from the context menu.
3. A new tab will open and the Chrome address bar will display a URL beginning with view-source: followed by the iFrame URL - for example: view-source:https://yourorg.visual.force.com.
4. Everything after view-source: is the iFrame URL you need. Copy this URL and add it to the Topic in Spekit where you want Spek icons to appear.

How do I find and copy the Visualforce URL in Google Chrome?

1. Right-click on the white space on the Visualforce page.
2. Click Inspect from the context menu to open Chrome DevTools.
3. In the DevTools panel, click View Frame Source. A new tab will open showing the source of the Visualforce page.
4. Copy the full URL that appears in the address bar of that new tab.
5. Add this Visualforce URL to the Topic in Spekit where you want Spek icons to appear.

Why don't my new Salesforce fields or objects appear in Spekit?

Spekit does not automatically sync changes from Salesforce. A Spekit Administrator must perform a manual sync to pull in any new fields or objects.

How do I perform a manual sync?

1. Go to the Settings page → Connect page → look for the Salesforce integration in Spekit.
2. Click Sync now.

Why are Spekit users getting an OAUTH_APPROVAL_ERROR_GENERIC error when logging in?

This error typically means the Spekit OAuth application has not yet been installed in your Salesforce instance. Because of this, users are unable to self-authorize an uninstalled OAuth app.

To resolve this, a Salesforce Administrator will need to install the Spekit OAuth app in your Salesforce org. Please refer to the Setting up Salesforce article in the Spekit Help Center for step-by-step instructions on how to install it.

Why am I getting a 500 error when trying to authenticate with Salesforce for the first time?

This error most commonly occurs when your organization enforces IP address restrictions at login. Follow the steps below to confirm the cause and resolve it.

Step 1: Confirm the IP address is the issue

1. Log into Salesforce.
2. Go to Setup → Manage Users → Login History.
3. Search the Application Name column for Spekit to find your login attempt.
4. Confirm the Status column reads Restricted IP.
5. Write down the IP address shown in the Source IP column - you will need this in the steps below.

Step 2: Resolution options

Try the following solutions in order:

Option 1: Create a Trusted IP range in Network Access

1. Go to Setup → Security Controls → Network Access.
2. Click New to create a new trusted IP range.
3. Enter the IP address you recorded from Login History as both the Start and End IP address.
4. Click Save, then try signing into Spekit again.

Option 2: Add the IP address to the User Profile

1. If login still fails after Option 1 and the same IP address appears, go to Manage Users → Profiles → Login IP Ranges.
2. Click New and enter the IP address.
3. Click Save, then try signing into Spekit again.

Option 3: Append the Security Token to your Password

1. From your Salesforce personal settings, enter Reset in the Quick Find box and select Reset Security Token.
2. A new security token will be sent to the email address on your Salesforce account.
3. Try logging into Spekit again by appending the security token directly to the end of your password.

Why don't my new Salesforce users appear in Spekit?

Spekit does not automatically sync user changes from Salesforce. A Spekit Administrator must perform a manual sync.

1. Go to the Connect page in Spekit.
2. Click Sync now.

How can a customer with IP restrictions connect Spekit to Salesforce?

Customers with IP restrictions can connect Spekit to Salesforce by adding Spekit as a Content Security Policy (CSP) Trusted Site. This approach helps prevent cross-site scripting (XSS) and other code injection attacks while allowing Spekit to make requests to Salesforce.

To set this up, follow Salesforce's official guide on creating CSP Trusted Sites: Create CSP Trusted Sites to Access Third-Party APIs.

When defining the CSP Trusted Site, add Spekit's URL to the list of allowed sites. This permits Spekit to make external API requests and use WebSocket connections without being blocked by Salesforce's CSP header.

How do I resolve an IP address restriction error while connecting to Salesforce?

To connect your Salesforce org to Spekit, your Salesforce user must have the Modify Metadata permission and no IP restrictions in place.

Step 1: Set the IP range for all Salesforce users in the org

Spekit uses Port 443. Add the following IP addresses to your Salesforce trusted IP ranges:

• 3.139.185.210
• 3.18.141.125
• 3.19.233.113
• 3.124.215.118

To add these IP ranges in Salesforce:

1. Click Setup in Salesforce.
2. In the Quick Search on the left side of the page, search for Network Access and click it.
3. Click New.
4. Enter the Start IP Address and End IP Address for the range.
5. Enter Spekit in the Description field.
6. Click Save. Repeat for each IP address to be added.

Step 2: Append the Security Token to your Password

1. Open your Salesforce personal Settings.
2. Enter Reset in the Quick Find box and click Reset Security Token.
3. A new security token will be sent to the email address on your Salesforce account.
4. Try logging into Spekit again by appending the security token directly to the end of your password.

Step 3: Check Connected Apps OAuth Usage

If the issue persists and is not related to IP addresses, check your Connected Apps OAuth Usage settings:

1. Open Salesforce and click the gear icon, then select Setup.
2. In the search box, enter OAuth and select Connected Apps OAuth Usage.
3. Locate the Spekit line item in the list.
4. Click the Install button and select Allow profiles to connect to the new Connected App for Spekit.

What does the "Could not complete sync" error mean?

This error appears when you go to the Connect page and click Sync Now, and a red error message appears in the bottom-left corner of the screen. It indicates that something has changed with the Salesforce connection since it was originally set up.

Below are the most common causes and how to resolve each one:

• The Salesforce user used to connect Spekit is no longer active.
  Go to the Connect page and check the name listed next to Connected by. Contact your Salesforce Administrator to confirm that user has not been deactivated.
• The Salesforce user does not have the required permissions to sync.
  Update the Salesforce User Profile to meet the required permissions outlined in the Common Troubleshooting section above.
• The Salesforce OAuth token is no longer valid or needs to be reset.
  Contact support@spekit.co and the Spekit Support team will assist you in resetting the token.

Why don't Spek icons appear on the Edit Quote screen in CPQ?

The Edit Quote screen in Salesforce CPQ uses a Visualforce page, which requires a few additional steps to enable Spek icons.

Prerequisite

Create a new Topic in Spekit and add the URLs for the Salesforce one.app and the Salesforce CPQ prefix (e.g. https://sbqq.[yourorg].visual.force.com).

Steps to enable Spek icons on the Edit Quote screen

1. Open the Salesforce CPQ app and navigate to the CPQ Quote object (SBQQ__Quote__c).
2. Click to open a Quote record (for example, Q-00000).
3. Click Edit Lines.
4. Right-click in the white space on the page and select View Frame Source. A new browser tab will open showing the Visualforce page source.
5. In the address bar of the new tab, copy the full Visualforce URL. This will be the URL containing sbqq - the prefix for the CPQ managed package - starting from https:// through to the end of the URL string.
6. Open a new browser tab, paste the copied URL into the address bar, and press Enter. The Edit Quote Visualforce page will load on its own.
7. Open the Spekit Chrome Extension from the browser toolbar.
8. Click Settings in the bottom-right corner of the extension.
9. Toggle on Enable help text icon for the current domain. The page will automatically refresh.
10. Go back to your original CPQ tab with the Edit Quote screen open and refresh the page.
11. Spek icons will now appear next to the fields you have defined and associated with the Topic you created.

Are there areas in Salesforce where Spek icons won't appear?

Yes. There are two known areas in Salesforce where Spek icons are not available:

• Reports: Spekit automatically disables Spek icons on all Salesforce Reports for all customers. This is due to a known performance issue with Salesforce Lightning Reports where adding Spek icons causes slowness.
• Dashboards: Since Salesforce Dashboards are built directly from Reports, Spek icon availability is limited. Spek icons may not appear on the Reports used to build Dashboards.