Setting up OAuth for Rapid Human Translation in Salesforce Case

This article describes how to establish an OAuth connection between Language IO and your Salesforce org for Rapid Human Translation in the Language IO Case for Salesforce application.

In this article

1. Setting up OAuth for Rapid Human Translation in Salesforce Case
   1. Creating a Salesforce Integration User
      1. Creating the User
      2. Assigning Required Permissions
   2. Creating an External Client App
      1. Creating the App and Setting the App's Settings
      2. Setting the App's Policies
   3. Sharing your External Client App Key and Secret with Language IO
2. Establishing the OAuth Connection

Setting up OAuth for Rapid Human Translation in Salesforce Case

Creating a Salesforce Integration User

Create a dedicated Salesforce user for the Language IO Case integration. This user must have the permissions described below.

Creating the User

1. In Salesforce, go to Setup > Users.
2. Click New User.
3. Fill out required user details. 
   1. Give the user an email address that you have access to (to verify it and set a password).
4. Check Generate new password and notify user immediately:
   
5. Click Save. 
6. Salesforce sends an email to the user's email address. Verify the account, and set a password.

Assigning Required Permissions

1. Assign the following Permission Set:
   • Language Response User
2. Assign a Permission Set with Edit Access for the following object fields:
   • Case.Description
   • Case.Subject
   • Task.Related To
   • Task.Comments
   • Task.Due Date
   • Event.Related To
   • Event.Description

Creating an External Client App

Creating the App and Configuring the App's Settings

1. In Salesforce, go to Setup > External Client App Manager.
2. Click New External Client App:
   
3. Under Basic Information, fill in the following fields:
   
   1. External Client App Name: Give your app a name (e.g. "Language IO Case")
   2. API Name: Use the auto-generated name (e.g. "Language_IO_Case")
   3. Contact Email: dev_ops@languageio.com
   4. Distribution State: Local
4. Under API (Enable OAuth Settings), check Enable OAuth:
   
    
5. Then, under the App Settings sub-section:
   
   1. Set the Callback URL: https://golinguist.com/linguistnow/handleResponseOAuthDecision
   2. Move the following Available OAuth Scopes into the Selected OAuth Scopes box:
      • Manage user data via APIs (API)
      • Perform requests at any time (refresh_token, offline_access)
6. Under Flow Enablement, check Enable Client Credentials Flow:
   
7. Under Security:
   
   1. Check Require Secret for Web Server Flow.
   2. Check Require Secret for Refresh Token Flow.
   3. Uncheck Require Proof Key for Code Exchange (PKCE) extension for Supported Authorization Flows.
8. At the bottom of the page, click Create:
   

Setting the App's Policies

1. Open the Policies tab (or Setup > External Client App Manager >  your app > Edit Policies).
2. Click Edit:
   
3. Under OAuth Policies > OAuth Flows and External Client App Enhancements:
   
    
   1. Check "Enable Client Credentials Flow".
   2. Set "Run As (Username)" to the username of your Integration User.
4. Under OAuth Policies > App Authorization

   1. Set IP Relaxation to "Relax IP Restrictions":
      

      Important: Inform Language IO if you must enforce IP restrictions. This requires additional configuration to support a successful OAuth connection.
   2. Set Refresh Token Policy to your preferred policy.
5. At the bottom of the page, click Save:
   
    

Sharing your External Client App Key and Secret with Language IO

1. In Salesforce, go to Setup > External Client App Manager.
2. Click to Edit Settings of your External Client App for Language IO Case:
   
3. Open the Settings tab:
   

4. Under OAuth Settings, click Consumer Key and Secret:
   

   Note: Salesforce may ask you to verify your identity before revealing the consumer key and secret. Check your email for the Verification Code and proceed.

5. Share the Consumer Key and Consumer Secret with Language IO:
   

   Note: You can share these details with Language IO in a Onetime Secret link (https://onetimesecret.com/) or in a secure manner of your choice. 
6. Language IO confirms receipt, and informs you when you may proceed to the next step: Establishing the OAuth Connection.

Establishing the OAuth Connection

1. Log in to the following Language IO page with your CSSP admin user credentials:
   https://golinguist.com/linguistnow/consumer/response-oauth
   
2. You are redirected to your Salesforce org login page.
3. Log in with your Integration User credentials.
4. Click Allow to allow Language IO access to the required OAuth scopes.
5. The connection is established. You are redirected to a Language IO page with a message stating that OAuth was successful.