Setting up OAuth for Salesforce Article

This article describes how to establish an OAuth connection between Language IO and your Salesforce org for the Language IO Article application.

In this article

1. Setting up OAuth for Salesforce Article
   1. Creating a Salesforce Integration User
      1. Creating and Setting the User as a Knowledge User
      2. Assigning Required Permissions
   2. Creating an External Client App
      1. Creating the App and Setting the App's Settings
      2. Setting the App's Policies
   3. Sharing your External Client App Key and Secret with Language IO
2. Establishing the OAuth Connection

Setting up OAuth for Salesforce Article

Creating a Salesforce Integration User

Create a dedicated Salesforce user for the Language IO Article integration. This user must be a Knowledge User and have the permissions described below.

Creating and Setting the User as a Knowledge User

1. In Salesforce, go to Setup > Users.
2. Click New User.
3. Fill out required user details. 
   1. Give the user an email address that you have access to (to verify it and set a password).
   2. Check Knowledge User:
      
4. Check Generate new password and notify user immediately:
   
5. Click Save.
6. Salesforce sends an email to the user's email address. Verify the account, and set a password.

Assigning Required Permissions

1. Assign the following Permission Sets:
   • Language IO Knowledge - Non Quote User
   • Language IO Knowledge - Quote User
2. Assign a Permission Set with the following permissions:
   1. App Permissions:
      • Article Translation - Edit
      • Article Translation - Publish
      • Article Translation - Submit for Translation  
      • Manage Salesforce Knowledge
   2. If you use Data Categories, set the Data Category Visibility:
      1. Assign Category Group visibility as applicable.

Creating an External Client App

Creating the App and Configuring the App's Settings

1. In Salesforce, go to Setup > External Client App Manager.
2. Click New External Client App:
   
3. Under Basic Information, fill in the following fields:
   
   1. External Client App Name: Give your app a name (e.g. "Language IO Article")
   2. API Name: Use the auto-generated name (e.g. "Language_IO_Article")
   3. Contact Email: dev_ops@languageio.com
   4. Distribution State: Local
4. Under API (Enable OAuth Settings), check Enable OAuth:
   
    
5. Then, under the App Settings sub-section:
   
   1. Set the Callback URL: https://golinguist.com/linguistnow/handleHelpOAuthDecision
   2. Move the following Available OAuth Scopes into the Selected OAuth Scopes box:
      • Manage user data via APIs (API)
      • Access content resources (content)
      • Perform requests at any time (refresh_token, offline_access)
6. Under Flow Enablement, check Enable Client Credentials Flow:
   
7. Under Security:
   
   1. Check Require Secret for Web Server Flow.
   2. Check Require Secret for Refresh Token Flow.
   3. Uncheck Require Proof Key for Code Exchange (PKCE) extension for Supported Authorization Flows.
8. At the bottom of the page, click Create:
   

Setting the App's Policies

1. Open the Policies tab (or Setup > External Client App Manager >  your app > Edit Policies).
2. Click Edit:
   
3. Under OAuth Policies > OAuth Flows and External Client App Enhancements:
   
    
   1. Check "Enable Client Credentials Flow".
   2. Set "Run As (Username)" to the username of your Integration User.
4. Under OAuth Policies > App Authorization

   1. Set IP Relaxation to "Relax IP Restrictions":
      

      Important: Inform Language IO if you must enforce IP restrictions. This requires additional configuration to support a successful OAuth connection.
   2. Set Refresh Token Policy to your preferred policy.
5. At the bottom of the page, click Save:
   
    

Sharing your External Client App Key and Secret with Language IO

1. In Salesforce, go to Setup > External Client App Manager.
2. Click to Edit Settings of your External Client App for Language IO Article:
   
3. Open the Settings tab:
   

4. Under OAuth Settings, click Consumer Key and Secret:
   

   Note: Salesforce may ask you to verify your identity before revealing the consumer key and secret. Check your email for the Verification Code and proceed.

5. Share the Consumer Key and Consumer Secret with Language IO:
   

   Note: You can share these details with Language IO in a Onetime Secret link (https://onetimesecret.com/) or in a secure manner of your choice. 
6. Language IO confirms receipt, and informs you when you may proceed to the next step: Establishing the OAuth Connection.

Establishing the OAuth Connection

1. Log in to the following Language IO page with your CSSP admin user credentials:
   https://golinguist.com/linguistnow/consumer/help-oauth
   
2. You are redirected to your Salesforce org login page.
3. Log in with your Integration User credentials.
4. Click Allow to allow Language IO access to the required OAuth scopes.
5. The connection is established. You are redirected to a Language IO page with a message stating that OAuth was successful.