You can connect your Salesforce organization to Zscaler 3rd-Party App Governance to gain continuous visibility and governance for third-party apps installed in the Salesforce environment, including automation of your vetting and governance processes.

Prerequisite

A user with Admin privileges in the relevant Salesforce organization is required to connect 3rd-Party App Governance to your Salesforce organization.

Connecting Salesforce to 3rd-Party App Governance

To connect your Salesforce organization to 3rd-Party App Governance:

1. Click the Connect icon in the left-side navigation.

See image.

The Integrations window appears.

2. In the Integrations window, click Add next to Salesforce. You are prompted to sign in if you haven't already done so.

See image.

A consent window appears, and you can see a detailed list of permissions and data collected here.

3. In the consent window, click Allow.

The Authorize App window appears.

4. In the Authorize App window, click the green check mark button to authorize the app.

See image.

After integration is completed, a success message appears, and the number of domains is updated.

Viewing and Managing Salesforce Integration

You can click Salesforce in the Integrations window to expand and view the list of added domains along with information such as First connected, Last Synced, and Status.

• Domain: The name of the domain integrated with 3rd-Party App Governance.
• First connected: The date and time the domain was added, and the person who added the domain.
• Last Synced: The date and time the domain was last synced. If the domain has yet to sync, N/A is displayed. If the duration of the sync is excessive, the last sync time is highlighted in red.

When there are multiple domains, 3rd-Party App Governance displays the last sync with the most excessive time duration to indicate an issue so you can expand, view the domain, and take the relevant actions.

• Status: The integration status of the domain. One of the following statuses is displayed:
  • Error: Failure to achieve a connection. The error message displays the reason for the failure. Contact Zscaler Support if you require further assistance.
  • In progress: Connection is achieved and 3rd-Party App Governance is ingesting the relevant data. It might take a while to pull and ingest all relevant application data depending on the size of your tenant. During this time, a message is displayed that the domain is still being processed. You then receive an email from Zscaler when the domain is ready for further review.
  • Success: The integration is completed successfully and the last sync time is updated.

See image.

Reconnecting Salesforce to 3rd-Party App Governance

You might need to reconnect Salesforce to 3rd-Party App Governance if an error is displayed (e.g., Grant Expired). To reconnect Salesforce to 3rd-Party App Governance:

1. Click Salesforce in the Integrations window to expand and view the list of added domains.
2. Click the Reconnect icon next to the relevant domain.

A confirmation window appears.

3. Click Confirm to continue.

A consent window appears. After consent is granted, the connection is updated.

Deleting a Salesforce Connection

You can delete a Salesforce connection to 3rd-Party App Governance. To delete a Salesforce connection:

1. Click Salesforce in the Integrations window to expand and view the list of added domains.
2. Click the Delete icon next to the relevant domain.

A confirmation window appears.

3. Click Confirm to continue.

The connection is successfully deleted.