Salesforce Capabilities

After this article...

You'll understand the capabilities our Salesforce integration provides, and how Lumos interacts with the Salesforce API.

View users

The mapping between Salesforce user statuses and Lumos user account statuses is below.

Salesforce API endpoint: https://developer.salesforce.com/docs/atlas.en-us.uiapi.meta/uiapi/ui_api_resources_record_get.htm (we make a call to retrieve the USER objects and use the IsActive field) 

View a user's entitlements

Lumos can retrieve the following user entitlements from Salesforce.

• Permission Set - A collection of settings and permissions that give users access to various tools and functions. Users can have multiple permission sets.

• Permission Set License - These give users incremental access to features not included in their base licenses. Users can have multiple permission set licenses.

• Profile - Profiles define a set of permissions a user has. Profiles are 1:1 with users.

• User License - Determines the baseline features a user can access.

Salesforce API endpoints: https://help.salesforce.com/s/articleView?id=sf.identity_scim_rest_api.htm&type=5

Permission Set, Permission Set Licenses, and Profiles: https://MyDomainName.my.salesforce.com/services/scim/v2/Entitlements

View a user's last login

In Lumos, the Last Login value represents the last time the user logged into Salesforce.

Salesforce API endpoint: https://developer.salesforce.com/docs/atlas.en-us.api_rest.meta/api_rest/resources_sobject_retrieve_get.htm (we get LastLoginDate)

Suspend a user

In Lumos, suspending a Salesforce user marks their Account Status as "Suspended".

In Salesforce, this action suspends, but doesn't delete, the user's account. Suspended users can be reactivated.

Salesforce API endpoint: https://help.salesforce.com/s/articleView?id=sf.identity_scim_deactivate_reactivate_user.htm&type=5 (we hit the DELETE endpoint, but this doesn't delete the account, it just suspends it).

Release resources

* Available only in Inactivity Workflows

In Lumos, releasing a user's resources will cause the user's Permission Set values to be empty after the next sync with Salesforce.

In Salesforce, this action removes all Permission Sets associated with the user's record.

Salesforce API endpoint: https://help.salesforce.com/s/articleView?id=sf.identity_scim_update_users.htm&type=5 (we set the user's entitlements to empty).

Transfer data

* Available only in Inactivity Workflows

In Lumos, transferring a Salesforce user's data to another user has no impact on data in Lumos.

In Salesforce, this action transfer's the user's Accounts, Opportunities, and Tasks to another user.

Salesforce API endpoint: https://developer.salesforce.com/docs/atlas.en-us.api_rest.meta/api_rest/resources_sobject_basic_info_get.htm (we fetch all sObjects associated with that user and object type and change the OwnerIdto the new user's ID)

Provision a user

More information about our native Salesforce provisioning capabilities can be found here:📄 Configuring Salesforce Provisioning

Useful links

Salesforce API documentation