Introduction
Now that Salesforce on Alibaba Cloud is live, your organisation may have started planning their multi org strategy.
If you have a Salesforce org hosted on Alibaba Cloud you will need to connect it to your Gearset account, which will allow you to:
This article will take you through the process of connecting to a Salesforce on Alibaba (aka SFOA) org.
At the moment this connection type doesn't allow the use of our data deployment solution, or the creation of data backup jobs.
This is to prevent users:
Using Gearset to move customer data out of China to anywhere else.
Making a backup of their Chinese org on a Gearset instance not hosted in China.
Doing either of those things would defeat the purpose of setting up an org in China for data residency compliance. There's scope in the future to allow data deployments to China as part of the initial setup process of these orgs, but but for now we have limited the connection use to metadata (and configuration data). If you would like us to allow the deployment of data to or from your org hosted in China please feed that back through the in-app chat so we know that you require that support.
Note: If you're planning to use team-shared Pipelines, please make sure you connect to any shared orgs using team-shared connections.
Creating a connected app in your Salesforce on Alibaba Cloud org
Before you start, make sure that you have a user in the org with these permissions.
To use Gearset with your Salesforce China instance securely, we're going to create a Connected App within your instance that will allow Gearset to connect with it.
We also recommend that a team owner creates the connection, so that access can delegated appropriately to team members.
Configuring the basic connected app settings
In your org:
Open
Setup
.Search for
App Manager
and open it.
Click New Connected App
in the top right of the screen.
Next, enter the following information:
Connected App Name
API Name
Contact email (this should be your email)
Contact Phone
leave blank
Logo image url
leave blank
Icon url
leave blank
Info url
https://gearset.com (optional)Description
An OAuth app to allow Gearset to deploy to orgs based in China.
Check the Enable OAuth settings checkbox, and input the following values.
For the Callback URL enter
https://app.gearset.com/authorization/callback
Enable for device flow
leave blank
Call abc url
leave blank
Use digital signatures
leave blank
Selected OAuth scope
Full access
and Perform requests at any time
Require Proof Key for Code Exchange (PKCE) Extension for Supported Authorization Flows
tick
Require Secret for Web Server Flow
tick
Require Secret for Refresh Token Flow
tick
Enable Client Credentials Flow
leave blank
Enable Authorization Code and Credentials Flow
leave blank
Enable Token Exchange Flow
leave blank
Enable Refresh Token Rotation
leave blank
Issue JSON Web Token (JWT)-based access tokens for named users
leave blank
Introspect All Tokens
leave blank
15. Click the ”Save
” button at the top of the screen, and on the next page click Continue
.
16. Click the ”Manage
” button at the top of the page.
17. Click “Edit Policies
” at the top of the page.
18. Set “Permitted Users
” to All users may self-authorize
.
19. Click “Save
”, the final settings should look like this.
Getting the Consumer ID and Secret
To get the Consumer Key and Secret:
Open
Setup
.Search for
App Manager
and open it.Find your new App, and click “
View
”.Click “
Manage consumer Details
”.On the next page you will see the
Consumer Key
andConsumer Secret
.
Connecting to your org hosted on Alibaba Cloud
You will need to start by creating a connected app in your SFOA org.
Navigate to the Salesforce org connections page in Gearset.
Click "Add new organization".
Input the following details:
The custom domain of your org.
The Consumer Key in "
Client ID
" andThe Consumer Secret in "
Client secret
"
If you are setting up this connection to be used as part of a Pipeline toggle "
Team-shared connection
" to on.Click
Connect
- this will bring you to your organization's login page. Log in to the org as normal, and you will be returned to Gearset.
After the connection is complete you will see it on your list of connected orgs here. You can also delegate access to your team members.