Connecting Salesforce to Inven
This guide walks Salesforce administrators through connecting Inven to their organization's Salesforce, so team members can connect Inven themselves.
Time required: ~5 minutes
Required role: Salesforce System Administrator, or any user with the following Salesforce permissions:
Approve Uninstalled Connected AppsManage UsersManage Connected Apps
Before you begin
The first person to connect must be a Salesforce admin with Approve Uninstalled Connected Apps enabled.
Regular users will encounter an authorization error until the setup below is complete.
Step 1: Start the connection from Inven
- Open Inven and sign in.
- Go to Settings → Integrations → Salesforce.
- Click Login to Salesforce.
You'll be redirected to your Salesforce login page.
Step 2: Log in as a Salesforce administrator
- Log in with your Salesforce System Administrator account.
- On the Salesforce consent screen, review the requested permissions and click Allow.
- You'll be redirected back to Inven once the connection is confirmed.
Step 3: Install the Inven app in your Salesforce org
After the first successful connection, Inven appears as an "uninstalled" Connected App in your org. Installing it allows regular users to connect.
- In Salesforce, go to Setup.
- In Quick Find, search for Connected Apps OAuth Usage and open the page.
- Direct link:
https://your-domain.my.salesforce.com/lightning/setup/ConnectedAppsUsage/home
- Direct link:
- Find Inven in the list.
- Click Install next to it and confirm when prompted.

Step 4: Pre-authorize users
This lets your team connect to Inven without needing special permissions.

- In Salesforce Setup, search for Manage Connected Apps and open it.
- Click Inven, then click Edit Policies.
- In the OAuth Policies section, configure the following:
Setting Value Permitted Users All users may self-authorizeIP Relaxation Relax IP restrictionsRefresh Token Policy Refresh token is valid until revoked
4. Click Save.

Notes:
-
IP restrictions: If your organization requires strict IP restrictions, you can add the IP ranges for Amazon's
us-east-1andeu-north-1instances to the app's allowed IPs instead of relaxing restrictions entirely. -
Refresh Token Policy: You can also match your organization's existing session policy — this may require users to log in again periodically.
-
Restricting access to specific users: If you prefer not to allow all users to self-authorize, set Permitted Users to
Admin approved users are pre-authorized. You can then control access via Profiles and/or Permission Sets. This requires the permissionsCustomize Application,Modify All Data, andManage Profiles and Permission Sets.
Step 5: Notify your team
Your teammates can now connect Salesforce to Inven on their own:
- In Inven, go to Settings → Integrations → Salesforce.
- Click Login to Salesforce.
- Log in with their own Salesforce credentials.
They'll be redirected back to Inven and connected automatically.
No consent screen or additional permissions are required for pre-authorized users.
What Inven accesses
Inven requests the following permissions:
- Access the identity URL service
- Manage user data via APIs
- Perform requests at any time
Inven does not request admin-level permissions and cannot access data beyond what the connecting user can already see in Salesforce.