Skip to content
English
  • There are no suggestions because the search field is empty.

Connecting Salesforce to Inven

This guide walks Salesforce administrators through connecting Inven to their organization's Salesforce, so team members can connect Inven themselves.

Time required: ~5 minutes

Required role: Salesforce System Administrator, or any user with the following Salesforce permissions:

  • Approve Uninstalled Connected Apps
  • Manage Users
  • Manage Connected Apps

Before you begin

The first person to connect must be a Salesforce admin with Approve Uninstalled Connected Apps enabled.

Regular users will encounter an authorization error until the setup below is complete.


Step 1: Start the connection from Inven

  1. Open Inven and sign in.
  2. Go to Settings → Integrations → Salesforce.
  3. Click Login to Salesforce.

You'll be redirected to your Salesforce login page.


Step 2: Log in as a Salesforce administrator

  1. Log in with your Salesforce System Administrator account.
  2. On the Salesforce consent screen, review the requested permissions and click Allow.
  3. You'll be redirected back to Inven once the connection is confirmed.

Step 3: Install the Inven app in your Salesforce org

After the first successful connection, Inven appears as an "uninstalled" Connected App in your org. Installing it allows regular users to connect.

  1. In Salesforce, go to Setup.
  2. In Quick Find, search for Connected Apps OAuth Usage and open the page.
    • Direct link: https://your-domain.my.salesforce.com/lightning/setup/ConnectedAppsUsage/home
  3. Find Inven in the list.
  4. Click Install next to it and confirm when prompted.

Salesforce-Connected Apps OAuth Usage


Step 4: Pre-authorize users

This lets your team connect to Inven without needing special permissions. 

step_4_1_salesforce-manage-connected-apps

  1. In Salesforce Setup, search for Manage Connected Apps and open it.
  2. Click Inven, then click Edit Policies.
  3. In the OAuth Policies section, configure the following:

    Setting Value
    Permitted Users All users may self-authorize
    IP Relaxation Relax IP restrictions
    Refresh Token Policy Refresh token is valid until revoked

     

4. Click Save.

salesforce-connected-app-edit

Notes:

  • IP restrictions: If your organization requires strict IP restrictions, you can add the IP ranges for Amazon's us-east-1 and eu-north-1 instances to the app's allowed IPs instead of relaxing restrictions entirely.

  • Refresh Token Policy: You can also match your organization's existing session policy — this may require users to log in again periodically.

  • Restricting access to specific users: If you prefer not to allow all users to self-authorize, set Permitted Users to Admin approved users are pre-authorized. You can then control access via Profiles and/or Permission Sets. This requires the permissions Customize Application, Modify All Data, and Manage Profiles and Permission Sets.

 


Step 5: Notify your team

Your teammates can now connect Salesforce to Inven on their own:

  1. In Inven, go to Settings → Integrations → Salesforce.
  2. Click Login to Salesforce.
  3. Log in with their own Salesforce credentials.

They'll be redirected back to Inven and connected automatically.

No consent screen or additional permissions are required for pre-authorized users.


What Inven accesses

Inven requests the following permissions:

  • Access the identity URL service
  • Manage user data via APIs
  • Perform requests at any time

Inven does not request admin-level permissions and cannot access data beyond what the connecting user can already see in Salesforce.