Salesforce
FortiCASB offers an API-based approach, pulling data directly from Salesforce via RESTful API. Then FortiCASB portal accesses the data collected through API queries with OAuth2.0 authentication. Subsequently, FortiCASB combines these data to monitor and track Salesforce user activities, provides DLP Data Analysis for files stored on Salesforce.
Prerequisites
FortiCASB supports Salesforce Small Business Essentials edition (the API is enabled by default), other editions are not supported.
The user account added on FortiCASB must have the following permissions:
- View All Data
- View All Users
- API Enabled
You may either use an existing account or create a new account. If you create a new account, wait at least 24 hours for the new account to take effect before granting access to FortiCASB.
|
The following features require "Manage Users" permission as well:
Without "Manage Users" permissions, FortiCASB cannot obtain user login IPs. Therefore, any user activity will not appear on the Activity map. |
Add Salesforce Account
- Log into FortiCASB with your account.
- Go to Overview > Dashboard, click on Add New, select Salesforce, then click Add Selected Cloud App.
- Click Grant Access @Salesforce to be re-directed to Salesforce for authentication.
- Log in to authenticate. If you have a custom Salesforce domain, enter it here.
- Click Allow to grant FortiCASB permissions to monitor your Salesforce application.
Salesforce will prompt you to allow or deny access.
After you click Allow, you will be redirected back to the FortiCASB dashboard.
You can check the installation result and SaaS platform monitoring status in the Salesforce dashboard.
|
|
For more information on common installation issues, see "Troubleshooting". |