Salesforce
Integration version: 9.0
Configure Salesforce to work with Google Security Operations
Obtain a Security Token
Upon creating your Salesforce account, Salesforce Support will send you an emailthat contains a security token confirmation to the email address associated withthe account. This email is the only place where you can find the Security TokenValue. Please note that every time you change the account password, the securitytoken is also regenerated and a similar email is sent.
Note: For more information on security tokens, seeSupporting Multiple Instances.Configure Salesforce integration in Google SecOps
For detailed instructions on how to configure an integration inGoogle SecOps, seeConfigureintegrations.
Integration parameters
Use the following parameters to configure the integration:
| Parameter Display Name | Type | Default Value | Is Mandatory | Description |
|---|---|---|---|---|
| Api Root | String | N/A | Required. | The base URL for your Salesforce instance's API. For example: |
| Username | String | N/A | Required. | The username for the Salesforce account that connects to the API. |
| Password | Password | N/A | Required. | The password for the Salesforce account that connects to the API. If your Salesforce account uses a security token, you must append it to theend of the password. |
| Token | Password | Unchecked. | Required. | TThe Salesforce security token used for authentication. Use this parameter with theUsername andPassword fields ifyour Salesforce account requires a security token for authentication. |
| Verify SSL | Boolean | Unchecked. | Optional. | If enabled, the integration validates the SSL certificate when connectingto Salesforce. |
Actions
Add Comment
Description
Add a comment to a case.
Parameters
| Parameter | Type | Default Value | Description |
|---|---|---|---|
| Case Number | String | N/A | The number of the case. |
| Title | String | N/A | The comment title. |
| Body | String | N/A | The comment's body. |
Use cases
N/A
Run On
This action runs on all entities.
Action Results
Entity Enrichment
N/A
Insights
N/A
Script Result
| Script Result Name | Value Options | Example |
|---|---|---|
| is_success | True/False | is_success:False |
JSON Result
N/AClose Case
Description
Delete a domain from the OpenDNS block list.
Parameters
| Parameter | Type | Default Value | Description |
|---|---|---|---|
| Case Number | String | null | N/A |
Use cases
N/A
Run On
This action runs on all entities.
Action Results
Entity Enrichment
N/A
Insights
N/A
Script Result
| Script Result Name | Value Options | Example |
|---|---|---|
| is_success | True/False | is_success:False |
JSON Result
N/ACreate Case
Description
Create a case.
Parameters
| Parameter | Type | Default Value | Description |
|---|---|---|---|
| Subject | String | N/A | The case's subject. |
| Status | String | N/A | The case's status. Valid values: New, On Hold, Closed, Escalated. |
| Description | String | N/A | The description of the subject. |
| Origin | String | N/A | The origin of the case. Valid values: Email, Phone, Web. |
| Priority | String | N/A | The case's priority. Valid values: Low, Medium, High. |
| Type | String | N/A | The case type. Valid values: Question, Problem, Feature Request. |
Use cases
N/A
Run On
This action runs on all entities.
Action Results
Entity Enrichment
N/A
Insights
N/A
Script Result
| Script Result Name | Value Options | Example |
|---|---|---|
| case_number | N/A | N/A |
JSON Result
N/AGet Case
Description
Get details on a case.
Parameters
| Parameter | Type | Default Value | Description |
|---|---|---|---|
| Case Number | String | N/A | The number of the case. |
Use cases
N/A
Run On
This action runs on all entities.
Action Results
Entity Enrichment
N/A
Insights
N/A
Script Result
| Script Result Name | Value Options | Example |
|---|---|---|
| is_success | True/False | is_success:False |
JSON Result
{"Field2":"Value2","attributes":{"url":"/services/data/v20.0/sobjects/Case/123456789","type":"Case"},"Field1":"Value1","Field3":"Value3"}List Cases
Description
The case list component displays a list of the user's cases. Only authenticatedusers can see a list of the cases that they've created.
Parameters
N/A
Use cases
N/A
Run On
This action runs on all entities.
Action Results
Entity Enrichment
N/A
Insights
N/A
Script Result
| Script Result Name | Value Options | Example |
|---|---|---|
| is_success | True/False | is_success:False |
JSON Result
[{"Field2":"Value2","attributes":{"url":"/services/data/v20.0/sobjects/Case/123456789","type":"Case"},"Field1":"Value1","Field3":"Value3"},]Ping
Description
Test Connectivity.
Parameters
N/A
Use cases
N/A
Run On
This action runs on all entities.
Action Results
Entity Enrichment
N/A
Insights
N/A
Script Result
| Script Result Name | Value Options | Example |
|---|---|---|
| is_success | True/False | is_success:False |
JSON Result
N/ASearch Records
Description
Search all records that contain values with a given pattern.
Parameters
| Parameter | Type | Default Value | Description |
|---|---|---|---|
| Query | String | N/A | N/A |
Use cases
N/A
Run On
This action runs on all entities.
Action Results
Entity Enrichment
N/A
Insights
N/A
Script Result
| Script Result Name | Value Options | Example |
|---|---|---|
| is_success | True/False | is_success:False |
JSON Result
{"Tasks":[{"WhoId":"0033600001bbxuPAAQ","ActivityDate":"2018-07-24","Id":"00T3600003T0io5EAB","Subject":"Email Sent: Re: domain - SOAR RFI / RFP template with domain answers"},{"WhoId":"0033600001cYpvnAAC","ActivityDate":"2018-07-24","Id":"00T3600003T0ixHEAR","Subject":"Email Sent: domain - SOAR RFI / RFP template with domain answers"}],"Users":[{"Phone":null,"Name":"lname fname, CISSP","Title":"Senior Sales Engineer","Email":"john_doe@example.com","Id":"0051Q00000FoH8OQAV"},{"Phone":null,"Name":". Marketo","Title":null,"Email":"john_doe@example.com","Id":"0051Q00000FoNDUQA3"}],"Contacts":[{"Name":"John","Title":null,"MobilePhone":null,"Email":"john_doe@example.com","Phone":null,"OwnerId":"00536000006kd4wAAA","Id":"0031Q00001uwg4mQAA","AccountId":"0013600001o7XYtAAM"},{"Name":"Bill","Title":"test","Email":"john_doe@example.com","Phone":"7327108052","OwnerId":"005360000075cJpAAI","Id":"0031Q00001uwxgWQAQ","AccountId":"0013600001o7XYtAAM"}]}Update Case
Description
Update a case.
Parameters
| Parameter | Type | Default Value | Description |
|---|---|---|---|
| Case Number | String | N/A | The number of the case. |
| Subject | String | N/A | The case's subject. |
| Status | String | N/A | The case's status. Valid values: New, On Hold, Closed, Escalated. |
| Description | String | N/A | The description of the subject. |
| Origin | String | N/A | The origin of the case. Valid values: Email, Phone, Web. |
| Priority | String | N/A | The case's priority. Valid values: Low, Medium, High. |
| Type | String | N/A | The case type. Valid values: Question, Problem, Feature Request. |
Use cases
N/A
Run On
This action runs on all entities.
Action Results
Entity Enrichment
N/A
Insights
N/A
Script Result
| Script Result Name | Value Options | Example |
|---|---|---|
| is_success | True/False | is_success:False |
JSON Result
N/ANeed more help?Get answers from Community members and Google SecOps professionals.
Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2026-02-19 UTC.