Summary / When to Use This
Before you can automate project creation from Salesforce into OnRamp, your Salesforce integration user must have specific permissions and access settings. These permissions ensure that OnRamp can securely connect to Salesforce, read workflow data, and create projects automatically—without manual steps.
Use this guide when setting up your Salesforce integration for the first time or preparing a new integration user for OnRamp workflows.
Before You Begin
You’ll need:
Salesforce Administrator access
An active OnRamp account with Salesforce integration enabled
Permission to create or modify users, profiles, and permission sets in Salesforce
Steps to Follow
1. Create or Identify an Integration User
Use a dedicated integration user instead of a personal account to keep automations secure, auditable, and uninterrupted.
Go to Setup → Users → Users → New User (or edit an existing sandbox user).
Assign a Full Salesforce license — not a Platform or Community license.
Assign a profile such as System Administrator or a custom integration profile with API access.
💡 Tip: A dedicated integration user ensures reliability and simplifies troubleshooting for API connections.
2. Enable API, Connected App, and Flow Permissions
These permissions allow OnRamp to connect, authenticate, and trigger workflows in Salesforce.
Go to Setup → Profiles → [Integration User’s Profile] → Administrative Permissions.
Verify the following boxes are checked:
✅ API Enabled
✅ Manage Connected Apps
If these settings aren’t editable, create a Permission Set with the same permissions and assign it to the user.
Next, grant flow permissions so OnRamp workflows can execute successfully:
Navigate to Setup → Profiles or Permission Sets → [Profile/Set Name] → System Permissions → Edit.
Enable:
✅ Manage Flow — required for creating and managing flows.
✅ Run Flows — allows executing active flows.
(Optional) View All Data or Modify All Data — sometimes required for flows that interact with restricted objects.
Click Save.
3. Grant Object and Field-Level Access
The integration user must have read and edit access to the Salesforce records and fields used in OnRamp workflows.
Go to Setup → Profiles → [Integration User’s Profile] → Object Settings.
For each relevant object (e.g., Lead, Opportunity, Contact, or custom objects):
Enable Read and Edit.
Leave Delete unchecked unless required.
Confirm Field-Level Security allows read and edit access for all fields mapped to OnRamp workflows.
Additional Settings (If You Encounter Connection Issues)
Some Salesforce orgs have enhanced security configurations that may block authentication or app approvals.
If you experience issues connecting OnRamp to Salesforce, review the following optional settings:
Disable High Assurance Login for API Access
Go to Setup → Profiles → [Integration User’s Profile] → Session Settings.
Ensure High Assurance isn’t required for API logins.
Save changes.
Allow Approval of Uninstalled Connected Apps
Go to Setup → Security → Session Settings.
Under App Login and Authorization, enable one of the following:
Administrators Can Approve Third-Party Connected Apps, or
Users May Approve Connected Apps (depending on your Salesforce edition).
Click Save.
These configurations are only necessary if MFA or app approval settings block OnRamp from authenticating.
Summary Checklist
Area | Setting | Where to Update |
License | Full Salesforce | Setup → Users |
API Enabled | Checked | Profile / Permission Set → Administrative Permissions |
Manage Connected Apps | Checked | Profile / Permission Set |
Manage Flow | Checked | Profile / Permission Set → System Permissions |
Run Flows | Checked | Profile / Permission Set → System Permissions |
Object CRUD | Read + Edit | Profile / Permission Set → Object Settings |
Field Access | Read + Edit | Profile / Permission Set → Field Permissions |
(If needed) Approve Uninstalled Apps | Enabled | Setup → Session Settings |
(If needed) High Assurance Disabled | Enabled | Profile → Session Settings |
Next Step: Connect OnRamp to Salesforce
Once these permissions are configured:
In OnRamp, go to Settings → Integrations → Salesforce.
Click Connect to Salesforce.
Log in using your integration user’s credentials.
Approve the requested permissions when prompted.
Wait for confirmation that the connection is established successfully.
Once connected, OnRamp will begin syncing eligible Salesforce data and allow workflows to automatically create projects when your configured triggers are met.