For Wolfia/Salesforce integration, service account based authentication is the preferred method. Other authentication methods are currently not supported.
Overview
The Salesforce integration lets Wolfia read customer context from your Salesforce instance: which accounts are customers, what stage an opportunity is in, and any custom fields you want to use in Trust Center access rules. This context powers automatic Trust Center approvals, AE notifications, and richer answers on questionnaires and RFPs. Wolfia follows least privilege: the default setup is read-only on Accounts and Opportunities. Write access is only needed if you enable an optional write-back feature, and Leads access is not needed at all.Permissions by use case
Grant only the permissions for the features you plan to use.Required: Core sync (all features)
Powers Trust Center auto-approval rules, AE notifications, account analytics, and questionnaire context.Optional: Enhanced matching and sales context (read-only)
Recommended if you use the Trust Center or the sales enablement features (customer call prep, sales one-pagers). All read-only.Optional: Questionnaire write-back
If you want Wolfia to log completed questionnaires back to the account or opportunity for record-keeping. Off by default; skip this entirely if you don’t use it.Not needed
- Leads - Wolfia does not read or write Leads.
- Activities (Tasks/Events), Cases - Wolfia does not request them.
- Create / Modify All Records / delete - never required by any Wolfia feature.
Prerequisites
Before setting up the integration, you’ll need:- Admin access to your Salesforce instance
- Ability to create permission sets and users in Salesforce
Setup instructions
Step 1: Create a permission set
First, we’ll create a dedicated permission set for the Wolfia integration.- Navigate to Setup → Users → Permission Sets
-
Click New to create a new permission set

-
Fill in the following details:
- Label:
Wolfia Integration - API Name: Will auto-populate
- Leave other fields as default

- Label:
-
Click Save to create the permission set

Step 2: Configure object permissions
Grant the permissions from the Permissions by use case table above.-
In the permission set, navigate to Object Settings

-
Select Accounts from the list

-
Click Edit and under Object Permissions enable:
- Read (required)
- Edit (only if using questionnaire write-back)
- View All Records (only if your sharing model hides records from the integration user)
- Click Save to apply the changes
-
Return to Object Settings, select Opportunities, and repeat with the same permissions

- If you opted into enhanced matching, repeat for Contacts and Contracts with Read only.
- If you use custom fields in Trust Center access rules, confirm those fields are visible to this permission set under Field Permissions for each object.
Do not grant permissions on Leads, and do not grant Create or Modify All Records on any object. Wolfia never uses them.
Step 3: Create an integration user
Next, we’ll create a dedicated user for the API integration.- Navigate to Setup → Users → Users
- Click New User to create a new user
-
Fill in the required information:
- Email: Use a dedicated email for this integration
- Username: Must be unique (e.g.,
wolfia-integration@yourcompany.com) - User License: Select
Salesforce Integration - Profile: Select
Salesforce API Only System Integrations


- Click Save to create the user
Managing the integration user through your identity provider (for example Okta) works as long as the user can complete the OAuth sign-in in Step 6. On the Wolfia side, assign the service account the Integrations Manager role.
Step 4: Assign the permission set
Now we’ll assign the Wolfia Integration permission set to the newly created user.-
After creating the user, you’ll be on the user detail page

-
Scroll down to Permission Set section and select Permission Set Assignments tab

-
Click Add and Search for
Wolfia Integrationin the available permission sets
-
Select Wolfia Integration and click Add to move it to Enabled Permission Sets

-
Click Save to assign the permission set

Step 5: Verify permissions
Let’s verify that the permissions are correctly configured.-
Navigate to the User Access Summary section

-
Click on the Object Permissions tab

-
Verify that Account and Opportunity show
Read(plusEditonly if you enabled write-back), and that no permissions are granted on Lead.
Step 6: Connect in Wolfia
Now connect Salesforce to Wolfia.- Log in to your Wolfia account and go to Knowledge Hub
- Scroll to Connected integrations and find Salesforce under the Sales section of “Connect more apps”
-
Click Connect. The Link Salesforce Account dialog opens

-
Hostname is optional. Leave it blank for a standard production instance, or enter your My Domain hostname (for example
yourcompany.my.salesforce.com) if you use a sandbox or a custom domain - Click Connect. You’ll be redirected to Salesforce to authorize the connection
- Sign in with the integration user credentials and approve access
- After authorization, you’ll be redirected back to Wolfia
- The Salesforce card shows as connected and the initial data sync begins
Security considerations
- Default access is read-only on Accounts and Opportunities; nothing else is required
- Wolfia never reads Leads and never requests Create, Modify All Records, or delete on any object
- Write access (Edit) exists only for the optional questionnaire write-back feature and can be withheld entirely
- All data transmission is encrypted using HTTPS
Troubleshooting
Common issues
Connection failed- Verify the username and password are correct
- Check that the instance URL is correct
- Verify the permission set grants Read on Accounts and Opportunities
- Ensure the permission set is assigned to the integration user
- Check that the user profile is set to “Salesforce API Only System Integrations”
- Your org-wide sharing settings may hide those records from the integration user. Share the records with the integration user or grant View All Records on Accounts and Opportunities.
- Check Field Permissions: the custom field must be visible to the Wolfia Integration permission set.
- Review the Object Permissions in the User Access Summary
- Ensure Account and Opportunity have Read (and Edit, if write-back is enabled)

