Set up a connected app for CloudTalk in Salesforce to get your client id, client secret, and redirect url values, so that agents can successfully log in to CloudTalk apps using the Salesforce SSO.
User Level:
Admin
Connect Salesforce with CloudTalk to authorize SSO
In order to use Salesforce to authorize logins to CloudTalk apps, we need to:
Set up a connected app in Salesforce.
Access values from our app in Salesforce to fill in the required values for SSO setup in CloudTalk.
Set up a connected app in your company Salesforce
This step must be completed by a Salesforce Org user with the feature permissions explained in this Salesforce documentation.
Open a tab and log into your Salesforce Org account.
From the landing page in Salesforce, locate the cog icon near your user picture. It contains your Setup options.
From the dropdown, select Setup.
You'll be redirected to a new tab. Using the search or left menu, navigate to Apps > App Manager.
In the top bar, select New Connected App.
Enter the Basic Information for CloudTalk. Check the box to Enable OAuth Settings.
The API (Enable OAuth Settings) sections will expand with more options. Configure the following, using the screenshot for reference:
Check the box to Enable for Device Flow.
The Callback URL box will autofill. You should replace the autofilled value with this URLs:
https://authsso.cloudtalk.io/oauth2/idpresponseandhttps://cloudtalk-prod.auth.eu-central-1.amazoncognito.com/oauth2/idpresponseUse the arrow buttons to move the following into the Selected OAuth Scopes box:
Access the identity URL service (id, profile, email, address, phone)
Access unique user identifiers (openid)
Full access (full)
Manage user data via APIs (api)
Perform requests at any time (refresh_token, offline_access)
If automatically checked, you may uncheck the boxes for Require Secret for Web Server Flow and Require Secret for Refresh Token Flow.
Check the box to Enable Client Credentials Flow. You may get a warning prompt from this option. Select OK.
Save these settings.
Steps for SSO Setup in CloudTalk Dashboard
Make sure to have open the CloudTalk SSO app you created in Salesforce.
In your Salesforce web tab, find your CloudTalk SSO app. You can get back to it by going through Apps > App Manager. Locate the app in the list and select View.
Select Manage Consumer Details.
You may be asked to input a verification code sent to your contact email.
The Consumer Details page contains a Consumer Key and Consumer Secret, which we will use for our Client id and Client secret in CloudTalk. Keep this page open for reference.
In a separate web tab, log into your CloudTalk dashboard. Navigate to Account > Settings > Single Sign-on. Toggle on Enable Salesforce SSO.
Referencing your open Salesforce tab, use the info from the CloudTalk SSO app you created there to fill the required values:
Client id = Consumer key
Client secret = Consumer secret
Discovery Url = Your Salesforce Org Url, which can be found in the address bar of the webpage
should follow a pattern like:
https://cloudtalk.my.salesforce.com
Method =
GET
Save Settings.
Troubleshoot Tip
Followed the steps correctly but something isn't working? Try switching the Method from GET to POST.
Have more questions about setting up Salesforce SSO? Reach out to our Support team. We're always happy to help!