Required for API Access Control option For admin-approved users, limit API access to only allowlisted connected apps.
Available from v2.163.
Overcast provides 2 ways to authenticate communication between Overcast Service and Salesforce: Connected App & User Credentials.
Using a Connected App provides enhanced security and flexibility. It leverages OAuth 2.0 for token-based authentication, reducing the need for user credentials. This method aligns with Salesforce security best practices and audit requirements. It is required if your Salesforce org requires the security setting API Access Control enabled.
This document provides step-by-step instructions for configuring Salesforce Connected App authentication to integrate Salesforce with the Overcast Service.
The target Connected Apps are:
Overcast Design-time User: This app is intended for users who manage the design-time operations, such as creating Backend Connection Strings, Scenarios, Components, etc.
Overcast Technical User: This app is intended to be used by a single user who represents the automated communication between the Overcast Service and Salesforce in runtime operations, such as Scenario Activation, DS Scenario Running, Component Activation, etc.
Perform these settings for both Connected Apps. The following guidelines and screenshots are based on the Overcast Design-time User app. Please repeat the same steps (with the appropriate actions) for the Overcast Technical User app.
1. Go to Setup Home and search for connected apps, click on [Manage Connected Apps].
.png?Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9kemY4dnF2MjRlcWhnLmNsb3VkZnJvbnQubmV0L3VzZXJmaWxlcy83NDg4LzMyMTM5L2NrZmluZGVyL2ltYWdlcy9xdS8yMDI1L2ltYWdlKDU4KS5wbmciLCJDb25kaXRpb24iOnsiRGF0ZUxlc3NUaGFuIjp7IkFXUzpFcG9jaFRpbWUiOjE3NjYyMDk1MDV9fX1dfQ__&Signature=K1K~rvxPWnKSp-FkoTQd8414Au4H4mtsEnemkxO3KnCUYV9OwbvNJTTwfir3Yc6dmFm-2VozC1H6NSD2hWornv4zwpw7nJzDD9pemEnUuHf7xy3gaJVRHonhJ-UZa-~ScGco0xrNrBovvWyXrR4wWgBZk8Qtia5MvRnxHX4rHa0qJ1XxDnm7ErHe0ctmzC2LV55Esq3RnxBf~5S0GZA4ctLYDPlSzJT3mMEk~~gRlhgtMG3~x3qEiEgWq7ptlYSu4Cvn2v~QeFF77~1ULp0kBXLfwvmXmy4IF2UJjqgyz4ER4-AXNe02hxfTdanG1HxPOxILm8UlK4NMTtkdINzCYA__&Key-Pair-Id=K2TK3EG287XSFC)
2. Click on the [Edit] link beside the connected app name
![]()
3. Make sure [Permitted Users] is set as Admin approved users are pre-authorized
.png?Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9kemY4dnF2MjRlcWhnLmNsb3VkZnJvbnQubmV0L3VzZXJmaWxlcy83NDg4LzMyMTM5L2NrZmluZGVyL2ltYWdlcy9xdS8yMDI1L2ltYWdlKDUwKS5wbmciLCJDb25kaXRpb24iOnsiRGF0ZUxlc3NUaGFuIjp7IkFXUzpFcG9jaFRpbWUiOjE3NjYyMDk1MDV9fX1dfQ__&Signature=THkPPIYaI9yhbapY6eFPL2LpQeXqH6slrhPERZlJfMenbLRfEVNS3Oa--N1FIP57SimVAPEAwr0Hq1FUEirrAlhgjQ0Y9oX0QXCE5NirtojiIIA-bwyw1UUklDfQJtxd~~PwOVcXKZajXZpoS-aNTK5g3nfb1LNwsXI9heXF15Z~Uq2jlUFNbjQMVz8iUPHliJebSmKCZ8wTfjkzOQvAeokWqIjt18Y0VzAknKy1UH-XRP1EzzoZ8dDnN3YfOXzPFnEj4rbthE6BUIwbE4qawLO44Xpcb~eD4-KAJfCKU~aOKz3rA6gUdZ1IbfO~NxReHXqLuUHQ~CNqlelKz4DboA__&Key-Pair-Id=K2TK3EG287XSFC)
4. The [Session Policies] is optional, and there is no constraint for this. However it is recommended to set it to 2 hours
.png?Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9kemY4dnF2MjRlcWhnLmNsb3VkZnJvbnQubmV0L3VzZXJmaWxlcy83NDg4LzMyMTM5L2NrZmluZGVyL2ltYWdlcy9xdS8yMDI1L2ltYWdlKDUxKS5wbmciLCJDb25kaXRpb24iOnsiRGF0ZUxlc3NUaGFuIjp7IkFXUzpFcG9jaFRpbWUiOjE3NjYyMDk1MDV9fX1dfQ__&Signature=ZsQWvclJfHkFs7hQteQtyouf-GPPkP8VNXeXxYQiX3g75IVxJD8U69IXDnKn2QGaQwibxio39Qr38rycfoF3~sTwBbtwflcUrUCTvpbO6e1J4nJbeXIVtaK1IA7R12wGM8CfwOCBNDsRtTZO8ATPMem6-uRUlwthPV1iU~7DiOmfNUb-jiWswQ0WRYbS5exP74-8UL8PwOO55vivlKimJXpI0adOSb1R2roPo0qRj88~aY50e4YHgkd6axyVq0p3i3RoYFwImFFi-TTuHpUuTwRYctFRELUIr8N86thUVe4S~0309qMbmE7ZksNr57EAMYdwFWVZecT4VcElhHtISA__&Key-Pair-Id=K2TK3EG287XSFC)
To pre-authorize users who are permitted to use Overcast as either a Design-time User or a Technical User, a dedicated permission set with appropriate assignments is required. You may create a new permission set or use an existing one in your org to complete this step; however, Overcast’s predefined permission sets cannot be used.
1. Prepare a dedicated permission set. If you create a new permission set, you do not need to specify a license, and you can choose any name.
.png?Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9kemY4dnF2MjRlcWhnLmNsb3VkZnJvbnQubmV0L3VzZXJmaWxlcy83NDg4LzMyMTM5L2NrZmluZGVyL2ltYWdlcy9xdS8yMDI1L2ltYWdlKDUyKS5wbmciLCJDb25kaXRpb24iOnsiRGF0ZUxlc3NUaGFuIjp7IkFXUzpFcG9jaFRpbWUiOjE3NjYyMDk1MDV9fX1dfQ__&Signature=Ii0zNfFfiSdp-TTI04M75GuafXr0YANeNyA0Z7vroessgICsN3PHLsrHHHuTzdkslCAR9PleVO9R7u~rkxFa5sF3GLLt91qS4b8PNmRIGumNWnjkzc2fvIBx8kJbR8L~8nlNp3DP6dryEyLWFnHHBMbIFWnBdcQPdMqJIGS1iq~262fhATGw2UZQswImRtfPxQSHjOgNQAS1UaYfAUO0YVWI9-OIhLRvFZaltdG5LSBbfgzA3vV6jtkQO~jZfjHROUIR9R1iW8V-~CHQI46ueubTVI1KrBrbGEfLW5nRv1bSe6RppSfFT~6rIT6E7yARB26oRe4hZ-3Nnla0EWpP5g__&Key-Pair-Id=K2TK3EG287XSFC)
2. Open it and click on [Assigned Connected Apps].png?Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9kemY4dnF2MjRlcWhnLmNsb3VkZnJvbnQubmV0L3VzZXJmaWxlcy83NDg4LzMyMTM5L2NrZmluZGVyL2ltYWdlcy9xdS8yMDI1L2ltYWdlKDUzKS5wbmciLCJDb25kaXRpb24iOnsiRGF0ZUxlc3NUaGFuIjp7IkFXUzpFcG9jaFRpbWUiOjE3NjYyMDk1MDV9fX1dfQ__&Signature=ZMk6dwnzeZZhiLsq2TjsQXRCuXmTNCowgEc~-xUr5tMXocLGPIOa1qJubmpPLxkmL1DnOcv~CjOW4K38WVS3L~0PkdVEZzmnhiJyfyjzw8S9bit78Vw1vofogqquNeBG420vu1nT6FcA8mnB2LdodwCqoDpvvmbE9itMmj7MY0QjAE6v~3AaEYpZWEPqIDK474F2cAQueR25KuQ7OENGISkQvknIf~D9baylWMMZOHNUhcdTrkPWTt2A90OTBb1VXGbmWLLC4-mnZZngacyuSyNNh6J~~Oql4qU3r6e660kJgVUhxZdZ1QhrSoPKy7CE7X59SlsEBRZUlQvhHrGCfA__&Key-Pair-Id=K2TK3EG287XSFC)
3. Click on the [Edit] button, then assign the appropriate Connected App to this permission set, then save.
.png?Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9kemY4dnF2MjRlcWhnLmNsb3VkZnJvbnQubmV0L3VzZXJmaWxlcy83NDg4LzMyMTM5L2NrZmluZGVyL2ltYWdlcy9xdS8yMDI1L2ltYWdlKDU2KS5wbmciLCJDb25kaXRpb24iOnsiRGF0ZUxlc3NUaGFuIjp7IkFXUzpFcG9jaFRpbWUiOjE3NjYyMDk1MDV9fX1dfQ__&Signature=CwZM35v5tHB7wsGoTcqhL-eKMbDUbE6kfrmNVBeqZ131csuV-xPT8zaw5DDakyAgyycOtdUJ56JyNn20nxic7qWpRaPEm1nKv8wpQb4T24yOYHtErupTnQ1b1CX2wP7ZKi9ThwGzuJ3S42O71qYEB7lQ4hC9eVPq8w0PEbFMgjaIAGihpPOitcAdXdbmWwaL4eL0xTMErNPOwJaDf01ISqiMnpfVy8dGAGUe0eU3z6L57npfOJ0f15MUnzI2moF7W9QlaV1msmAWF7gDK03TJtpjophDZAC0TXEQXRxy~2S~IKoELD~uNbhlfMPnFo21I91fX~XxLWhaiROTslFj~A__&Key-Pair-Id=K2TK3EG287XSFC)
4. Click [Manage Assignments] button and assign the desired users
.png?Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9kemY4dnF2MjRlcWhnLmNsb3VkZnJvbnQubmV0L3VzZXJmaWxlcy83NDg4LzMyMTM5L2NrZmluZGVyL2ltYWdlcy9xdS8yMDI1L2ltYWdlKDU3KS5wbmciLCJDb25kaXRpb24iOnsiRGF0ZUxlc3NUaGFuIjp7IkFXUzpFcG9jaFRpbWUiOjE3NjYyMDk1MDV9fX1dfQ__&Signature=k8SJ9L98xU2fXuXJgjy79Za5KDOUABjzxTjypQau-1z-NG-4H~eyVed2fTYMZJ3aWdqn6q~BKmQAXe~N5~yU8EFutZ75AujVnU5Go2Z~Eb8BNGCmWiukn34stDc9q8RLZ3jhsshvJuqHsoPJ2A6u~xpYJJL~T1oLXnU70kso78K~oFtkJQWkhwQSoy9-HMpsjt~HvbEBjPUAEA488egL3rDrQSj0FDrbas1a7ScmS6ama5tLFn6mu6YO2ajJp0SSnBNMiq2TV5TTXSse62xMNZ22yrjl4JyeBau5zY~mv7-aDpLuAR87WSBXVND0IcYQHMp8WOXZPzPp0Y3R9Lyteg__&Key-Pair-Id=K2TK3EG287XSFC)
Once you have completed these configuration steps, the Salesforce Connected App authentication is fully set up, and you are ready to use the integration between Overcast Service and Salesforce.