@@ -47,11 +47,30 @@ Follow the steps below to learn how you can configure Salesforce for provisionin
4747 </div>
4848 </td>
4949 </tr>
50+ <tr>
51+ <td>Enable Client Credentials Flow</td>
52+ <td>Select the checkbox to enable. This allows token generation using the Client Credentials grant.
53+ A security warning will appear — review and accept it to proceed. </br>
54+ <div class="admonition note">
55+ <p class="admonition-title">Important</p>
56+ <p>When enabled, any app with access to the client ID and secret can obtain a token. Keep these credentials secure.</p>
57+ </div>
58+ </td>
59+ </tr>
5060 </table >
5161
5262 4 . Click ** Save** and then ** Continue** to add the connected app.
5363
54- 5 . Take note of the following about the connected app.
64+ 5 . Select an ** Execution User** for the flow.
65+
66+ 1 . Under connected app detail page, click ** Manage** .
67+ 2 . Click ** Edit Policies** .
68+ 3 . Under ** Client Credentials Flow** , for ** Run As** ,
69+ click on the magnifying glass icon, and find the user that you want to assign the client credentials flow.
70+ The execution user must have the API Only User permission.
71+ 4 . Save your changes.
72+
73+ 6 . Take note of the following about the connected app.
5574
5675 1 . Under ** Consumer Key and Secret** , click ** Manage Consumer Details** and get the,
5776 - Consumer Key - A value that the client uses to identify itself
@@ -164,7 +183,10 @@ Create an [organization-level]({{base_path}}/guides/users/outbound-provisioning/
164183 </tr>
165184 <tr>
166185 <td>Provisioning Domain</td>
167- <td>Domain in which the user provisioning operations occur.</td>
186+ <td>The domain in which user provisioning operations occur.
187+ This will be appended to the username during outbound provisioning.</br>
188+ e.g. <code>primary.com</code>
189+ </td>
168190 </tr>
169191</table >
170192
0 commit comments