Skip to main content

Integration Authentication

  • ShiftUp connects through an external client application in the managed package.
  • Requests are authorized using OAuth client credentials flow.
  • Actions run under a customer-defined integration user.

Permission Model

  • ShiftUp provides package permission sets for managed objects and required automation.
  • Customers explicitly control any additional permissions on standard objects, API access, and Apex REST services.
  • Effective access is limited to what the integration user is granted.

Data Read for Context

During analysis, ShiftUp may read contextual Salesforce data such as:
  • Seller profile context
  • Account fields (for example name, website, industry, addresses)
  • Contact fields (for example account link, email, title)
  • Opportunity fields (for example account link, amount, description)
Use least privilege and document all granted permissions for auditability.