Skip to main content

Integration Authentication

  • ShiftUp connects through an external client application in the managed package.
  • Requests are authorized using OAuth flows.
  • Actions run under a customer-defined integration user and follow the Salesforce permission model.

Permission Model

  • ShiftUp provides package permission sets for managed objects and required automation.
  • Customers explicitly control any additional permissions on standard objects and API access.
  • Effective access is limited to what the integration user is granted.

Data Read for Context

During analysis, ShiftUp may read contextual Salesforce data such as:
  • Seller profile context
  • Account fields
  • Contact fields
  • Opportunity fields
Use least privilege and document all granted permissions for auditability.