Create a connected app

Learn how to create a Salesforce connected app to securely connect your Salesforce environment to BrowserStack Low Code Automation.

To run automated tests, connect your Salesforce environment to BrowserStack Low Code Automation. This page covers creating a Connected App (or External Client App) in Salesforce to generate a Client ID and Client Secret, and assigning the execution user.

Prerequisites

To connect Salesforce and fetch the necessary metadata, the user account authenticating the connection must have the following permissions:

1. API Enabled: Allows API access to Salesforce.
2. View Setup and Configuration: Enables viewing of setup and configuration settings.
3. Modify Metadata Through Metadata API Functions: Permits metadata modifications.
4. View All Data: Grants read and write access to all data, or explicit access to specific objects you intend to test.

Choose a user account

You can use one of the following options to set up the connection:

• Option 1 (Recommended): Use an existing System Administrator account, which already has all required permissions.
• Option 2: Use an existing Standard User account, provided you assign them a permission set or profile containing the required permissions.
• Option 3: Create a dedicated Integration User account specifically for testing and assign the required permissions.

Step 1: Create the connected app in Salesforce

The connected app securely links your Salesforce environment to BrowserStack Low Code Automation. Only a Salesforce System Administrator can create this app.

To create the connected app:

1. Log in to your Salesforce org.

2. Click the Gear icon (⚙) in the top right and select Setup.

   

3. In the Quick Find box, type External client app manager and select it from the results.

4. Click the New External Client App button in the top right corner.

   

5. Fill in the basic information:
   • Connected App Name: Enter BrowserStack Low Code Automation or a similar descriptive name.
   • API Name: Auto-populates based on the app name.
   • Contact Email: Enter your email address.

   

6. Scroll down to API (Enable OAuth Settings) and select Enable OAuth.

   

7. In the Callback URL field, enter the following URL exactly as shown:

   https://elca-api.browserstack.com/api/v1/sfdc-auth/callback
   

8. Under Selected OAuth Scopes, add the following scopes by moving them from the Available OAuth Scopes column to the Selected OAuth Scopes column:
   • Access the identity URL service (id, profile, email, address, phone)
   • Manage user data via APIs (api)
   • Manage user data via Web browsers (web)
   • Perform requests at any time (refresh_token, offline_access)

   

9. Click Save.

Step 2: Set the Run As execution user

Because this app runs automated tasks in the background, you must specify which user account Salesforce uses to execute API calls.

To set the execution user:

1. In the External Client App Manager, find your newly created app and click it.

2. Click the Edit button inside the Policies section.

   

3. Expand OAuth Policies.

4. Under OAuth Flows and External Client App Enhancements, enable Client credentials flow.

   

5. Under Run As, enter the username of your dedicated Integration User.
6. Click Save.

Step 3: Retrieve your client ID and client secret

To retrieve your credentials:

1. In the External Client App Manager, find your app and click it.
2. Go to the Settings tab.

3. Expand OAuth settings and click the Consumer Key and Secret button. Salesforce emails you a verification code to access this screen.

   

4. Enter the verification code when prompted.
5. Once verified, you see your Consumer Key (Client ID) and Consumer Secret (Client Secret).

6. Click Copy next to both values and save them securely. Keep this tab open, as you need these values in the next step.

   

Step 4: Connect your org in BrowserStack

Now that you have your Client ID and Client Secret, you can complete the connection in BrowserStack Low Code Automation.

To connect your Salesforce org:

1. In BrowserStack Low Code Automation, go to App connections > Salesforce setup and click + New Organisation.

2. In the Connect Salesforce (Use Admin Account) dialog, select Connected App as the authentication method.

   

3. Fill in the following details:
   • Environment type: Select whether this is a Sandbox or Production org. Always test on a Sandbox environment first before connecting to Production.
   • Organisation Name: Enter a user-friendly name to identify your org, for example, BrowserStack Sandbox.
   • Connected App Client ID: Paste the Consumer Key you copied from Step 3.
   • Connected App Client Secret: Paste the Consumer Secret you copied from Step 3.
4. Click Connect.
5. In the Salesforce OAuth page that opens, enter your Salesforce credentials and log in. The connection is established, and you are redirected back to BrowserStack Low Code Automation.

Your Salesforce org is now securely connected, and you are ready to start building and running automated tests.

Troubleshooting

If you encounter issues during the connection process:

• Error: “Invalid client credentials”: Verify that you copied the correct Client ID and Client Secret from Salesforce. Ensure there are no extra spaces or characters.
• Error: “Callback URL mismatch”: Confirm the callback URL in your connected app exactly matches https://elca-api.browserstack.com/api/v1/sfdc-auth/callback.
• Error: “Insufficient privileges”: Ensure the user account has all four required permissions listed in the Prerequisites section.
• Connection times out: Wait 5 to 10 minutes after creating the connected app in Salesforce before you attempt to connect. The app takes time to propagate across Salesforce servers.

Next steps

• Add personas
• Launch a Salesforce org in a test