Integration

Overview of AlumnIQ Sync For Salesforce

July 2025: Find AlumnIQ Sync on the Salesforce AppExchange!

The AlumnIQ-Salesforce Integration Service enables seamless data synchronization between your Salesforce instance and the AlumnIQ platform. This integration ensures that your organization can efficiently manage and share data, improving operational workflows and enhancing user experiences.

Key benefits of the integration include:

• Streamlined data exchange between systems.

• Reduced manual data entry and errors.

• Enhanced reporting and analytics capabilities.

Configuring a User for AlumnIQ-Salesforce Integration

Salesforce:

Create a new Custom Permission Set

1. Identify/designate a permission set that will grant access to the the required objects in your org for integration. While this can be an existing permission set, we strongly recommend creating a new one to maintain the principle of least privilege. See Customer Managed Permission Sets for more information and steps to create the permission set. This will be refered to as the "Customer Managed Integration Access" permission set. Note that if you plan to user the Salesforce Integration license for the integration user you must also set the "Salesforce API Integration" license type on the permission set when creating it.

Validate OAuth Security Policy on the AlumnIQ External Client App

1. Log in to your Salesforce instance with administrative privileges.

2. Navigate to Setup > search for and select External Client App Manager.

3. Locate the AlumnIQ external client app in the list and click Edit.

4. On the Policies tab, expand the OAuth Policies section.

   1. Set the following settings:

   • Permitted Users: Ensure it is set to "Admin approved users are pre-authorized."

   • Selected Profiles: Ensure NO profiles are selected.

   • Selected Permission Sets: Ensure ONLY the "Customer Managed Integration Access permission set" permission set is selected.

5. Save the changes.

Assign the permission set to the desginated user

1. Identify/designate a Salesforce user to be the dedicated user for integration. While this can be an existing user we recommend that you create a new dedicated user to maintain the principle of least privilege. This will ensure that the External Client App has the least permissions. At a minimum the integration user will need license type of Salesforce Integration (note if you use this license type you MUST assign the "Salesforce API Integration" license type to the "Customer Managed Integration Access permission set" ) and Profile Minimum Access - API Only Integrations.

2. Assign the AlumnIQ Sync Integraton and the "Customer Managed Integration Access permission set" to the designated integration user.

AlumnIQ:

Open a ticket in your AlumnIQ platform requesting to configure Salesforce Integration.

1. Provide the username of the desginated integration user.

2. Provide the domain for your Salesforce org

Note: This integration service is included at no cost for AlumnIQ users.