Salesforce integration

This section includes:

• Salesforce integration
  • About the Salesforce integration
  • About quarantining Salesforce files
  • Prerequisites
  • The Salesforce integration procedure
  • Step 1: Enabling Salesforce - Internal
  • Step 2: Connecting Salesforce
  • Step 3: Activating the Perception Point- Salesforce integration
  • Step 4: Enabling quarantine
  • Viewing scanned items
  • Defining the scope of Salesforce scanning
  • Adding scanning details to Salesforce pages
  • Enabling the email-to-case functionality
  • Flow chart diagram

Note: Before implementing this channel integration, contact your Customer Success Manager for Perception Point X‑Ray to make sure that this functionality is included in your current Perception Point X‑Ray license.

About the Salesforce integration

Perception Point can be integrated with various products. This page explains what configurations are required to integrate Perception Point with Salesforce - to enhance your Salesforce security. This page describes what must be performed by Perception Point Support and what must be performed by you, the customer, to perform the integration.

When you integrate Perception Point with Salesforce, Perception Point scans files that are uploaded to your Salesforce environment. Details of the scans are included in the Scans page in Perception Point X‑Ray. Remember to click the Salesforce filter icon [] to show only Salesforce scans.

Integration of Perception Point with Salesforce requires the installation of the Salesforce-Perception Point app. A summary of the scans performed is shown in the Scanned items tab of the Salesforce-Perception Point app.

By default, the Perception Point-Salesforce integration scans all files that are uploaded into Salesforce. It is possible to specify that only specific uploads are scanned. For details, see Defining the scope of Salesforce scanning below.

• For information about integrating Perception Point with other products, see Bundles and Channels.

About quarantining Salesforce files

It is possible to configure the Perception Point-Salesforce integration to quarantine files. By default, a file will be quarantined when a scan assigns a malicious verdict to the file, or when the Perception Point IR Team changes the verdict of a scan to malicious. When a file is quarantined, it is deleted from Salesforce, and a copy of the file is stored on Perception Point servers - for recovery purposes. It is not possible for users to access or download a quarantined file.

Note: In Step 4 below, Perception Point Support can configure the specific scan verdicts [malicious or spam] that trigger quarantine.

When a malicious file is found and quarantined, a notification email is sent to the owner of the quarantined file. You can configure Perception Point X‑Ray to send an email to admin users when a file is assigned a malicious verdict and the file is quarantined. For details, see Alerts. If you - or a user - thinks that a quarantined file is actually clean, use Perception Point X‑Ray to request the Perception Point IR Team to re-analyze the file. If the Perception Point IR Team finds the file to be clean - and they change the verdict accordingly - the file will be removed from quarantine, and again made available to users in Salesforce, in its original location. For details, see Requesting an investigation.

Quarantine configurations are set in Step 4 below, by Perception Point Support.

Prerequisites

In order to perform the required integration with Perception Point X‑Ray, make sure that you have the following prerequisites:

• Salesforce Essentials

• Administrator rights in Salesforce

• Admin role in Perception Point X‑Ray

The Salesforce integration procedure

Perform the procedure below to integrate Perception Point with Salesforce.

	Performed by
Step 1 - Enabling Salesforce	Perception Point
Step 2 - Connecting Salesforce	You - the client
Step 3 - Activating Salesforce	You - the client
Step 4 - Enabling quarantine	Perception Point

Step 1: Enabling Salesforce - Internal

This step connects Salesforce with Perception Point in the Perception Point internal system.

• This step must be performed by Perception Point Support.

• Perception Point Support must supply the customer with the token-ID that will be required in Step 2.

• Perception Point will inform you when this step has been completed. You can then continue with Step 2.

Step 2: Connecting Salesforce

This step enables the Salesforce integration with Perception Point X‑Ray.

• This step must be performed by you, the Perception Point client.

• You must be an Admin user in Salesforce.

• Perform this step only after Perception Point has completed Step 1 above.

• You'll need to receive a token-ID from Perception Point Support to complete this step.

Installing the Salesforce-Perception Point app

After Salesforce has been enabled [Step 1], you must add the Salesforce-Perception Point app to your Salesforce installation.

1. Log-in to Salesforce as an Admin.

2. Go to the installation URL for the Salesforce-Perception Point app.

   Note: For Salesforce sandbox installations, use this installation URL.

   

3. Select Install for Admins Only.

4. Click Install.

Configuring the Salesforce-Perception Point app

Perform these tasks after the Salesforce-Perception Point app is installed:

1. In Salesforce, go to Setup > Permission Sets.

2. Click PerceptionPointAdmin.

   

3. Click Manage Assignments.

4. Select the required Salesforce admin user, and grant the PerceptionPointAdmin permission sets to the user.

   Note: If you are planning to add the Perception Point Scan Status UI component [see Adding scanning details to Salesforce pages below], repeat this step with the PerceptionPointStandardUser permission set - and grant the PerceptionPointStandardUser permission set to all users that will use this component.

5. In Salesforce, click the App Launcher icon [] in the top left corner.

6. Search for the Perception Point app.

7. Under Apps, click Perception Point to open the Perception Point app.

   

8. Select the correct Perception Point URL for your organization. The correct Perception Point URL depends on the environment in which your organization is located.

   To verify the environment of your organization:

   1. Go to Account > Preferences.

   2. The Environment of your organization will appear under General > Info: US,EU, or AU.

      

   • Select the URL option that is "blank" if your environment is "US" [see the graphic below]

   • Select the URL option that includes "eu" if your environment is "EU"

   • Select the URL option that includes "aus" if your environment is "AU"

   

   Note: The first three URLs in the list are not currently used - they are for future development.

9. Under Token, enter the token for your installation, using the following format: Token <token-ID>

   That is, first the word Token (with a capital T), followed by a space, followed by the token-ID.

   For example: Token 123947y37532459873987

   Your token-ID will be supplied to you by Perception Point Support [support@perception-point.io].

10. If you have any guest users in Salesforce, enable "Do you have a guest user" - and then select the user that will be assigned to scanned items that were created due to activity of a guest user.

    

11. By default, Send email on error is not enabled. You can enable Send email on error, and then enter the email address to which error-emails will be sent. Enabling Send email on error is recommended for "debug mode" only.

12. Enable Package. This control enables or disables the Salesforce-Perception Point X‑Ray integration.

13. Click Save.

Step 3: Activating the Perception Point- Salesforce integration

This step activates the Salesforce integration with Perception Point X‑Ray.

• This step must be performed by you, the Perception Point client.

• You must be an Admin user in Salesforce.

• Perform this step only after you have completed Step 2 above.

Perform these tasks in Perception Point X‑Ray:

1. In the left navigation menu, select Account > Bundles and Channels.

2. Make sure that a bundle is assigned that includes Salesforce.

3. Under Enabled Channels, locate "Salesforce" and then click "Activate". You'll be redirected to sign-in to Salesforce.

   

4. Click Allow to grant permissions to Perception Point.

Step 4: Enabling quarantine

This step is performed by Perception Point Support after Step 3 has been completed.

In this step, Perception Point configures the quarantine requirements for the Perception Point-Salesforce integration.

By default, a file will be quarantined when a scan assigns a malicious verdict to the file, or when the Perception Point IR Team changes the verdict of a scan to malicious. Perception Point Support can change the verdicts that trigger quarantine.

• After you have completed Step 3, contact Perception Point Support [support@perception-point.io] and ask them to perform Step 4.

  You can include the text template below in your email:

  Subject: Step 4 - Enabling quarantine for our Salesforce integration
  Hi Perception Point Support Team, Organization name: <Your org name> We are performing the integration with Salesforce. We have completed Step 3. Please can you perform Step 4 - Enabling quarantine. [Internal Reference: 1151] Please let us know when this has been done. Thank you

• Perception Point Support will inform you when Step 4 has been completed.

Your integration between Perception Point X‑Ray and Salesforce is now complete...

Viewing scanned items

The Salesforce-Perception Point app lets you see a list of all the items that were scanned by Perception Point. The data shown is synchronized with the data in the Scans page of Perception Point X‑Ray. For any entry in the list, you can click the Scanned Name to open the corresponding entry in Perception Point X‑Ray.

To show the list of scanned items:

1. Open the Salesforce-Perception Point app.

2. Click the Scanned items tab.

Defining the scope of Salesforce scanning

Note: This feature is currently in beta phase. To implement this feature as a beta user, contact your Customer Success Manager at Perception Point.

By default, the Perception Point-Salesforce integration scans all files that are uploaded into Salesforce. It is possible to specify that only specific uploads are scanned. To achieve this, you can specify profiles and users to be included or excluded from scanning.

To specify profiles and users for scanning:

1. In Salesforce, open the Perception Point app.

   

2. In the Application Settings tab, click User & Profile Permissions.

   

3. Use the available controls to specify which profiles and users should be included or excluded from scanning.

Adding scanning details to Salesforce pages

You can add the Perception Point component to any Salesforce record page. The Perception Point component shows details of the Perception Point scans that were performed on all uploaded files that are related to the specific Salesforce record, in any of the objects. The details shown include the scan status and the scan verdict.

Scan status
Sent to scan	The file is currently being scanned.
Scanned	The scan is complete - the verdict is that the file is clean.
Quarantined	The scan is complete - the verdict is that the file is malicious.

• For installation requirements and instructions, see Configuring the Salesforce-Perception Point app above.

• For details on how to edit a Salesforce page to include the Perception Point component, see the Salesforce documentation.

• For details on how to include email-to-case instances, see Enabling the email-to-case functionality below.

Enabling the email-to-case functionality

The Salesforce email-to-case feature automatically converts customer emails into cases. Perception Point X‑Ray scans the files that are uploaded in these cases. These scans will be visible in the Scanned Items view. For improved visibility, these scans can also be included in the Perception Point component [see Adding scanning details to Salesforce pages above]. In order for these scans to be included in the Perception Point component, the "Save Email-to-Case attachments as Salesforce files" setting must be enabled in Salesforce.

To enable the "Save Email-to-Case attachments as Salesforce files" setting:

1. In Salesforce, click the Setup icon [] and then select Setup [].

2. In the Quick Find box in the top-left corner, enter "email-to-case" [including the hyphens].

   

3. In the left navigation pane, select Feature Settings > Service > Email-to-Case.

   

4. Under Settings, make sure that the "Save Email-to-Case attachments as Salesforce files" check box is selected.

   

Flow chart diagram

Hover your cursor over the graphic below to enlarge it

See also: 

• Integrating Channels