For the complete documentation index, see llms.txt. This page is also available as Markdown.

Salesforce

Salesforce is the leading cloud-based CRM platform, used across sales, service, and operations teams. Connecting Salesforce to Harmony gives IT teams visibility into who has access to your Salesforce org, which license types they hold, and when they last signed in - enabling accurate user inventory, license tracking, and spend optimization.

Salesforce is a direct integration - no third-party connectors required. Harmony pulls login trends, license types, and cost data directly from Salesforce, giving you deeper visibility into adoption and spend without additional tooling.

This integration is read-only. Harmony pulls user and login data from Salesforce but does not modify your Salesforce org.

What the Salesforce integration enables

Capability
Description

User Discovery

Surface every Salesforce user - active and inactive, all user types - in Harmony's software inventory

License Tracking

See the Salesforce license, profile, and role assigned to each user, classified as paid or free

Activity Monitoring

Track successful sign-ins and last login to identify inactive seats

Spend Visibility

Identify inactive users and free vs. paid licenses to optimize Salesforce spend

Login Trends

Track sign-in activity over time to understand which users are actively engaging with Salesforce


Prerequisites

  1. Salesforce edition with API access - Enterprise, Unlimited, Performance, or Developer edition (Professional edition requires the API add-on)

  2. Salesforce Administrator access - a System Administrator (or a user whose profile has API Enabled and permission to view Setup and user records) is required to authorize the integration

  3. A Harmony account with admin privileges


Connect Salesforce to Harmony

Step 1: Navigate to Integrations

  1. Log in to your Harmony dashboard

  2. Go to Settings > Integrations

  3. Find Salesforce under SaaS Applications

Step 2: Authorize Salesforce

  1. Initiate the connection

    1. Click the Salesforce integration card

    2. Click Connect

    A Salesforce authorization window will open.

  2. Authorize in Salesforce

    Sign in with your Salesforce administrator account if prompted.

    1. Review the access Harmony is requesting (see Permissions Explained below)

    2. Click Allow to authorize the connection

    3. The window closes automatically and you are returned to Harmony

    Once authorized, Harmony begins syncing your Salesforce data. The initial sync may take a few minutes depending on your organization size.


Disconnect Salesforce from Harmony

  1. Log in to your Harmony dashboard

  2. Navigate to Settings > Integrations

  3. Find Salesforce under SaaS Applications and click the integration card

  4. Click Disconnect

  5. Confirm the disconnection when prompted

Once disconnected, Harmony stops syncing data from Salesforce. Previously synced data remains available in Harmony.


What Harmony Syncs from Salesforce

Harmony reads two things from Salesforce, both read-only: the user inventory (from the User object) and sign-in activity (from the LoginHistory object).

Data
Description

User profiles

Name, username, email, and active/inactive status for every user, across all user types

License & profile

The Salesforce user license, profile name, and role assigned to each user

License tier

Each license is classified as paid or free (e.g. Chatter Free and integration users are free)

Admin flag

Users on an administrator profile are flagged as admins

Sign-in activity

Successful sign-ins, with login time, browser/client, platform, and login method (Sign in / OAuth / SSO / Certificate)

Login trends

Sign-in activity over time to understand engagement patterns and identify inactive users

Account lifecycle

Account creation date and last login date

Where to find Salesforce data in Harmony:

  • Applications - Salesforce appears as a discovered application with license and activity details

  • People - Each employee's profile shows their Salesforce license, profile, and last sign-in

How sign-in activity is synced:

  • Only successful logins are stored - failed login attempts are not ingested

  • The first sync pulls the last 90 days of login history; after that, only new logins are pulled

  • Logins are deduplicated to the latest sign-in per user per day


Permissions Explained

When you authorize the connection, Salesforce shows a consent screen ("Allow Access?") listing what Harmony is requesting. These map to three OAuth scopes:

Scope
Shown on the Salesforce consent screen as
Why Harmony needs it

api

Manage user data via APIs

Run SOQL queries to read the user inventory (User) and sign-in activity (LoginHistory)

openid

Access the identity URL service; access unique user identifiers

Identify the connected org and resolve its instance URL so Harmony knows which Salesforce org to query

refresh_token

Perform requests at any time

Keep the connection active so Harmony can sync on a schedule without re-authorizing each time


Use Cases

License Reclamation

Identify Salesforce users who haven't signed in recently and reclaim unused licenses to reduce subscription costs.

Offboarding Verification

Confirm Salesforce access has been deactivated when employees leave, as part of Harmony offboarding workflows.

Software Inventory

Include Salesforce license types and assignments in a complete view of software usage and spend across the organization.

Access Reviews

Review who holds each Salesforce license type and profile to support periodic access and compliance audits.


Troubleshooting

Data is not appearing after connection

Possible causes:

  • The initial sync has not completed yet (may take a few minutes)

  • The authorizing user does not have API access enabled

  • The authorizing user cannot view user or setup records

Solutions:

  1. Wait a few minutes for the initial sync to complete

  2. Verify the authorizing profile has API Enabled in Salesforce Setup > Profiles

  3. Reconnect the integration with a System Administrator account

Sign-in activity is incomplete

Possible causes:

  • Salesforce retains login history for the past 6 months, and Harmony syncs the most recent 90 days

Solutions:

  1. Logins older than 90 days are not synced - this is expected behavior


Data & Privacy

Key privacy principles

For information about how Harmony handles your data, see our Privacy Policy.

  • Harmony accesses Salesforce data in read-only mode and does not modify any data in your Salesforce org

  • Integration can be revoked at any time from Salesforce or Harmony settings

Last updated

Was this helpful?