We have introduced a new solution architecture and a new application type called Connected App to WithSecure Cloud Protection for Salesforce to bolster current scanning capabilities. New architecture brings more effective protection for your business-critical Salesforce platform today and empowers us to deliver more advanced protection capabilities in the future. In this article we explain the benefits of and logic behind connected app.
What is a connected app in WithSecure Cloud Protection for Salesforce
WithSecure Cloud Protection for Salesforce is a natively integrated solution. The simple and non-disruptive app protects your Salesforce cloud against advanced cyber threats in real time.
Due to structural limits in Salesforce platform, WithSecure Cloud Protection for Salesforce has limitations when it comes to processing large amounts of data. To overcome this, we have introduced a new solution architecture called connected app. A connected app is an application type that allows external systems to securely access and interact with data and functionalities within the Salesforce platform by leveraging APIs. WithSecure Cloud Protection connected app operates the same way as any other connected app in Salesforce. It uses Salesforce REST APIs to retrieve files and return threat analysis results.
Salesforce uses secure standard protocols such as OAuth or OpenID to authenticate and authorize the app and grant it access to a customer's data.
Once the necessary authentication is successful and the Salesforce admin grants explicit consent to the connected app, it is given a time-limited token to access data on behalf of the user who granted access. This token is automatically refreshed and included in every Salesforce API. The connected app uses Salesforce SOAP or REST API to read or update data remotely.
The access and operations with data within the Salesforce platform can be limited with permissions and sharing rules set by the admin. If necessary, the admin can revoke access for the connected app at any point. When access is revoked, any tokens used by the connected app become invalid, and the app will not be able to retrieve any data anymore.
If your unique Salesforce environment is used to upload and store large files, we highly recommend you enable and set up connected app on your WithSecure Cloud Protection for Salesforce. It will also ensure you get the maximum value out of your security investments and enable you to adopt new and more advanced capabilities in the future.
Key benefits now:
- Bolstered file scanning for very large files
- Enhanced overall performance
- More responsive threat analysis
Key benefits in the future:
- Faster new feature development
- Development of more advanced security capabilities for your Salesforce
Learn more about how to enable connected app from our tutorial article and video:
https://community.withsecure.com/en/kb/articles/29687-how-to-enable-connected-app