Skip to main content
The Salesforce connector links a production Salesforce org to Syntaxia. Use it for live revenue data: accounts, contacts, leads, opportunities, users, and campaigns. For sandbox or developer orgs, use the Salesforce Sandbox connector instead, which authenticates against test.salesforce.com.

​
Before you start

Confirm the following before opening the Add Source screen.
  • You are signed in to Syntaxia under the Data Ops function.
  • Your organization has fewer than 4 active Salesforce connections. Salesforce production is capped per org.
  • You have, or can borrow, a Salesforce user with the API Enabled profile permission. The user does not need to be a System Administrator, but they must have read access to the objects you want Syntaxia to see.
  • The user can authorize the connected app: either the app is already installed in your org, or the user has the Approve Uninstalled Connected Apps permission. See Connected app access.
  • Pop-ups are not blocked for app.syntaxia.com. The authorization window opens in a redirect.
The Salesforce user you authorize with becomes the integration user. Their permission set determines what Syntaxia can read. We recommend creating a dedicated Salesforce integration user with read-only access to the objects below.

​
What syncs

The Salesforce connector reads these standard objects: Custom fields on these objects are also synced. Custom objects are not yet supported.

​
Connect Salesforce

1

Add the source

From your Data Ops command center, click Add Source, expand the Salesforce card, and enter a connection label. We recommend something like Salesforce - Production or Salesforce - HQ so it is easy to identify on the command center.
2

Authorize Syntaxia

Click Connect. You will be redirected to the Salesforce login page. Sign in with your integration user, then click Allow on the OAuth consent screen.
3

Return to Syntaxia

After approving access, you will be redirected back to your command center. The new source card shows status syncing while the first sync runs.
4

Wait for the initial sync

The first sync usually takes 5 to 30 minutes. Larger orgs with high record counts can take longer. The card turns green and switches to active once the sync finishes.

​
Required Salesforce permissions

The integration user needs these profile or permission set entries:
  • API Enabled
  • View All for Account, Contact, Lead, Opportunity, User, and Campaign (or the equivalent object-level read access)
  • View All Users if you want owner names to resolve correctly
If you see records missing from the Syntaxia UI after the first sync, the most common cause is a missing object-level read permission on the integration user.

​
Connected app access

Syntaxia connects to Salesforce through a connected app operated by our managed pipeline partner, Fivetran. That is the app name you will see on the OAuth consent screen and in your Salesforce setup. Since September 2025, Salesforce blocks new OAuth authorizations to connected apps that are not installed in the org. If the Fivetran connected app is not installed in yours, the user authorizing Syntaxia must be allowed to approve uninstalled connected apps, or the connection fails at the consent step. Choose one of these options before you connect:
  • Install the connected app (recommended). A Salesforce admin opens Setup > Connected Apps OAuth Usage and clicks Install next to the Fivetran app. The app only appears in that list after at least one connection attempt, so if it is missing, start the connection once and then install. Once installed, users authorize without any extra permission.
  • Grant the permission temporarily. Add Approve Uninstalled Connected Apps to the integration user through a permission set or their profile. Salesforce includes it in the standard System Administrator profile, but not in custom profiles. The permission is only needed while you set up the connection; you can remove it after the first successful sync.
  • Grant Use Any API Client if your org uses API Access Control. When API Access Control is enabled, Approve Uninstalled Connected Apps is not sufficient. Grant the authorizing user Use Any API Client instead, and grant it sparingly, since it bypasses connected app restrictions across the org.

​
After the first sync

Once your Salesforce source is active, you can:
  • Resync at any time from the source card to pull the latest changes.
  • Run ontology discovery to analyze your Salesforce data and produce an L2 ontology. See Ontology discovery.
  • Compose the Salesforce ontology with other source ontologies into a unified L3. See Ontology composition.

​
Troubleshooting

Check that pop-ups are not blocked for app.syntaxia.com, then click Reconnect on the source card.
Salesforce blocked the authorization because the connected app is not installed in your org and the authorizing user cannot approve uninstalled connected apps. Fix it with one of the options under Connected app access, then click Reconnect on the source card.
The OAuth flow did not complete. Click Reconnect on the source card to start a fresh authorization.
Salesforce reported a broken connection. The integration user’s password may have changed, the OAuth grant may have been revoked, or API access may have been removed. Click Reconnect and re-authorize.
Your organization has 4 active Salesforce production connections. Disconnect and purge an unused source to free a slot, or contact support@syntaxia.com to discuss raising the limit.
Verify the integration user’s object-level read access in Salesforce. Records the user cannot see in Salesforce will not appear in Syntaxia.