Salesforce

Need a hand? Setting up developer credentials can sometimes feel a bit overwhelming. We offer a complimentary 15-minute onboarding session to help you get this configured perfectly. Book your session with a specialist here


When you first install Bread & Butter, the Salesforce 1-click connection may not display your own branding during the connection process if it is not fully configured for your domain.

To maximize user trust and prevent conversion drop-off, you must set up a Connected App in the Salesforce Developer portal. This allows you to generate your own credentials so your audience sees your brand when they click "Continue with Salesforce."

Here is how to set it up in six steps.


Step 1: Access Your Salesforce Developer Setup

  1. Log in to the Salesforce Developer website.

  2. Click on your account icon at the top right of the page and select My Developer Account.

    (If you don't see this option, skip to the next step. Note: You may be asked to authenticate again.)

  3. Click on the gear/settings icon at the top right of the page and select Setup.

Step 2: Create a New Connected App

  1. In the search bar in the left menu, enter External Client Apps, then select Settings.

  2. Ensure Enable Connected Apps is toggled on, then click New Connected App.

  3. Enter your contact information. For the name of your application, we highly recommend using your exact organization or company name, as this is what will appear to users during the login process.

Step 3: Configure OAuth Settings & Scopes

This ensures Salesforce correctly routes your users back to your website and requests the proper authentication data.

  1. Under API (Enable OAuth Settings), check the Enable OAuth Settings option.
  2. For the Callback URL, paste the following exact link: https://api.breadbutter.io/callback  
  3. Under Selected OAuth Scopes, select and add Access unique user identifiers (openid).

⚠️ Important: If you intend to capture the user's Access Token by enabling "Authorization Data" in Bread & Butter, you must also add the scope for Perform requests at any time (refresh_token, offline_access). If you do not add this scope, Salesforce will block your users from logging in.

  1. Uncheck the option for Require Proof Key for Code Exchange (PKCE) Extension for Supported Authorization Flows.

  2. Check the Configure ID Token option, which will reveal more settings. Also check the Include Standard Claims option.

  3. Click Save, then click Continue.

Step 4: Generate Your App Credentials

  1. Back under the API (Enable OAuth Settings) section, click the Manage Consumer Details button. (You may be prompted to confirm your account access here.)
  2. Locate your Consumer Key and Consumer Secret.

⚠️ Important: Copy and save both of these values. You will need them to connect Bread & Butter in the final step.


Step 5: Configure Refresh Token Policy (Optional)

Only complete this step if you enabled Authorization Data to use Access Tokens and Refresh Tokens.

  1. In the left menu, clear the search bar and navigate to Platform Tools > Apps > Connected Apps > Manage Connected Apps.
  2. Click Edit next to your App.
  3. Ensure that your Refresh Token Policy is not set to "expire immediately". Instead, set it to Refresh Token is valid until revoked, or choose an appropriate expiry timeframe that matches your internal security policies.

Step 6: Link Your Credentials to Bread & Butter

  1. Log in to your Bread & Butter dashboard.
  2. Go to Settings in the left menu, then navigate to your Global Conversion Methods tab.
  3. Locate your Salesforce connection and edit the settings to switch from Sandbox to Production Mode.
  4. Enter a custom name and description for your reference.
  5. Paste your Consumer Key into the Application (client) ID field.
  6. Paste your Consumer Secret into the Client Secret field.
  7. Click Save, and ensure the checkbox next to your new Salesforce provider is enabled.

Final Polish: Complete Your White-Label Setup

You have successfully added your brand name to the Google consent screen! However, visitors may still see breadbutter.io listed in the URL routing during the connection process.

To completely remove our branding and keep visitors fully within your own domain ecosystem, navigate to the Custom Auth Domain tab in your Bread & Butter settings to set up your Custom Auth Domain.

Did this answer your question? Thanks for the feedback There was a problem submitting your feedback. Please try again later.