Admins / Developers / News

Salesforce Release 5x Free Integration User Licenses

By Andreea Doroftei

If you’re a Salesforce professional working with a variety of systems integrated with your Salesforce instance through an integration user, it’s likely that this is the announcement you’ve been waiting for – a dedicated user license is finally available! 

In addition to the extremely popular Einstein GPT announcement at TrailblazerDX 2023,  Salesforce have shared more information about a wide variety of enhancements. This includes a new type of license you will be able to assign to users: the Salesforce Integration User license. Let’s go through what we know so far about this new license, including the benefits it brings!

What Changes For You?

As you know, each Salesforce user needs to have one license assigned, which ensures their access to the functionality they need to use within Salesforce. For example, a user with a Salesforce license has access to the full CRM functionality and apps, while one with a Salesforce Platform license has their access limited to custom apps. You can view all the available licenses in your org, including this new one, by navigating to the Company Information page in Setup.

Developer Edition orgs include one Salesforce Integration license, while Enterprise, Unlimited, and Performance Edition orgs include five free licenses.

Make sure you take a look over the Standard User Licenses and all other User License types when deciding which is the best option for a certain scenario. 

The new Salesforce Integration license is available after March 14, 2023 and is specifically designed for system-to-system integrations, as it only provides the user with API access. Simply put, your instance’s functionality or data cannot be accessed through the user interface by users who are assigned this license type. 

This means that it’s time to reevaluate the existing integration for users in your Salesforce org and properly migrate them to an API-only access license – this will free up one of the other licenses for an actual human user who can better make use of it. The Salesforce Integration API permission set license (which includes many of the permissions generally granted to Salesforce Admins) should be used to extend and restrict user or object permissions, alongside other relevant permission sets to ensure access to an uniquely tailored sub-set of data, thus reducing risks of a potential data leak.

Additionally, the individual permissions associated with the Salesforce Integration license or the API Only profile cannot be removed – this also applies to clones of the profile.

Advantages of Using the API Only License

It is no surprise that the biggest advantage for all organizations will be the associated cost, or at least to begin with, the fact that there isn’t one! There will be five Salesforce Integration user licenses readily available per org, in the Performance, Enterprise, and Unlimited editions. Additionally, there’s also one included with every Developer Edition org. 

After these first five licenses are consumed, the extra ones will only cost $10 per user per month, making it quite a bargain, especially considering that, until now, you were most likely using a full Salesforce license which is more costly.

Of course, in addition to the monetary aspect, there is the important question of security and traceability. The best practice is to have one user per integration to properly track and identify the transactions at every integration point, and maintain granular control over access – with the new license type and reduced cost, there shouldn’t ideally be any reason to reuse the same user for multiple individual integrations. 

Summary

All in all, the Salesforce Integration user license is bound to make your life as a Salesforce Admin (with a limited number of available licenses) easier – you can expect more security and granularity in terms of controlling integration access, at a much lower cost.   

READ MORE: Top Announcements at TrailblazerDX ‘23

The Author

Andreea Doroftei

Andreea is a Salesforce Technical Instructor at Salesforce Ben. She is an 18x certified Salesforce Professional with a passion for User Experience and Automation. 

Comments:

    sakshi kanoje
    March 14, 2023 5:59 pm
    It's a great news
    Wiam
    March 14, 2023 9:08 pm
    I thought it was announced that 10 integration user licenses are for free by Jennifer W. Lee (Salesforce).
    Spencer
    March 15, 2023 5:09 pm
    Any thoughts on when these will show up? Checking in our org and not seeing this as a Licene type when creating a new user.
    Corné
    March 16, 2023 7:20 am
    This is great! However, there doesn't seem to be any way to access ServiceCloud or Salescloud Object with the 'Salesforce Integration'-license. Or am I missing something?
    Tom Bassett
    March 16, 2023 7:56 am
    Thanks for sharing . Currently this doesn't support PSL (Permission Set Licences) for objects/features such as CPQ. Maybe that's worth adding in ?
    Tom Bassett
    March 16, 2023 7:59 am
    As in to access these features you need a paid PSL on top
    Christine Marshall
    March 16, 2023 11:39 am
    Jenn's tweet did say 10 licenses, however, during the True to the Core session they said it was 5 licenses.
    Andreea D
    March 16, 2023 12:14 pm
    The True to the Core session was indeed the correct information as Salesforce has also noted in the documentation that there will be five Salesforce Integration licenses available : https://help.salesforce.com/s/articleView?id=sf.users_license_types_available.htm&type=5
    Jenni
    March 16, 2023 1:56 pm
    Can this new integration user license be used with MC Connect? As that requires system admin permission? SF article doesn't mention MC Connect....
    Charlie
    March 17, 2023 2:33 pm
    Has anyone started to see these licences appear in their Orgs? In the TttC session Parker suggested it would be happening this week, but I'm not seeing them in my Orgs yet
    David Allen
    March 18, 2023 8:33 pm
    This Salesforce article announces it is available after March 14, 2023. However, we tried to use it, could not find it, and submitted a case to SF support. They finally admitted they are rolling it out gradually and have had some related issues with the API Only profile.
    Andreea D
    March 20, 2023 11:25 am
    Hello Tom! Thank you for highlighting! Indeed definitely worth mentioning that for additional products such as CPQ the paid PSL will be needed on top as it happened before.
    Andreea D
    March 20, 2023 11:37 am
    Hello Jenni! While the documentation per say doesn't mention MC, it does mention that "The Salesforce API Integration permission set license makes available many of the same user and object permissions typically granted to Salesforce admins." and that you can combine permissions (the source is this page: https://help.salesforce.com/s/articleView?id=sf.integration_user.htm&type=5) - it may worth testing it out to know for sure if it is a suitable option. Thank you!
    Jeff Hunsaker
    March 20, 2023 11:50 am
    Take caution when you start migrating. Our initial look at this in a Sandbox showed that when the license type is changed from Standard License to INtegration License, ALL PERMISSION sets are removed from the User. This includes permission sets not otherwise tied to a license type. We are reviewing this further, but make sure to first document all Permission sets associated to a User prior to changing the license type. If anyone has more details on how this should work, please indicate here. the permission sets are the KEY way to identify FLS for integration users.
    Meghan Halley
    March 20, 2023 12:20 pm
    This is long overdue and awesome!
    Julian Olsen
    March 20, 2023 1:54 pm
    Hey Folks, anyone already discovered the object permission settings for Account, Contact, etc.? They are not configurable in a profile, that has the license "Salesforce Integration" configured neither in a permission set. Cheers Julian
    Jacob H
    March 21, 2023 12:31 am
    Does the Salesforce Integration license allow access to all SF objects or just custom apps? (i.e. is it more similar to Salesforce license or Salesforce Platform license?) Thank you!
    Andreea D
    March 21, 2023 6:56 pm
    Hello Spencer! The licenses have started showing up in production, sandbox and developer edition orgs already, but most likely Salesforce is doing a phased rollout to all the orgs.
    Andreea D
    March 21, 2023 6:57 pm
    Hello Charlie! Yes, they started showing up in orgs already, but most likely Salesforce has done a progressive rollout.
    Andreea D
    March 21, 2023 6:59 pm
    Thank you for sharing, David! This seems to be the case indeed, as some orgs do have the licenses available and some still don't.
    Andreea D
    March 21, 2023 7:04 pm
    Hello Jeff! Thank you for sharing, I've also made the change in a sandbox however when changing the license I did receive a pop-up stating that all Permission Sets will be removed, before actually saving the user record with the new license. Not sure why the pop-up wouldn't appear for you as well in this case though, but it is indeed good practice to document the permissions.
    Andreea D
    March 21, 2023 7:09 pm
    Hello Julian! What I discovered so far is that the object permissions seem to be included in the Salesforce API Integration permission set license. If you navigate to the Permission Set License assignment page for an user, you will notice that on the right hand side next to his PSL all the permissions and object permissions as written down, such as for example "Accounts: Read, Create, Edit, Delete, View All, Modify All"
    Andreea D
    March 21, 2023 7:12 pm
    Hello Jacob! Based on what I could see in the breakdown of the Permission Set License from the PSL assignments page object access is granted for standard object such as Accounts,Contacts and Opportunities as well.
    Andreea D
    March 21, 2023 7:12 pm
    It certainly is a great addition!
    Blake
    March 22, 2023 3:00 pm
    So concerned, It's seem accessed Standard Salesforce Object. I have just queried "SELECT Id FROM ACCOUNT " and get the error below: [ { "message": "\nSELECT Id FROM Account\n ^\nERROR at Row:1:Column:16\nsObject type 'Account' is not supported. If you are attempting to use a custom object, be sure to append the '__c' after the entity name. Please reference your WSDL or the describe call for the appropriate names.", "errorCode": "INVALID_TYPE" } ]
    Joseph F
    March 23, 2023 10:24 pm
    We're testing this out in our org today but the new user isn't even able to access the account object to simply read the fields to pull information. I'm not sure what good this will be if we cannot actually read/write data... Can't even add a permission set on top to grant read-only access to the account object. Maybe I'm missing something.
    Cuong
    March 24, 2023 2:52 pm
    Really? I checked but It can not access Standard Obj. Pls share more info to me
    Jack
    March 29, 2023 3:00 pm
    Sorry what does this line mean "Additionally, the individual permissions associated with the Salesforce Integration license or the API Only profile cannot be removed – this also applies to clones of the profile." Thanks, Jack
    Yassin
    March 30, 2023 12:28 pm
    Hey, We tried to migrate an Integration user we use to access Event Logs outside of Salesforce but for that the "View Event Log Files" permission is required which can't be assigned to a user with the Integration License. Did anyone face similar issues or know if this will be supported in the future as the permission is for API requests only?
    Cindy Grace
    March 30, 2023 6:09 pm
    Is there any impact/recommendations against changing an existing API user license from salesforce to salesforce integration?
    Anton Sol
    March 31, 2023 10:17 am
    Hey Folks, how do you initially set up authentication for an integration user? Give it an identity license first and afterwards switch to API-Only integration license?
    Nick
    April 04, 2023 7:56 am
    Have also found this to be a limitation.
    Ben
    April 06, 2023 3:51 pm
    What I have found is that the profile contains zero object access, but lots of field access. Odd because they're moving away from profiles for field access. The "Salesforce Integration" license only allows for custom object access. The "Salesforce API Integration" license allows for standard object access to be added, but doesn't actually add any access. What I did was create the user with the Salesforce integration license and then applied the Salesforce API Integration PSL. Then I created permission sets specifying the Salesforce API Integration PSL to grant standard object access (just so they don't get assigned to other license type users) and assigned those to the user.
    Sam C
    April 13, 2023 2:12 pm
    Also found this, and extended those permissions out using a permission set assigned to the permission set licence, but has anyone proven use of this integration API user for deployments specifically? Using Workbench or any other deployment tool. I've found a lot of inconsistencies compared with using the default sysadmin profile, which of course has pretty much everything enabled
    Harsha
    April 13, 2023 8:52 pm
    Hi Andrea, I want to convert a Salesforce license profile to Salesforce API Integration Profile. I have cloned the API profile and created a new one with similar permissions with a permission set created using Salesforce API Integration Permission set License. I have a custom object whose sharing setting is controlled by parent because it has master details fields of Account and Opportunity objects in it. I have already assigned all the high-level permissions of parent objects in the permission set created earlier. But, I'm still unable to access the custom object with this API Integration Profile. Could you please help me if this is a bug or if Am I missing any security settings? Many Thanks in advance!!
    Bryan Douglas
    April 17, 2023 11:03 pm
    With the Salesforce API Integration license, to get access to both standard and custom objects, create a permission set with no license selected. Then you may add every object available. Thats al!
    Jen
    April 19, 2023 8:43 pm
    Thanks Ben! This was very helpful. I was very confused as it seems like the access is in the Salesforce API Integration PSL for access to standard objects (contact, account etc) but the system I'm trying to use this with (Informatica) couldn't see those objects. Maybe 3rd party vendors need to 'catch-up'? I also created a Permission Set with NO license type so I could add access to standard objects. I'm not sure what you mean (or I don't know how) by "specifying the Salesforce API Integration PSL"
    Saar Machtinger
    May 21, 2023 2:40 pm
    Great post !!! I have some flows executing after user is created. Any idea how I distinguish the new license type so my flow wouldn't run ? * beside adding a check box to do that.
    Andreea D
    May 23, 2023 6:51 am
    Hello Saar! Happy you enjoyed the post. I would try to look either at the License Name or License definition key: SELECT Profile.UserLicense.Name, Profile.UserLicense.LicenseDefinitionKey FROM User then use it in the flow {!$Record.Profile.UserLicense.LicenseDefinitionKey} = 'x' (assuming it's a record triggered flow on the User, Record would be the user and x would be the License definition key you want to run it for, or if you want to exclude it would be != 'y'). If you go for this option, please let me know how it goes.
    Georgia Serpe
    May 30, 2023 3:03 pm
    Hi all. I've provisioned one of these licenses -- we use a custom domain with SSO and the user is having issues logging in -- is anyone experiencing the same?
    Bryan Leaman
    September 19, 2024 7:32 pm
    But since you can't even give an integration user read access to contacts, what possible use is it?

Leave a Reply