Salesforce

Integration version: 9.0

Configure Salesforce to work with Google Security Operations SOAR

Obtain a Security Token

Upon creating your Salesforce account, Salesforce Support will send you an email that contains a security token confirmation to the email address associated with the account. This email is the only place where you can find the Security Token Value. Please note that every time you change the account password, the security token is also regenerated and a similar email is sent.

Configure Salesforce integration in Google Security Operations SOAR

For detailed instructions on how to configure an integration in Google Security Operations SOAR, see Configure integrations.

Actions

Add Comment

Description

Add a comment to a case.

Parameters

Parameter Type Default Value Description
Case Number String N/A The number of the case.
Title String N/A The comment title.
Body String N/A The comment's body.

Use cases

N/A

Run On

This action runs on all entities.

Action Results

Entity Enrichment

N/A

Insights

N/A

Script Result
Script Result Name Value Options Example
is_success True/False is_success:False
JSON Result
N/A

Close Case

Description

Delete a domain from the OpenDNS block list.

Parameters

Parameter Type Default Value Description
Case Number String null N/A

Use cases

N/A

Run On

This action runs on all entities.

Action Results

Entity Enrichment

N/A

Insights

N/A

Script Result
Script Result Name Value Options Example
is_success True/False is_success:False
JSON Result
N/A

Create Case

Description

Create a case.

Parameters

Parameter Type Default Value Description
Subject String N/A The case's subject.
Status String N/A The case's status. Valid values: New, On Hold, Closed, Escalated.
Description String N/A The description of the subject.
Origin String N/A The origin of the case. Valid values: Email, Phone, Web.
Priority String N/A The case's priority. Valid values: Low, Medium, High.
Type String N/A The case type. Valid values: Question, Problem, Feature Request.

Use cases

N/A

Run On

This action runs on all entities.

Action Results

Entity Enrichment

N/A

Insights

N/A

Script Result
Script Result Name Value Options Example
case_number N/A N/A
JSON Result
N/A

Get Case

Description

Get details on a case.

Parameters

Parameter Type Default Value Description
Case Number String N/A The number of the case.

Use cases

N/A

Run On

This action runs on all entities.

Action Results

Entity Enrichment

N/A

Insights

N/A

Script Result
Script Result Name Value Options Example
is_success True/False is_success:False
JSON Result
{
"Field2": "Value2",
"attributes":
{
"url": "/services/data/v20.0/sobjects/Case/123456789",
"type": "Case"
},
"Field1": "Value1",
"Field3": "Value3"
}

List Cases

Description

The case list component displays a list of the user's cases. Only authenticated users can see a list of the cases that they've created.

Parameters

N/A

Use cases

N/A

Run On

This action runs on all entities.

Action Results

Entity Enrichment

N/A

Insights

N/A

Script Result
Script Result Name Value Options Example
is_success True/False is_success:False
JSON Result
[
    {
        "Field2": "Value2",
        "attributes": {
            "url": "/services/data/v20.0/sobjects/Case/123456789",
            "type": "Case"
        },
        "Field1": "Value1",
        "Field3": "Value3"
    },
]

Ping

Description

Test Connectivity.

Parameters

N/A

Use cases

N/A

Run On

This action runs on all entities.

Action Results

Entity Enrichment

N/A

Insights

N/A

Script Result
Script Result Name Value Options Example
is_success True/False is_success:False
JSON Result
N/A

Search Records

Description

Search all records that contain values with a given pattern.

Parameters

Parameter Type Default Value Description
Query String N/A N/A

Use cases

N/A

Run On

This action runs on all entities.

Action Results

Entity Enrichment

N/A

Insights

N/A

Script Result
Script Result Name Value Options Example
is_success True/False is_success:False
JSON Result
{
    "Tasks": [{
        "WhoId": "0033600001bbxuPAAQ",
        "ActivityDate": "2018-07-24",
        "Id": "00T3600003T0io5EAB",
        "Subject": "Email Sent: Re: domain - SOAR RFI / RFP template with domain answers"
    },{
        "WhoId": "0033600001cYpvnAAC",
        "ActivityDate": "2018-07-24",
        "Id": "00T3600003T0ixHEAR",
        "Subject": "Email Sent: domain - SOAR RFI / RFP template with domain answers"
    }],
    "Users": [{
        "Phone": null,
        "Name": "lname fname, CISSP",
        "Title": "Senior Sales Engineer",
        "Email": "john_doe@example.com",
        "Id": "0051Q00000FoH8OQAV"
    },{
        "Phone": null,
        "Name": ". Marketo",
        "Title": null,
        "Email": "john_doe@example.com",
        "Id": "0051Q00000FoNDUQA3"
    }],
    "Contacts": [{
        "Name": "John",
        "Title": null,
        "MobilePhone": null,
        "Email": "john_doe@example.com",
        "Phone": null,
        "OwnerId": "00536000006kd4wAAA",
        "Id": "0031Q00001uwg4mQAA",
        "AccountId": "0013600001o7XYtAAM"
    },{
        "Name": "Bill",
        "Title": "test",
        "Email": "john_doe@example.com",
        "Phone": "7327108052",
        "OwnerId": "005360000075cJpAAI",
        "Id": "0031Q00001uwxgWQAQ",
        "AccountId": "0013600001o7XYtAAM"
    }]
}

Update Case

Description

Update a case.

Parameters

Parameter Type Default Value Description
Case Number String N/A The number of the case.
Subject String N/A The case's subject.
Status String N/A The case's status. Valid values: New, On Hold, Closed, Escalated.
Description String N/A The description of the subject.
Origin String N/A The origin of the case. Valid values: Email, Phone, Web.
Priority String N/A The case's priority. Valid values: Low, Medium, High.
Type String N/A The case type. Valid values: Question, Problem, Feature Request.

Use cases

N/A

Run On

This action runs on all entities.

Action Results

Entity Enrichment

N/A

Insights

N/A

Script Result
Script Result Name Value Options Example
is_success True/False is_success:False
JSON Result
N/A