Due to a recent change from Salesforce, a Salesforce Administrator will need to Install the Workato Connected App.
After installing the app, in Permitted Users, select the appropriate option for your org (e.g. All users may self‑authorize).
Begin by navigating to Global Settings (ClientSuccess Admin Users and above have access to this page) > Integrations (New). What you see here is the platform you will use to connect your CRM to ClientSuccess. From here click the "Start Integrating" button.
From here click "Connections" underneath "Assets" to see a list of all available connections.
NOTE: You may need to wait a few seconds before this screen fully appears. If the screen appears with all "0's" next to the list of Assets, please wait a few seconds and click your browser's refresh button.
Please select "SF | Con | Salesforce Connection".
If you are connecting to a Salesforce account with a custom domain URL (e.g. mydomain.salesforce.com), please click "Advanced Settings" and enter your custom domain URL. Please make sure your URL ends with .com and NOT a "/"
NOTE: Please ensure you're using the Salesforce Classic URL format, not the Lightning URL format.
If you are connecting your ClientSuccess sandbox account to a Salesforce sandbox account, change the "Sandbox" dropdown to "Yes". This will change the login URL to test.salesforce.com
Click Connect
A new window will pop up asking you to sign in. Using Salesforce credentials with permissions equivalent to a Salesforce Admin, sign in to Salesforce.
Click Accept to agree to the required permissions for your Salesforce instance to communicate to ClientSuccess
You should now be taken back to the Connections screen and the right side of your Salesforce connection screen should now say "Connected"
Re-authenticating
It is possible that the Salesforce integration connection will get disconnected. To address this, you can "Disconnect" the connection and re-connect, but you will need to perform some additional steps due to a recent update from Salesforce regarding OAuth connections. For more details you can refer to the Salesforce Announcement.
A Salesforce Administrator will need to perform the steps below.
Initial step
Confirm if the “Workato connector” Connected App is installed in your Salesforce org. If the app is installed, the Connected Apps OAuth Usage page in Setup will show an Uninstall button. No action is required if “Workato connector” Connected App is installed - just clicking the ‘connect’ button in the Workato UI and following the prompts will get you reconnected.
If the app is not installed, your admin will need to choose one of the solutions
Option 1
Install the Connected App. Click Install, follow the prompts, and configure OAuth Policies. In Permitted Users, select the appropriate option for your org (e.g. All users may self‑authorize).
Option 2
Grant permissions for those users who will create connections:
If API Access Control is enabled in the org, assign "Use Any API Client" permission
If API Access Control is not enabled, assign "Approve Uninstalled Connected Apps" (new in the Salesforce Summer ’25 release).
Troubleshooting Your Authentication
Which URL should I use for the "Salesforce Domain (required)" step?
Q. Should I use my "Classic" experience or "Lightning" experience URL?
A. Always use your "Classic" experience URL.
Q. If I have a custom domain, should I use the custom portion of my domain?
A. Yes, use your full custom Salesforce domain. Example: "https://clientsuccess.my.salesforce.com".
Q. If I'm connecting my Sandbox Salesforce instance to ClientSuccess, what URL do I use?
A. For Sandbox authentications use: "https://test.salesforce.com".
Q. What if I'm connecting my production instance, but I don't use a custom Salesforce domain?
A. In this case use: "https://login.salesforce.com".
Q. Is the "https://" necessary to include with the URL?
A. ClientSuccess is looking for a full, and properly formatted URL. This includes the "https://" at the beginning as well as the ".com" at the end.
After submitting my login credentials, an error popped up on my screen. How do I resolve this? Error resolution will depend on what type of error you're presented with.
Error: "User secret is not configured"
Resolution: Please reach out to ClientSuccess Support at support@clientsuccess.com to resolve.
Error: "user is not admin approved to access this app"
Resolution: This error means that the Salesforce credentials being used to authenticate to ClientSuccess do not have the appropriate permissions to allow authentication to a 3rd party application.
Please review/update the Salesforce user permissions for whoever is attempting to authenticate, and then try again.
We're working to expand this documentation to address other errors you may see. Please email support@clientsuccess.com with error details (including a screenshot of the error), and we will both assist you in resolving it and update this documentation accordingly.