Set Up Consumer Goods Cloud Processing Services

Configure Replication Fields in Complex Pricing Condition

Get better performance on data replication in the mobility app by configuring the two replication fields in the Complex Pricing Condition object. The two replication fields are created when you upgrade the managed package.

1. To migrate the existing data from Replication_Key_id__c to these fields, run a batch process by running this code on an anonymous window from the developer console:

   cgcloud.CGCloudBatch.executePostInstallBatch('BatchPPPConditionsReplicationFields', 2000);

   If Replication_Key_id__c is blank, the batch process updates the Replication_Sales_Organization__c field with the sales organization ID specified in the Sales_Org__c field.

   If Replication_Key_id__c contains an account ID, the batch process updates the Replication_Account__c field with that account ID.

2. To retrieve the Salesforce ID of the user’s salesOrg, adjust your synchronization rules by creating a named query.
   1. From the App Launcher, find and select Sync Management.
   2. On the Sync Configuration tab, select Named Queries.
   3. Locate the Limited Distribution section and within that section, click New to create the named query. Use this definition:

      Bindable Name	SOQL Statement
      SalesOrganizationId	Select Id from cgcloud__Sales_Organization__c where Name = $User.cgcloud__Mobility_Sales_Org__c

3. To verify that the configuration works as expected, click Execute.
4. To update the where condition for the Complex Pricing Condition object, go to Sync Configuration | Tracked Objects
   1. Edit the Complex Pricing Condition object.

      If you haven’t changed the default configuration provided by the demo data, the “where” condition is similar to:

      cgcloud__Sales_Org__c = $User.cgcloud__Mobility_Sales_Org__c AND cgcloud__Valid_From__c <= NEXT_N_DAYS:14 AND cgcloud__Valid_Thru__c >= LAST_N_DAYS:14 AND ( cgcloud__Replication_Key_id__c ='<EMPTY>' OR cgcloud__Replication_Key_id__c IN ::RelevantHierarchyAccountsForUser:: )

   2. Update the where condition with the new fields:

      cgcloud__Valid_From__c <= NEXT_N_DAYS:14 AND cgcloud__Valid_Thru__c >= LAST_N_DAYS:14 AND (cgcloud__Replication_Account__c IN ::RelevantHierarchyAccountsForUser:: OR cgcloud__Replication_Sales_Organization__c IN ::SalesOrganizationId:: )

5. To verify that the configuration works as expected, click Execute.
6. Save the configuration.

Create a Self-Signed Certificate

Log in to your Consumer Goods Cloud org to create a self-signed certificate. You must create a self-signed certificate before you create a connected app.

1. From Setup, in the Quick Find box, enter Certificate and Key Management, and then select Certificate and Key Management.
2. Click Create Self-Signed Certificate, and then enter these details.
   • Label: CGCloud_Services
   • Unique Name: CGCloud_Services
   • Key Size: 2048
3. Select Exportable Private Key.
4. Save your changes.

Register the Processing Service

Use the self-signed certificate to register your processing service.

1. From Setup, in the Quick Find box, enter Processing Services and select it.
2. Register the processing service.
   

   If you already have a certificate, you can use that certificate for registration.

Replace the Self-Signed Certificate

When your self-signed certificate expires, you receive an email notification. To prevent any disruption to your Consumer Goods Cloud services, replace the expiring certificate with a new one before the expiration date.

Create an External Client App

To authenticate, authorize, and integrate your Salesforce org with Consumer Goods processing services, create an external client app.

Important Connected apps creation is restricted as of Spring ‘26. You can continue to use existing connected apps during and after Spring ‘26. However, we recommend using external client apps instead. If you must continue creating connected apps, contact Salesforce Support.

See New connected apps can no longer be created in Spring ‘26 for more details.

1. From Setup, in the Quick Find box, enter Apps, and then select External Client App Manager.
2. Click New External Client App.
3. Enter a name for the app.
4. Enter contact email ID.
5. Select Enable OAuth Settings.
6. In Callback URL, enter https://login.salesforce.com/services/oauth/success.If you are using a testing sandbox, use https://test.salesforce.com/services/oauth/success.
7. In Selected OAuth Scopes, select these options:
   • Access the identity URL service  (id, profile, email, address, phone)
   • Access unique user identifiers (openid)
   • Manage user data via APIs  (api)
   • Perform requests at any time  (refresh_token, offline_access)
8. From the Flow Enablement section, select Enable JWT Bearer Flow.
9. Upload the public key that you downloaded.
   If the pairing process isn’t completed within an hour after you download the public key, download another public key and upload it. See Download a Public Key.
10. If selected, deselect all security settings.
11. Click Create.
    External client app is successfully created.
12. Assign access to user profiles and edit policies.
    1. Click Policies, and then click Edit.
    2. In the OAuth Policies section, from Permitted Users, select Admin approved users as pre-authorized.
    3. Confirm your changes.
    4. Select the required profiles and permission sets.
    5. Save your changes.
13. Copy consumer key.
    1. Click Setting.
    2. In the OAuth Settings, click Consumer Key and Secrets.
    3. Enter the verification code, and click Verify.
    4. Copy the consumer key.
    You need the consumer key to complete the pairing.

Configure User Access for Processing Services

Configure user access to objects for each processing service.

Note To send email notifications, a Processing Services user must have a verified email address.

1. From the App Launcher, find and select Processing Services Pairing App.
2. Click Manage Users and Services, and select the users.
   For Processing Service User, select users who must sync data between Hyperforce and Salesforce.
3. Click Next, and select these services:
   If you started to use the Consumer Goods Managed package before Summer ’24, your Processing Service user needs these permission sets to run the respective batches.

   Service	Permission Set Required
   Pricing Condition Condensation Batch	CGCloud Advanced Pricing Worker
   Hierarchy Org Unit Batch	CGCloud Org Unit Hierarchy Flattening Worker
   Hierarchy Customer Batch	CGCloud Account Hierarchy Flattening Worker
   Manage CGCloud Processing Services	CGC Processing Services Register
   Segmentation Batch	CGCloud Account Segmentation Worker

   If you started to use the Consumer Goods Cloud Managed package in Summer ’24, your Processing Service user needs these permission sets to run the respective batches.

   Service	Permission Set Required
   Pricing Condition Condensation Batch	CGCloud Retail Advanced Pricing Worker
   Hierarchy Org Unit Batch	CGCloud Retail Org Unit Hierarchy Flattening Worker
   Hierarchy Customer Batch	CGCloud Retail Account Hierarchy Flattening Worker
   Manage CGCloud Processing Services	CGC Processing Services Register
   Segmentation Batch	CGCloud Retail Account Segmentation Worker

4. Click Connect.
   

   Important If the username for a selected user is changed, the user is no longer associated with the processing service. Re-pair relevant users to continue to use the processing service.

Replace the Self Signed Certificate for Your Connected App

The certificate used for pairing the connected app is valid for one year, and you receive an email 30 days before it expires. You can also check the certificate's expiration date in the Processing Services Pairing app.

Important Before you replace the certificate, make sure that all users configured in the connected app are active users.

1. Download a new certificate.
   1. From the App Launcher, find and select Processing Services Pairing App.
   2. Click , and then select Download Certificate.
      The downloaded certificate is valid for only 60 minutes. Replace the expiring certificate and confirm the replacement within 60 minutes of the download.
   The ProcessingServices.crt file is downloaded.
2. Replace the expiring certificate with the new certificate.
   1. From Setup, in the Quick Find box, find and select App Manager.
   2. For the app that you want to replace the certificate, click Edit.
   3. To upload the new certificate, next to Use digital signatures, click Choose File, and then select the certificate that you downloaded.
   4. Save your changes.
3. Confirm the replacement of the certificate.
   1. From the App Launcher, find and select Processing Services Pairing App.
   2. Click Confirm Certificate Replacement.