--- schema_version: "1" id: c9f519bd39077cd2900cae1f462b6028a0f799bf2e0304a74e5c43e9cca74177 title: Create an External Credential and a Named Credential for Intelligent Form Reader collection: admin version: current locale: en-us portal_url: https://docs.salesforce.com/admin/current/en-us/ind/264-0-0/form_reader_create_amazon_account_named_credential.md canonical_url: https://help.salesforce.com/s/articleView?id=ind.form_reader_create_amazon_account_named_credential.htm&release=264.0.0&type=5 source_site: help.salesforce.com content_type: documentation content_hash: 9e9295432c8670deac66ce342e2e88cb9c205565e30f2af3e471597985621313 description: Create an external credential to authenticate the Amazon Web Services (AWS) account that you want to use for Intelligent Form Reader. Then create a named credential for the external credential. products: - Industry Solutions - Cross Cloud release: "264" --- # Create an External Credential and a Named Credential for Intelligent Form Reader Create an external credential to authenticate the Amazon Web Services (AWS) account that you want to use for Intelligent Form Reader. Then create a named credential for the external credential.
Available in: Lightning Experience
Available in: Financial Services Cloud, Health Cloud, and Public Sector Solutions
Intelligent Form Reader is available for an additional cost with the Intelligent Form Reader add-on license.
1. Log in to your org as an administrator, and then assign the Document Checklist and Intelligent Document Workspace User permission sets to the admin user. 2. Update Salesforce File Settings. 1. From Setup, in the Quick Find box, enter Salesforce Files, and then select **General Settings**. 2. Click **Edit**, and then select **Display alternative file previews**. 3. Save your changes. 3. Create a document type. 1. From Setup, in the Quick Find box, enter Document Type, and then select **Document Type**. 2. Click **New**. 3. Specify the label, name, and form type. 4. Save your changes. 4. Create an External Credential for Amazon Web Services (AWS). 1. From Setup, in the Quick Find box, enter Named Credentials, and then select **Named Credentials**. 2. On the External Credential tab, select **New**. 3. Specify these details and save your changes. Configure STS for Temporary Access, if required. | Field | Description | | --- | --- | | Label | A user-friendly name for the named credential that’s shown in the Salesforce user interface. | | Name | A unique identifier that’s used to refer to this external credential. | | Authentication Protocol | Select AWS Signature Version 4. | | Service | The name of an AWS service, such as textract. | | Region | The AWS region for the named credential’s endpoint. For example, us-west-2. | | AWS Account ID | The 12-digit number that uniquely identifies your AWS account. | | Use STS for Temporary Access | To provide limited access, select the checkbox, and then specify the STS access key, access secret, external ID, and duration. See [Create and Edit an AWS Signature v4 External Credential](https://help.salesforce.com/s/articleView?id=xcloud.nc_create_edit_awssig4_ext_cred.htm&type=5&language=en_US). | 5. Configure the principal for the external credential. 1. Open the external credential that you created. 2. In the Principals section, click **New**. 3. Specify the parameter name, access key, access secret, and ARN. See [Create Principals for AWS Signature v4](https://help.salesforce.com/s/articleView?id=xcloud.nc_create_edit_awssig4_ext_cred.htm&type=5&language=en_US). 4. Save your changes. You can’t modify the principal name of an existing principal. To change these parameters, delete the principal and recreate it. 6. Create a Named Credential by using the external credential. 1. From Setup, in the Quick Find box, enter Named Credentials, and then select **Named Credentials**. 2. Click **New**. 3. Specify the label, name, and URL, and select the previously created external credential. The format for the URL is https://www.aws.com. See [Create and Edit a Named Credential](https://help.salesforce.com/s/articleView?id=xcloud.nc_create_edit_named_credential.htm&type=5&language=en_US). 4. Save your changes. When creating a named credential, make sure that you specify an Amazon Textract endpoint as the URL. For information about the Amazon Textract endpoints, see [Amazon Textract endpoints and quotas - AWS General Reference](https://docs.aws.amazon.com/general/latest/gr/textract.html). 7. Create a permission set and provide access to the external credential. 1. From Setup, in the Quick Find box, enter Permission sets, and then select **Permission sets**. 2. Click **New**. 3. Specify the label and name. 4. Save your changes. 5. In the Apps section, click **External Credential Principal Access**, and click **Edit**. Permission sets with external credential principal access enabled can be packaged. 6. Click **Edit**. The Edit page shows the available external credential principals, and the external credential principals that are currently enabled. 7. Select one or more external credential principals. 8. Save your changes. 8. Assign the new permission set to the Admin user. 1. Select the permission set. 2. Click **Manage Assignments**, and then select **Add Assignments**. 3. Select the user that you want to assign the permission set to, and click **Next.** 4. Click **Assign**. 9. Assign the permission set to the Autoproc user by using this Apex code in Workbench. ```html insert new PermissionSetAssignment( AssigneeId = [SELECT Id FROM User WHERE alias = 'autoproc'].Id, PermissionSetId = 'SELECT PermissionSet Id' ); ``` ![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-ind-intelligent_form_reader-264-0-0-production-enus/5c32d260-e65d-49ed-b5ec-68e425bb0371/images/icon_note.png) Note In Workbench, query the PermissionSet object to retrieve the ID and label. Copy the specific permission set ID and replace the 'SELECT PermissionSet Id' text in the execute text box with the copied ID before you run the code.