--- schema_version: "1" id: 66966d013f68abce557cc91bb11c7ebdad56c06b6e1724041eb4cef99a191128 title: Connecting a Trusted Salesforce Organization to Anypoint Platform collection: mulesoft version: current locale: en-us portal_url: https://docs.salesforce.com/mulesoft/current/en-us/access-management/connecting-salesforce-orgs.md canonical_url: https://docs.mulesoft.com/access-management/connecting-salesforce-orgs source_site: docs.mulesoft.com content_type: documentation content_hash: 2f6c29f85128db3baf73075b374266df729aae45d11c5b3aef2461176b1ac57e description: MuleSoft Documentation Site latest: true --- --- product: Access Management version: master --- # Connecting a Trusted Salesforce Organization to Anypoint Platform > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Establish a tenant (organization to organization) trust relationship between your Anypoint Platform organization and a Salesforce organization to enable secure data sharing and centralized capability management. After you establish this link between organizations, the two environments trust each other and can share permissions. The connection process uses two unique tenant keys (one from each organization) and involves the Anypoint Platform organization administrator and the Salesforce organization administrator. After you complete the connection process, you can enable features such as MuleSoft API Catalog for Salesforce and Integration Intelligence. Ways to establish a tenant relationship include: - A Salesforce organization is provisioned with the tenant relationship to an Anypoint Platform organization established. In this case, the Anypoint Platform organization administrator only needs to [enable the existing connection](https://docs.mulesoft.com/access-management/managing-connected-salesforce-orgs#enable-disable-connection) in Anypoint Platform. - The Anypoint Platform organization administrator initiates the tenant relationship in Anypoint Platform and the Salesforce organization administrator completes the setup in Salesforce. ## Before You Begin - Anypoint Platform organization administrators must have the **Organization Administrator** permission at the root organization level. - Salesforce organization administrators must have the **System Administrator** user profile. ## Choose Your Scenario Depending on whether one person holds both the Anypoint Platform and Salesforce organization administrator roles or two people split the roles, follow the appropriate scenario. ### One Person Manages Both Organizations If you’re the organization administrator for both the Anypoint Platform and Salesforce organizations: 1. Start in Salesforce by [getting the Salesforce organization tenant key](#get-salesforce-tenant-key). 2. In Anypoint Platform, [connect with a Salesforce organization](#connect-orgs). 3. In Salesforce, [complete the organization connection process](#complete-organization-connection). ### Different People Manage the Organizations This diagram shows the high-level flow for connecting Salesforce and Anypoint Platform organizations when the process involves separate administrators for the Salesforce and Anypoint Platform organizations. ![Salesforce admin and Anypoint Platform flow for connecting organizations](/mulesoft/current/en-us/access-management/_images/connect-salesforce-anypoint-platform-orgs.png) 1. The Salesforce organization administrator [gets the Salesforce organization tenant key](#get-salesforce-tenant-key). 2. The Salesforce organization administrator shares the tenant key with the Anypoint Platform organization administrator. 3. The Anypoint Platform organization administrator uses the Salesforce organization’s tenant key to [connect with a Salesforce organization in Anypoint Platform](#connect-orgs), and then copies the Anypoint Platform organization key and shares it with the Salesforce organization administrator. 4. The Salesforce organization administrator [completes the connection in Salesforce](#complete-organization-connection) using the Anypoint Platform organization key. ## Get the Salesforce Organization Tenant Key Role: Salesforce organization administrator 1. Log in to your Salesforce organization with your admin credentials. 2. Go to **Setup**. ![Salesforce Setup menu with Setup selected](/mulesoft/current/en-us/access-management/_images/salesforce-setup.png) 3. From **Setup**, in the Quick Find box, enter `MuleSoft`, and then select **MuleSoft > Anypoint Platform Setup**. > [!NOTE] If you don’t see **MuleSoft > Anypoint Platform Setup** in your Salesforce org, > contact MuleSoft Support and provide your Salesforce org ID. Ask Support to turn on the > **Enable Flow API Actions** permission. 4. In **Your connected Anypoint Platform Organization**, click **Complete the Connection**. 5. In **Connection to MuleSoft Anypoint Platform**, copy the Salesforce organization tenant key. 6. If you’re signed in to the Salesforce organization as an administrator, click **Go to Anypoint Platform**. 7. Select the region for your Anypoint Platform organization and click **Go to Anypoint Platform**. 8. Sign in to Anypoint Platform using an account that has the root Organization Administrator permission and continue to [Connect with a Salesforce Organization in Anypoint Platform](#connect-orgs). ## Connect with a Salesforce Organization in Anypoint Platform Role: Anypoint Platform organization administrator Start the process of connecting to a trusted Salesforce organization in Anypoint Platform. You must have the Salesforce organization’s connection key (tenant key) before you can connect to a Salesforce organization. Contact the Salesforce organization administrator to get the tenant key. 1. Sign in to Anypoint Platform using an account that has the root Organization Administrator permission. 2. Select **Access Management** from the ![gear icon](/mulesoft/current/en-us/access-management/_images/gear.svg) menu. 3. Select **Salesforce**. 4. Click **Add Salesforce Org**. 5. Enter the Salesforce organization’s tenant key, and click **Confirm**. The format for the Salesforce tenant key is `cloud/env/org-id`. 6. In **Add the Salesforce Org**, verify the information and click **Add**. Anypoint Platform generates and provides the organization key (or tenant key) in the format `cloud/env/org-id`. 7. Click **Copy** to copy the Anypoint Platform organization key. To complete the connection process, the Salesforce organization administrator enters this organization key (tenant key) into the Salesforce organization you’re connecting to in Salesforce. 8. If you’re the administrator for the Salesforce organization you’re adding, click **Manage in Salesforce** to continue setting up the relationship in Salesforce. If you’re not the Salesforce administrator, provide the Anypoint Platform organization key to the Salesforce administrator so they can finish the connection process in Salesforce. When the connection process is complete, the Salesforce organization appears in the **Salesforce Orgs** section of the **Salesforce** page. ## Complete the Organization Connection in Salesforce Role: Salesforce organization administrator Complete the connection between your organization and the Anypoint Platform organization after the connection process is initiated in Anypoint Platform. You must have the Anypoint Platform organization key (tenant key) to complete the connection. 1. Log in to your Salesforce organization with your admin credentials. 2. Go to **Setup**. ![Salesforce Setup menu with Setup selected](/mulesoft/current/en-us/access-management/_images/salesforce-setup.png) 3. From **Setup**, in the Quick Find box, enter `MuleSoft`, and then select **MuleSoft > Anypoint Platform Setup**. > [!NOTE] If you don’t see **MuleSoft > Anypoint Platform Setup** in your Salesforce org, > contact MuleSoft Support and provide your Salesforce org ID. Ask Support to turn on the > **Enable Flow API Actions** permission. 4. In **Your connected Anypoint Platform Organization**, click **Complete the Connection**. 5. In **Connection to MuleSoft Anypoint Platform**, enter the Anypoint Platform organization key in **Anypoint Platform Organization ID**, and then click **Connect**. The format for the Anypoint Platform organization key is `cloud/env/org-id`. If you don’t have the Anypoint Platform organization key, contact the Anypoint Platform organization administrator. You return to the **Connection to MuleSoft Anypoint Platform** page. The page shows the connected Anypoint Platform organization details, including the enablement status of the capabilities associated with your Salesforce organization. ## See Also - [Salesforce Organization Connections in Anypoint Platform](https://docs.mulesoft.com/access-management/trusted-salesforce-org) - [Managing Connected Salesforce Orgs](https://docs.mulesoft.com/access-management/managing-connected-salesforce-orgs)