Configuring the Salesforce Integration for your Organization

Salesforce integration is optimal for any organization relying on Salesforce as its CRM. All visitor and prospect data between Chili Piper and Salesforce needs to be synced in real time. 

In this article, we will quickly cover how to set up your integration, the minimum permission scope required for Global Sync users, and the OAuth error in Chili Piper's Demand Conversion Platform.

How to Setup?

To set up the integration and a Global Sync user, you will first need your Salesforce admin to connect Salesforce via the Integrations page in the Admin Center.

Once connected, you will notice a "Connected" flag, as shown in the screenshot below:

You can use the Reconnect button to reconnect the account for any reason or replace the current Global Sync user. 

Salesforce Scope and Minimum Permissions
 

Below are the minimum Permission Sets (from a user profile level) for a User to Create the Chili Piper Account via Salesforce or for a User to become a Global Sync user:

Administrative Permissions

• API Enabled
  • To connect and interact with Chili Piper
• View Setup and Configuration
  • Required to view individual field accessibility permissions
  • View app setup
• View Roles and Role Hierarchy
  • View role details for user lookup and profile data
• View All Users
  • For user sync
• Approve Uninstalled Connected Apps OR Use Any API Client
  • If applicable: Salesforce will begin restricting Connected App access. These permissions will allow an admin user to continue using an "uninstalled" connected app. Alternatively, an admin can click "Install" beside the Chili Piper connected app, and this permission is not needed. 

Standard Object Permissions 

• Accounts: Read/Edit/View All
• Contacts: Read/Edit/View All/Create
  • Create is required if Chili Piper creates Contacts in your Salesforce instance.
• Leads: Read/Edit/View All/Create
  • Create is required if Chili Piper creates Leads in your Salesforce instance. Read/View is required for prospect lookups in Chili Piper, even if you are not using the Lead object in your workflows.
• Opportunities: Read* 
• Cases: Read* 
• Campaigns: Read/Edit/View All*^
• PushTopic: Create/Read/Edit
  • This permission is only needed for Distro

*Only required if you are making use of this object type in Chili Piper (Cases, Opportunities, or Campaigns)

^ - The following fields need, at least, read access as they are queried while looking for active Campaigns in Salesforce: Id, Name, StartDate, EndDate, Status, IsActive

The related object inherits access to Events (Activities).

The connection user should have either "View All / Modify All" or "Modify All Data" for the related object to ensure the creation, editing, and deletion of Events is possible.

Given the implications for security, we recommend using delegated object permissions with View / Modify on the object itself rather than Modify All Data.
 

OAuth Error - OAUTH_APPROVAL_GENERIC Troubleshooting

Starting in September 2025, Salesforce restricted the use of uninstalled connected apps. This usage restriction blocks end users from using uninstalled connected apps, which can impact your initial integration with Chili Piper's app.

If that's the case, you likely will see the error below after trying to integrate Salesforce via Admin Center:

To mitigate the error, you can follow the steps below:

1. Navigate to Setup
2. Search Connected apps Oauth Usage
3. Find Chili Piper
4. Click Install
   
    

Optionally, you can give the integration user permission to use uninstalled apps via profile permissions:

1. Click the gear icon → Setup.
2. In Quick Find, type Profiles → click Profiles.
3. Find and click the Profile used by your integration user (the profile label).
4. On the profile page, either:
   1. Click the System Permissions link, then click Edit, or
   2. Click Edit at the top of the profile and scroll to the System Permissions / Administrative Permissions area.
      (UI varies slightly by org; both get you to the same permission list). 
      Salesforce
5. In the list, locate and check the permission(s) you want to grant:
   1. Approve Uninstalled Connected Apps — let this user self-authorize/use an uninstalled connected app.