Skip to content
Sign inSign up

Salesforce Connection

Connect Horizon to Salesforce so agents can query and maintain leads, contacts, accounts, opportunities, and custom objects.

The Salesforce connection lets Horizon agents read and write your CRM records through Salesforce’s REST API, acting as the user who authorized the connection.

Before You Start

  • A Salesforce edition that includes API access.
  • A Salesforce user whose profile grants the API and object permissions your agents need.
  • Your My Domain hostname, for example acme.my.salesforce.com.

Setting Up the Connection

  1. Navigate to Workspace > Connections and click Connect Service.
  2. Select Salesforce from the list.
  3. Enter your Salesforce domain — the My Domain hostname, found in Salesforce under Setup › My Domain.
  4. Click Connect. You will be redirected to the Salesforce login page.
  5. Sign in and review the permissions Horizon is requesting.
  6. Click Allow. You will be redirected back to Horizon.
Note

There is no separate Production or Sandbox choice. The domain you enter determines which org you connect to, so a sandbox is reached by entering that sandbox’s own My Domain hostname.

Permissions and Scopes

Horizon requests three Salesforce OAuth scopes:

  • api — access to the Salesforce REST API.
  • refresh_token — lets Horizon maintain the connection without repeated logins.
  • id — identity, used to confirm the connection is live when you run a health check.
Caution

The agent inherits the data visibility of the authorizing user. If sharing rules or the user’s profile hide a record, the agent cannot reach it either. A dedicated integration user with a deliberately scoped profile is the cleanest arrangement.

What Agents Can Do

Once connected, agents with Salesforce skills can:

  • Work with standard objects — leads, contacts, accounts, opportunities, quotes and orders. Each supports get, query, create, update, upsert and delete.
  • Work with custom objects — the same actions against any custom object, and against standard objects without a dedicated skill, such as Case, Campaign and Product2.
  • Query with SOQL — run a SOQL query directly and get the rows back.
  • Inspect an object — describe an object’s fields and types, which is how an agent discovers a non-standard schema.

Deletes and updates succeed only where the authorizing user’s profile allows them.

Note

Salesforce reports are not available to agents. Horizon queries records; it does not execute saved Salesforce reports.

Troubleshooting

IssueResolution
Connection shows expired or requires_reconnectionClick Disconnect on the connection’s card, then Connect Service and set it up again. There is no re-authorize button — see Repairing a connection.
Agent reports “insufficient privileges”Check the authorizing user’s profile for API access and object-level permissions.
Cannot see custom objectsEnsure the object is API-accessible and the user has read permission on it.
Rate limit errorsSalesforce enforces an API call limit per 24-hour period. Check usage under Setup › Company Information.

Disconnecting

Click Disconnect on the Salesforce card in Workspace > Connections and confirm.

This deletes Horizon’s stored tokens and detaches the connection from the agent skills using it. It does not revoke Horizon’s access at Salesforce — to do that, go to Setup › Connected Apps OAuth Usage and revoke the Horizon app.