Preview before write Diffs, policy posture, and rollback readiness appear before the connector executes.
Simulation or sandbox first The product starts with a deterministic story before it asks for production trust.
Proof stays attached Approval, audit, artifacts, and recovery context stay on the same governed run.
Connector

Salesforce Service Cloud

Use this checklist to move from stored Salesforce credentials to a validated case-resolution workflow with rollback evidence.

Overview
Salesforce Service Cloud

Salesforce Service Cloud follows the same ActionPlane path: understand the workflow, test it safely, connect a sandbox, and then widen it only after preview, approval, and rollback evidence look credible.

Sandbox availability

Customer-sandbox only
Live sandbox path
Customer-owned sandbox
Customer-owned non-production environment
First action salesforce.resolve-case
Live sandbox path Connector-specific auth, metadata sync, and live sandbox write paths exist here, but the lane is still pre-pilot and not yet proven with real external tenants.
Sandbox posture Customer-owned sandbox, staging tenant, or other low-risk environment
Next move Start with: Save connector settings.
Developer connection steps

Keep the first connector setup constrained to one environment, one identity, and one clearly reviewable workflow.

01
get-environment

Get the right sandbox or trial environment

Use a customer-owned sandbox or staging tenant for this connector. Required account type: Customer-owned non-production environment.

02
create-credentials

Create the connector credentials and initial allowlist

Save the Salesforce login URL, External Client App or Connected App credentials, and the Case allowlist for Status, Priority, and Description.

03
configure-actionplane

Enter the connector settings in ActionPlane

Open the connector page in ActionPlane, save the environment URL and credentials, and keep the first workflow narrow enough that the operator can explain every writable field.

04
validate-sync

Validate auth and sync metadata

Run metadata sync so ActionPlane can validate Salesforce Case fields and writable resolution fields before live writes.

05
run-first-sample

Run the first dry run before any live sandbox write

Submit the Salesforce resolve-case preset as a dry run from the dashboard and confirm that the preview, governance decision, and artifacts look correct.

Canonical sample scenario

Business context

Start with one record and one reviewed write path that is easy for both a technical evaluator and a buyer to follow.

Starting record state

The sample record is stable, the allowlist is narrow, and the operator can see the exact fields that are about to change.

Requested change

Apply one deterministic change that produces a visible preview, clear policy outcome, and reversible execution path.

Why it routes

The first sample needs to be explainable without narration, so it should route through the same approval or execution lane you plan to use in production.

Expected artifacts

The sample should leave request evidence, output evidence, and a short audit trail that explains why the run moved forward or stopped.

Reset behavior

Reset should return the sample record to the initial seeded state.

Onboarding API
Use an authenticated ActionPlane session or bearer token. These endpoints act on the current workspace by default, so connector setup stays inside the same operator context as the UI.
GET /api/connectors/onboarding/salesforce-service-cloud
GET /api/connectors/onboarding/salesforce-service-cloud/metering
POST /api/connectors/onboarding/salesforce-service-cloud/connect
POST /api/connectors/onboarding/salesforce-service-cloud/validate
POST /api/connectors/onboarding/salesforce-service-cloud/sync-metadata

Onboarding metering tracks activation progress for the connector. It is not a separate billable unit; workspace billing remains governed-run based.

Connect payload

Save the connector, validate it immediately, and sync metadata in one authenticated call.

{
  "loginUrl": "https://login.salesforce.com",
  "clientId": "\u003Cclient-id\u003E",
  "clientSecret": "\u003Cclient-secret\u003E",
  "refreshToken": "\u003Crefresh-token-or-empty\u003E",
  "apiVersion": "66.0",
  "isSandbox": true,
  "isEnabled": true,
  "validateAfterSave": true,
  "syncMetadataAfterSave": true,
  "managedObjects": [
    {
      "objectApiName": "Case",
      "displayName": "Case",
      "allowedFields": [
        "Status",
        "Priority",
        "Description"
      ]
    }
  ]
}
curl -X POST \
  "$ACTIONPLANE_BASE_URL/api/connectors/onboarding/salesforce-service-cloud/connect" \
  -H "Authorization: Bearer <session-token>" \
  -H "Content-Type: application/json" \
  --data @"connect-salesforce-service-cloud.json"
Validate

Re-run auth and instance validation without resubmitting the connector payload.

curl -X POST \
  "$ACTIONPLANE_BASE_URL/api/connectors/onboarding/salesforce-service-cloud/validate" \
  -H "Authorization: Bearer <session-token>" \
  -H "Content-Type: application/json"
Sync metadata

Refresh the writable object and field catalog after credentials or allowlists change.

curl -X POST \
  "$ACTIONPLANE_BASE_URL/api/connectors/onboarding/salesforce-service-cloud/sync-metadata" \
  -H "Authorization: Bearer <session-token>" \
  -H "Content-Type: application/json"
Capabilities

Visible ticket or case state preview before execution

Connector-aware approval and simulation posture

Audit, evidence, and rollback context attached to the same support run

First-class onboarding API can save, validate, and sync the connector in one authenticated flow

Go live

Start with one sandbox record or ticket that accurately mirrors production shape and permissions.

Validate preview, approval, output evidence, and recovery posture before widening workflow scope.

Move to production only after the first evaluator can demo the path without founder narration.

Known limits

Connector coverage is intentionally narrow during the first rollout.

The first evaluator should use a low-risk environment that accurately mimics production permissions and record shape.

ActionPlane is still in beta posture and does not yet provide formal SLA commitments.