Salesforce Native Connector 25.4
Salesforce Native Connector Help

# Mapped Security Architecture

The mapped security architecture includes the following components:

- The Salesforce repository.
- Knowledge Discovery Salesforce Connector.
- Knowledge Discovery OmniGroupServer.
- Knowledge Discovery Content component.
- A front-end application.

Items in Salesforce have associated permissions that specify the users and groups who are permitted, and who are not permitted, to view them. The Salesforce Native Connector retrieves the items from Salesforce and generates documents that can be indexed into the Content component text index. To each document the connector adds an Access Control List (ACL) which contains the security information. Each time the connector synchronizes with the repository, it updates the ACLs for any documents where the associated permissions have changed.

The Content component needs the ACL to determine whether a user can view a document that is returned as a result to a query. However, the Content component must also consider the groups that the user belongs to. A user might not be permitted to view a document, but they could be a member of a group that has permission. This means that the Content component requires the user and group information associated with the files.

The connector can extract user and group information from the Salesforce repository.

- In the ACI connector, this functionality is available through the `SynchronizeGroups` action. Based on a schedule, OmniGroupServer sends a request to the connector to run this action and the connector returns the information.
- In NiFi Ingest, there is a processor GetSalesforceGroups. This extracts users and group information. In your dataflow, use a PutOGS processor to send the data to your OmniGroupServer.

OmniGroupServer stores the user and group information so that the Community component can query it. When a user logs on to a front-end application, the application requests the user’s security information and group memberships from Community. Community returns a token containing the information. The front-end application includes this token in all queries the user sends to Content. When a user submits a query, the Content component sends only the documents that the user is permitted to view to the front-end application.

Copyright 2025 Open Text
Version 25.4 | Last updated October 2025

Send documentation feedback

Close

Send documentation feedback

To send feedback using your default email client, open an email window.

Otherwise, send your feedback and the information below to MFI-swpdl.idoldocsfeedback@opentext.com.

We appreciate your feedback!

Product: Knowledge Discovery Salesforce Native Connector 25.4

Topic Title: Mapped Security Architecture