LinkSquares <> Service Integration User Authorization Requirements

Overview

LinkSquares uses OAuth authentication when integrating with Salesforce. LinkSquares recommends creating a service account in Salesforce that will be used to connect the two instances. This service account will be used to read/write/create/edit from the objects they have access to in Salesforce.

This service account does not require system admin privileges in Salesforce. The user requires

The following page goes through setting up a service account user in Salesforce for customers who do not want to have a Salesforce Admin use a full admin account to OAuth the LinkSquares application.

Note: When requesting an API Key from LinkSquares, an email can only be used for a single API Key creation. If creating more than one API key, separate emails will need to be provided for a successful integration. 

• Service Account Requirements using a Salesforce Integration License
• In LinkSquares, Create a user with the same email address in the web application
• Authorizing Your LinkSquares Salesforce Integration
• Unblock LinkSquares OAuth Requests in Salesforce

Service Account Requirements using a Salesforce Integration License

1. Create a new Service Integration User temporarily with a Salesforce license and a System Administrator profile.

   • The LinkSquares-Salesforce authorization process requires the account to login to create the 0Auth token. Please reference our Setup and Configuration Guide for these steps.
   • Once the link is established, then continue to step 2.

2. Assign the Service Integration User with the User License ‘Salesforce Integration’ and assign the profile ‘Salesforce API Only System Integrations’.

   • The service account’s email address should be an address that can actually receive an email. This can be an email account specifically setup for linksquaresintegration@company.com or simply the Salesforce admin’s email address with “+linksquaresintegration” appended to it. (for example jdoe+linksquaresintegration@company.com). In this case, an email would be sent to jdoe to set a password for the integration user.

     

   • The Salesforce ‘Login As’ feature does not work for establishing the Linksquares connection once this license and profile is applied. 

3. Assign the ‘Salesforce API Integration’ permission set license to the service account.

* Image above shows the Salesforce Integration user permissions

3. Create the following permission set to the service account user:

• Create a Permission Set ‘LinkSquares API Integration’ with license type ‘Salesforce'

* The image above shows the Permissions Sets Creation Screen

• Under ‘System Permissions’ give access to ‘View All Data’, ‘Customize Application’, ‘Modify Metadata Through Metadata API Functions’, and ‘Download AppExchange Packages’ (Download AppExchange Packages recommended but optional) 

* The image above shows the Permissions Sets LinkSquares API Integration Screen

4. Assign Permission Set  ‘LinkSquares API Integration’ to the new Service Integration User.

* The image above shows the Permissions Sets User Assignment Screen

5. If you’re using Analyze Auto Push, in the Permission Set click on ‘Object Settings’. Allow Read/Create/Edit/Delete/View All/Modify All for the LinkSquares__Agreement__c object and Edit Access for fields on the object.

* The image above shows the Permissions Sets LinkSquares Integration Object and Field Permissions Screen

6. If you’re using the Finalize Salesforce package, add Finalize object access by assigning the appropriate permission set(s).

• If you’re currently on a package less than 2.16:
  • Clone the ‘Finalize Admin’ Permission Set and name it ‘LinkSquares Finalize API Integration’
  • Edit ‘Visualforce Page Access’ and remove the ‘LinkSquares.Token’ page
  • Assign the permission set to the service account

Note: 
Salesforce added a new user permission called “Approve Uninstalled Connected Apps” as part of the Connected App security changes, starting in September 2025. 

This permission controls who can authorize and use uninstalled connected apps (apps that haven’t been explicitly installed in your Salesforce org) If you are unable to allow the application and get the error OAUTH_APPROVAL_ERROR_GENERIC when trying to authorize the LinkSquares application, add this permission set (“Approve Uninstalled Connected Apps”) to the Integration user profile.

• Not all profiles allow editing all permissions — if your profile doesn’t show it, use a Permission Set instead.

Authorizing Your LinkSquares Salesforce Integration

When authorizing the applications, make sure to Login as the Service Integration User or as a Salesforce Administrator - this is the user that will own the connection. We recommend logging out of all Salesforce windows.

1. In an incognito window, log in to LinkSquares and navigate to the Analyze SF authorization link you were provided.
   
   Alternatively, check your email inbox for the Analyze SF authorization email.
   
   Please reach out to support@linksquares.com if you have not received an authorization link or email.
    

* The image above shows the Authorization Screen for the LinkSquares Salesforce Integration
 

2. Choose which LinkSquares applications to connect to Salesforce. 
   Then select whether you’d like to connect to the Production or Sandbox Salesforce org. 
   If you have a current Salesforce connection, it will be listed at the bottom of this page.

* The image above shows the Platform Selection Screen for the LinkSquares Salesforce Integration

3. Login to Salesforce with the account you want to use for the Salesforce <> LinkSquares connection. LinkSquares recommends using a service account user.

4. Allow LinkSquares access to your Salesforce instance.

* The image above shows the Allow Access Screen for the LinkSquares Salesforce Integration

OAuth Access Options (All are required):

• “Access the identity URL service” allows LinkSquares to identify the account used to connect LinkSquares to Salesforce

• “Manage user data via APIs” allows LinkSquares to access and manage permitted data within Salesforce such as creating LinkSquares agreement objects and viewing documents. 

• “Perform requests at any time” allows LinkSquares to access Salesforce for more than the default of 2 hours.

When authorization is successful, you will be redirected to the success page.

* The image above shows the Authorization Success Screen for the LinkSquares Salesforce Integration

Unblock LinkSquares OAuth Requests in Salesforce

If you receive an error when trying to connect LinkSquares to Salesforce, you may need to unblock the application.

* The image above shows the OAuth Requests Usage Screen

1. In Salesforce, navigate to Setup > Apps > Connected Apps > Connected Apps OAuth Usage.

2. Locate LinkSquares. In the Actions column, click Unblock.

3. If the problem persists, contact LinkSquares Support.