Skip to content
Request a demoGet a demo
All integrations
Salesforce

Salesforce security: CRM seat audits, Access Reviews, and deactivation.

Connect Salesforce to Elba to inventory active CRM users, catch departed sales reps or RevOps consultants who still hold access, run delegated User Access Reviews, and deactivate revoked seats.

Request a demo See the workflow

Salesforce OAuth API · User inventory, Access Reviews & Deactivation

Capabilities

What this integration covers.

01

Inventory active Salesforce users.

Synchronize Salesforce user profiles and license states without downloading CRM contacts or opportunity records.

02

Stop post-offboarding CRM access.

Immediately surface departed account executives, support agents, and RevOps contractors whose Salesforce logins remain active.

03

Deactivate revoked seats cleanly.

Run SOC 2 / ISO 27001 CRM Access Reviews, deactivate rejected Salesforce users via API, and reclaim unused licenses.

Example workflow

Certify Salesforce CRM seats and deactivate leavers.

How the integration supports a specific security task.

  1. 01

    Sync Salesforce users

    Elba reconciles active Salesforce users against your corporate identity directory.

  2. 02

    Certify with RevOps

    Sales and RevOps leaders review flagged accounts and periodic Access Review campaigns.

  3. Deactivate & log proof

    Elba deactivates eligible revoked Salesforce users while preserving historical CRM ownership records.

Related capability

Explore this part of the platform.

Explore apps & access

Before you connect

Coverage, permissions, and requirements.

Connects via Salesforce OAuth / REST API to inventory user accounts and execute supported user deactivation. Elba does not scan CRM contacts, opportunities, or custom object records.

Explore security & privacy
Does Elba read Salesforce contacts, leads, or opportunity records?

No. Elba accesses Salesforce user-account metadata for seat inventory, User Access Reviews, and supported user deactivation; CRM business records are never downloaded.

Can Elba automatically remove revoked Salesforce users after an Access Review?

Yes. Salesforce is a verified remediation-enabled source in Elba, allowing administrators to deprovision eligible accounts directly from a completed User Access Review or offboarding workflow.

How does Elba handle Salesforce user removal?

Following Salesforce’s security model, Elba deactivates eligible revoked user accounts via the Salesforce API so audit history stays intact while sign-in access is immediately cut off.

Coverage and requirements
  • Salesforce deactivates users rather than deleting historical user records; accounts tied to active workflow automation or hierarchy owners in Salesforce may require reassignment before deactivation.
  • This integration covers user/seat inventory, identity-gap detection, User Access Reviews, and supported account deprovisioning; it does not perform file DLP or OAuth scope revocation inside Salesforce.
  • Account removal applies only to eligible non-owner accounts supported by the provider API or SCIM endpoint.

Other applications

Review more integrations.

All integrations

HubSpot

Inventory HubSpot portal users, flag external agency seats, and automate removal.

Okta

Directory sync, read-only Okta app assignments, and apps used outside Okta.

Microsoft 365

Directory sync, with separate connections for file sharing and Teams.

Discuss your requirements

Evaluate Elba for Salesforce.

Review the available capabilities, required permissions, and setup for your environment with our team.

Request a demo