Salesforce integration
Sync users, roles, and groups from Salesforce to build a complete organizational identity map for access governance and entitlement tracking.
What it connects
- Salesforce users, role hierarchies, and permission profiles that define organizational structure and user authority.
- Public groups and group memberships to understand team assignments and access relationships.
- User metadata including manager relationships, department affiliations, and system access timestamps.
- Complete role hierarchy with parent-child relationships to model reporting structures and escalation paths.
What it automates
- Deactivate users and revoke access when they leave, protecting sensitive accounts from orphaned permissions.
- Assign and remove permission sets to enforce least-privilege access and compliance requirements.
- Add or remove users from groups to dynamically provision and deprovision access as roles change.
- Update user details and reset passwords to maintain accurate identity records and respond to security incidents.
In practice
- STLabs syncs your Salesforce user hierarchy and groups, then automatically revokes access when offboarding workflows trigger, preventing former employees from retaining system access.
- When a security incident affects a specific user, STLabs updates their status, resets credentials, and removes them from sensitive groups in a coordinated workflow without manual intervention.
- Identity governance audits are streamlined by correlating Salesforce roles and permissions with actual access levels, automatically flagging orphaned accounts and excessive privilege assignments.
- Team reorganizations are enforced in real time by mirroring Salesforce group changes to access systems, ensuring new team assignments grant the right permissions automatically.