/
Connect an Integration User to the Media Backend

Connect an Integration User to the Media Backend

It’s Salesforce best practice to connect to third-party integrations using an Integration User. Connecting via an Integration User limits API access to exactly what’s needed, and it’s not tied to an Admin’s wide-ranging permissions. There are a number of benefits to this:

  • Security isolation: Limits damage if compromised; avoids sharing credentials

  • Auditability: Clear trace of automated actions

  • Operational reliability: Not tied to employee lifecycle

  • Data governance: Clean, consistent record attribution

  • Scalability: Manage API usage separately to a human user

The Salesforce API integration license is free.

We recommend that existing customers who are already connected with an Admin user, change to an Integration user. The extra Vinton license required for the Integration user is free.

 1. Download Media Backend Certificate

  1. Before starting the Integration user setup, we recommend downloading the Media Backend Certificate that you’ll need later on.

  2. Go to Nativevideo Admin > Media Platform > Buffy Connector > Integration User and click Download media backend certificate.

integration1.png

 2. Creating Vinton Integration User Profile

  1. Salesforce Setup → Profiles.

  2. Find the “Minimum Access – API Only Integrations” profile.

  3. Clone it and rename it to “Vinton Minimum Access – API Only Integrations” (it’s best practice to clone the profile and assign it to users, instead of assigning the standard profile that comes out of the box).

  4. If your Organization has configured Record Types on the Task object, make sure you assign the default one to this newly created profile

    integration2.png
    image-20251015-105917.png

     

  5. Go to Setup → Users.

  6. Next, create a New User that would have this profile.

  7. Click New User. Call it “Vinton Integration”.

  8. Add an email address for the user

  9. For the username, e.g. vintonintegration@[yourdomain.com].

  10. User License to Salesforce Integration.

  11. Set Profile to Vinton Minimum Access – API Only Integrations

  12. Save.

Note: Save the integration user’s username; you’ll need it in Step 6 to connect to our Media backend.

 3. Integration user visibility Permission Set

  1. Go to Salesforce Setup -> Permission Sets and click on New.

  2. Set label as “Vinton Integration User Visibility”. Save.

integration3.png

  1. Click View Summary.

integration4.png

  1. In “Object Permissions”, click Edit.

integration5.png

  1. Grant Vinton access to all the required standard and custom objects by checking the relevant boxes, for example:

    • Account: All record types and Read, View All Records, View All Fields

    • Contact: All record types and Read, View All Records, View All Fields

    • Lead: All record types and Read, View All Records, View All Fields

    • Opportunity: All record types and Read, View All Records, View All Fields

    • Case: All record types and Read, View All Records, View All Fields

  2. Save.

integration7.png

  1. In “System Permissions”, click Add.

  2. Check/tick the following options:

    • View Roles and Role Hierarchy

    • View Setup and Configuration

    • Manage Profiles and Permission Sets

    • View All Profiles

    • View All Users

  3. Save.

2025-10-23_11-24-08 (1) copy-20251023-102535.gif

 4. Assign Permission Sets

  1. Now assign Permission Set Licenses for the Vinton Integration User. Go to Setup -> Users → Vinton Integration User.

  2. Go to Permission Set License Assignment. Click Edit Assignments and search for “Salesforce API Integration” and tick Enabled.

    image-20251015-110007.png

  3. Save.

  4. Now on the same Vinton Integration User, scroll to Permission Set Assignments.

  5. Edit Assignments and add the “Nativevideo Integration Permission” and the “Vinton Integration User Visibility” Permission Sets. Then Save.

  6. integration_12.png

    Next assign both Nativevideo and Vinton licenses. (If you have paid for 100 licenses and you need to set up an Integration user, you would need to assign one of those licenses to the Integration User as well. Contact us to assign you an extra license for both Nativevideo and Vinton)

integration8.png

 5. Create a Connected App

  1. Go to Setup → App Manager.

  2. Click New External Client App.

integration9 (1).png

  1. Add App Name: e.g. VintonMediaBackendConnect.

  2. Add Contact email

  3. Distribution State should be Local.

  4. Click Create

integration_10 (1).png

  1. Open the created app and select the settings tab, click Edit.

image-20251106-140245.png

 

  1. Scroll down and expand API (Enable OAuth Settings). Check Enable OAuth.

  2. Callback URL: https://login.salesforce.com

  3. Ensure Selected OAuth Scopes are

    • Manage user data via APIs (api)

    • Perform requests at any time (refresh_token, offline_access)

integration_11 (1).png

  1. Scroll to Flow Enablement.

  2. Check Enable JWT Bearer Flow.

  3. Upload the media backend certificate (that you downloaded at the start).

  4. Save.

integration_12 (1).png

  1. Scroll down to the Security section and check all of:

    1. Require Proof Key for Code Exchange (PKCE) extension for Supported Authorization Flows

    2. Enable Refresh Token Rotation

    3. Limit Idle Refresh Token Time-to-Live (TTL) to 30 Days

    4. Enforce Refresh Token IP Allowlist

Note that Require secret for Web Server Flow and Require secret for Refresh Token Flow should already be checked by default.

image-20260505-113433.png

  1. In the Refresh Token IP allowlist section, and add IP based on the Vinton media backend region that your Org is connected to (you can check your region from the Admin Panel → Nativevideo Configurations → Media Backend → Buffy Configs). The same value goes in both start and end IP Address:

    1. USA (East): 18.218.74.149

    2. Europe (Germany): 18.158.245.237

    3. Europe (Switzerland): 51.96.185.14

    4. Asia (Australia): 54.79.11.101

  2. Click Save.

image-20260616-161727.png

  1. Select the Policies Tab. Click Edit.

2026-05-05_13-17-32.mp4

  1. In the OAuth Policies > Plugin Policies section, select Admin Approved users are pre-authorized on the Permitted Users dropdown

  2. In the Policies > App Policies section of the Connected App, add access for Vinton Minimum Access – API Only Integrations (the custom profile you created).

2026-05-05_13-19-21.mp4
grantappaccess (1).png

 6. Adding Consumer Key and Secret

  1. Go to Settings for the App you created.

  2. Expand OAuth Settings.

  3. Click Consumer key and secret button.

integration_13.png

  1. Verify it’s you.

  2. Copy the consumer key.

  3. Go to Nativevideo Admin → Nativevideo Configurations → Buffy Connector → Integration user.

  4. Add the consumer key and the username of the integration user.

  5. Click Connect. Your integration should now be connected.

integration_16.png

Next: Complete and test Vinton

Completing and testing Vinton setup

Previous: Install Nativevideo & Vinton

Install Nativevideo, followed by Vinton

Back to Installation and Setup

Back to Vinton Home