

# Configuring the CRM connector
<a name="configure-crm-connector"></a>

**Note**  
The topics in this section assume you've completed the prerequisites for an AWS Partner Central integration, an AWS Marketplace integration, or both. For more information, refer to [Integration prerequisites](crm-integration-setting-up.md) and [Getting started](crm-integration-getting-started.md) earlier in this guide.

After you install the connector, you configure it to work with the following types of CRM integrations and AWS services:
+ An AWS Partner Central API integration
+ A CRM with Amazon S3 integration, but only if you created the integration before 2024
+ AWS Marketplace

The configurations enable you to use Salesforce with Partner Central and AWS Marketplace. The following topics explain how to configure the CRM connector.

**Topics**
+ [Using guided setup](use-guided-setup.md)
+ [Configuring the connector for a Partner Central API integration](p-c-api-integration.md)
+ [Configuring the connector for AWS Marketplace](aws-marketplace-integration.md)
+ [Personas for CRM connector permission sets](permission-sets.md)

# Using guided setup
<a name="use-guided-setup"></a>

You always use Salesforce to configure the CRM connector, and you start on the **Guided setup** tab. The following steps explain how to start the tab:

**To start the tab**

1. Sign in to Salesforce as a system administrator.

1. From the App launcher, search for and select **AWS Partner CRM connector**.

1. Choose the **AWS Guided Setup** tab.

# Configuring the connector for a Partner Central API integration
<a name="p-c-api-integration"></a>

The following sections explain how to configure the CRM connector for use with the AWS Partner Central APIs.

To create and manage opportunities in Salesforce, configure the CRM connector for use with a Partner Central API integration.

**Note**  
Managing leads requires an earlier CRM with Amazon S3 integration. For more information, refer to [Configuring the connector for a CRM with Amazon S3 integration](s3-config.md) later in this guide.

**Topics**
+ [Entering connection authentication details](#config-p-c-apis)
+ [Entering the system settings](#p-c-api-system-settings)
+ [Testing the connection](#p-c-apis-testing)
+ [Using flow templates](flow-templates.md)

## Entering connection authentication details
<a name="config-p-c-apis"></a>

Partners start the integration process by entering the details needed to connect to the Partner Central sales endpoint. Follow each set of steps in the order listed, and complete each set before proceeding to the next one.

**To enter connection authentication details**

1. In Salesforce, open the **AWS guided setup** tab. For information about opening that tab, refer to [Using guided setup](use-guided-setup.md) earlier in this guide. 

1. Expand **Step 1: AWS connection authentication details** and choose **Start.**

1. On the **Named credentials** page, choose **New earlier**. 

1. In the **New named credential** form, enter the values from the following table.     
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/partner-central/latest/crm/p-c-api-integration.html)

1. Choose **Save**. 

1. Return to the **AWSGuided setup** page. In the **Authentication details** section, choose **Review** and confirm the credentials. 

## Entering the system settings
<a name="p-c-api-system-settings"></a>

The following steps explain how to enter the correct system configuration settings for the integration.

1. In Salesforce, open the **AWS guided setup** tab. For information about opening that tab, refer to [Using guided setup](use-guided-setup.md) earlier in this guide. 

1. Expand **Step 2: System configuration settings** and choose **Start.** 

1. Locate **AWS Partner CRM Connector Settings**, and choose **Manage**. 

1. Choose **New**, then enter the values from the following table.     
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/partner-central/latest/crm/p-c-api-integration.html)

1. Choose **Save**. 

1. Return to the **AWS guided setup** page. In the **Authentication details** section, choose **Review** and confirm the credentials.

## Testing the connection
<a name="p-c-apis-testing"></a>

Before testing the connection, ensure that you have completed all the above steps.

**To test the AWS Partner Central API connection**

1. Expand **Step 4: Test configuration for Partner Central API integration**.

1. Choose **Test**.

If the connection succeeds, you receive a confirmation message.

# Using flow templates
<a name="flow-templates"></a>

Flow templates are pre-built Salesforce flows that integrate Salesforce with AWS Partner Central using the AWS Partner Central API integration method. These templates include data synchronization, field mapping, and error handling configurations.

## Available templates
<a name="available-templates"></a>

**Unified Standard-ACE Opportunity Sync Flow Template**

The Unified Standard-ACE Opportunity Sync flow template maps Salesforce Standard Opportunity fields to ACE Opportunity fields, converts state and country formats, and prevents duplicate entries. It includes default values for required fields.
+ Revenue, close dates, and next steps are synchronized between Salesforce and AWS Partner Central.
+ By default, synchronization is triggered when "Create ACE" is added to the opportunity description. You can modify this trigger mechanism by using a checkbox or button.
+ This template provides a foundation for developing flows that align with your business requirements and field mappings.
+ This template is for use with AWS Partner Central API integration only and is not compatible with other integration methods.

Find this template in Salesforce Flow Builder by searching for "Unified Standard-ACE Opportunity Sync Flow Template".

**Prerequisites**

This template requires an active AWS Partner Central API integration. You must have appropriate permissions in Salesforce and configured fields in both systems. Familiarity with Salesforce Flow and AWS Partner Central API is recommended.

**Accessing the template**

To locate the flow template:

1. In your Salesforce org, choose **Setup**.

1. Search for **Flows**.

1. On the Flows page, search for the "Unified Standard-ACE Opportunity Sync Flow" template.

Create a copy of the template to customize for your requirements. Test modifications in a sandbox environment before deploying to production.

**Key features**

The template includes field mapping between Standard Opportunity and ACE Opportunity objects, state and country format conversion, and duplicate entry prevention. You can configure custom triggers and default value handling for required fields.

**Implementation considerations**
+ Follow best practices when customizing flow templates.
+ Test modifications and consider impact on existing processes.
+ Common customizations include adding custom fields or adjusting trigger mechanisms.
+ Test thoroughly in a sandbox environment before deploying to production.
+ Consider performance implications when dealing with large data volumes or complex business logic.

# Configuring the connector for AWS Marketplace
<a name="aws-marketplace-integration"></a>

**Note**  
The topics in this section assume you've completed the prerequisites for an AWS Partner Central integration, an AWS Marketplace integration, or both. For more information, refer to [Integration prerequisites](crm-integration-setting-up.md) and [Getting started](crm-integration-getting-started.md) earlier in this guide.

You can configure the CRM connector to connect to multiple AWS seller accounts and integrate Salesforce with several AWS Marketplace functions. The following topics explain how to configure the connector for use with AWS Marketplace.

For more information about AWS Marketplace, refer to [What is AWS Marketplace?](https://docs.aws.amazon.com/marketplace/latest/userguide/what-is-marketplace.html) in the *AWS Marketplace User Guide*. For more information about the AWS Marketplace features that the CRM connector supports, refer to [AWS Marketplace features](crm-connector-feature-list.md#feature-list-aws-marketplace).

**Note**  
Use the **AWS guided setup** tab in Salesforce to complete the following tasks. For information about using that tab, refer to [Using guided setup](use-guided-setup.md) earlier in this guide.

**Topics**
+ [Onboarding an AWS Seller account](onboard-seller-account.md)
+ [Entering system configuration settings](mkt-system-config.md)
+ [Entering custom settings](mkt-custom-settings.md)

# Onboarding an AWS Seller account
<a name="onboard-seller-account"></a>

The following steps explain how to onboard AWS Seller accounts to the CRM connector.

1. In Salesforce, on the [Guided setup tab](use-guided-setup.md), expand **Step 1: Set up access to AWS Marketplace Management Portal (AMMP)** and choose **Start.** 

1. On the **Named credentials** page, choose **New earlier**. 

1. In the **New named credential** form, enter the values from the following table. 
**Note**  
For *unique\$1account\$1prefix*, use a descriptor for the AWS account, such as SellerA; SellerB. For example, **AWS\$1SELLER\$1CATALOG\$1sellerA**. Always use the same prefix for the named credentials related to the AWS seller account.    
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/partner-central/latest/crm/onboard-seller-account.html)

1. Choose **Save**.

1. Return to the **AWSGuided setup** page. In the **Authentication details** section, choose **Review** and confirm the credentials.

Repeat the above steps for each type of the listed **Named Credentials** in the following table. Use the values in the table below to replace the corresponding values in **Step 3** above 


|  **Named Credential Label**  |  **Named Credential Name**  |  **API endpoint**  |  **AWS Region**  |  **AWS service**  | 
| --- | --- | --- | --- | --- | 
| AWS SELLER Amazon S3 | AWS\$1SELLER\$1S3\$1unique\$1account\$1prefix  |  [https://s3.amazonaws.com/](https://s3.amazonaws.com/)  | us-east-1  | s3  | 
| AWS SELLER AWS STS | AWS\$1SELLER\$1STS\$1unique\$1account\$1prefix |  [https://sts.us-east-1.amazonaws.com/](https://sts.us-east-1.amazonaws.com/)  | us-east-1  | sts  | 
| AWS SELLER Amazon SQS  | AWS\$1SELLER\$1SQS\$1unique\$1account\$1prefix |  [https://sqs.us-east-1.amazonaws.com/](https://sqs.us-east-1.amazonaws.com/)  | us-east-1  | sqs  | 
| AWS SELLER AGREEMENT  | AWS\$1SELLER\$1AGREEMENT\$1unique\$1account\$1prefix |  [https://agreement-marketplace.us-east-1.amazonaws.com/](https://agreement-marketplace.us-east-1.amazonaws.com/)  | us-east-1  | aws-marketplace  | 

Repeat the above steps for each AWS Seller account you want added to the AWS Marketplace integration.

After onboarding the named credentials, go to the **AWS Accounts** tab in the **AWS Partner CRM connector app** and complete the steps in the next sections.

# Entering system configuration settings
<a name="mkt-system-config"></a>

After you onboard an AWS seller account, you enter several system settings. Follow these steps.

1. In Salesforce, on the [Guided setup tab](use-guided-setup.md), expand **Step 2: Complete system configuration settings** and choose **Review.** 

1. On the **Custom Settings** page, locate the **AWS Marketplace Integration Settings**, and choose **Manage.** 

1. Choose **Edit** to add **Default Organization Level** **values**, and then enter the required values from the following table.     
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/partner-central/latest/crm/mkt-system-config.html)

1. Choose **Save**. 

# Entering custom settings
<a name="mkt-custom-settings"></a>

After you enter the system configuration settings, you enter settings for the Amazon S3 bucket used to upload and store custom EULAs. 

1. In Salesforce, on the [Guided setup tab](use-guided-setup.md), return to the **Custom Settings** page, locate **S3 Bucket Settings**, and choose **Manage**. 

1. Choose **New**.

1. Enter values for the following settings.    
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/partner-central/latest/crm/mkt-custom-settings.html)

1. Choose **Save**. 

1. For each configured AWS Seller account, repeat steps 2-4 to add the Amazon S3 settings.

# Personas for CRM connector permission sets
<a name="permission-sets"></a>

After you install and configure the AWS Partner CRM connector, you assign Salesforce users to one or more personas in a *permission set*, a collection of settings and permissions that provide access to various tools and functions. The following topics list and describe the available personas.

For more information about assigning Salesforce users to permission sets, refer to [Managing Permission Set Assignments](https://help.salesforce.com/s/articleView?id=platform.perm_sets_manage_assignments.htm) in the Salesforce help.

**Topics**
+ [AWS Partner Network permission sets](crm-connector-pemissions-sets.md)
+ [AWS Marketplace permission sets](mkt-permissions-sets.md)
+ [CRM connector tabs and permission sets](permission-set-table.md)

# AWS Partner Network permission sets
<a name="crm-connector-pemissions-sets"></a>

The CRM connector supports the following primary AWS Partner Network personas:

**Topics**
+ [Business administrator (APN Business Administrator)](#business-administrator)
+ [Integration User (APN Integration User)](#integration-user)
+ [Business user (APN Business User)](#business-user)
+ [Granting permissions to view reports](#report-permissions)
+ [Activating flow users](#activate-flow-user)

## Business administrator (APN Business Administrator)
<a name="business-administrator"></a>
+ Assign to a system admin or a business admin to configure the setup and mapping of records. 
+ Gives full access to the Salesforce AWS Partner Network CRM administration app.
+ Can create, view, and edit field mappings.
+ Can view all sync log detail records.
+ Doesn’t allow the user to schedule an integration, only to set up configurations.
+ Doesn’t provide core Salesforce setup access.
+ Some settings in Salesforce require additional access. Specifically, named credentials and custom settings that the AWS Partner must provide to their user. However, partners can pair this permission set with a Salesforce system admin profile and enable all of the necessary permissions to configure the application. For more information about named credentials, refer to [Set up named credentials](set-up-api-credentials.md)

## Integration User (APN Integration User)
<a name="integration-user"></a>
+ Assign to a system user responsible for processing the integration. 
+ To schedule an integration, a Salesforce system admin signs in as this user and invokes the system integration schedule.
+ Allows admins to configure the mappings and invoke integration schedules.
+ The integration may break if this permission isn’t set for the user who runs the integration.
+ In addition to this permission set, the user designated to process the integration should have field level access to all mapped fields. If not, the mappings fail to sync as assigned.
+ The outbound jobs are designed to ignore updates done in the integration user context to prevent a race-around condition, with the same record updated during inbound integration being flagged to be sent for outbound integration.

## Business user (APN Business User)
<a name="business-user"></a>
+ Assign to business users who might want to see the sync log details related to their opportunities. This allows for end-user troubleshooting if data is not syncing correctly.
+ Does not provide visibility to the sync log records and only gives access to the object and fields.
+ We recommend setting sync log records to private, since they contain sensitive opportunity information.
+ If you configure a private model, APN business users can access only the records if the partner Salesforce administrator configures record sharing with users.

## Granting permissions to view reports
<a name="report-permissions"></a>

To allow a user to view reports on the **Home** tab of the AWS Partner CRM connector, an administrator must grant the following permissions:
+ Create and Customize Reports
+ Edit My Reports
+ Mange Reports in Public Folders
+ Run Reports
+ View Reports in Public Folders

For more information, refer to [Grant Users Access to Reports and Dashboards](https://help.salesforce.com/s/articleView?id=sfdo.PMM_Folder_Sharing_Reports_Dash.htm) in the Salesforce help.

## Activating flow users
<a name="activate-flow-user"></a>

Activating users as flow users enables them to run flows and use the **Link private offer** button on an ACE opportunity.

1. Ensure that the system administrator has permission to assign a flow user. For more information, refer to [Add Run Flows Permissions](https://help.salesforce.com/s/articleView?id=sf.wcc_setup_add_run_flows_perms.htm) in the Salesforce help.

1. Choose **Setup**, **Users**.

1. Choose a user.

1. Choose **Flow user**.

# AWS Marketplace permission sets
<a name="mkt-permissions-sets"></a>

The CRM connector supports the following primary AWS Partner personas. Partners enable the personas by giving the Salesforce user the corresponding permission set included in the application.

**Topics**
+ [AWS Marketplace administrator](#aws-marketplace-administrator)
+ [AWS Marketplace user](#aws-marketplace-user)
+ [AWS Channel Partner user](#aws-channel-partner-user)

## AWS Marketplace administrator
<a name="aws-marketplace-administrator"></a>

Assign this persona to a systems or Business Administrator to perform the configuration and manage schedules. This persona provides full access to the AWS Marketplace integration in the Salesforce connector.

This persona can do the following:
+ Read, write, and view records for all objects related to the AWS Marketplace integration.
+ View all AWS Marketplace sync log records.
+ Create schedules related to AWS Marketplace entities.

**Note**  
Certain settings in Salesforce require additional access, specifically named credentials and custom settings that AWS Partners must provide to users. However, if partners pair this permission set with a Salesforce systems administrator profile, all permissions needed to fully configure the application should work.

## AWS Marketplace user
<a name="aws-marketplace-user"></a>

Assign this persona to the user who creates and manages private offers and resale authorization.

The AWS Marketplace user can do the following:
+ Synchronize AWS Marketplace products, offers, and resale authorizations.
+ Modify expiry dates, and cancel and clone offers and resale authorizations.
+ Access the AWS Marketplace dashboard.

## AWS Channel Partner user
<a name="aws-channel-partner-user"></a>

The AWS Channel Partner user can do the following:
+ View available shared resale authorizations created by the Independent Software Vendor (ISV) seller.
+ View and create AWS Channel Partner private offers from shared resale authorizations.

# CRM connector tabs and permission sets
<a name="permission-set-table"></a>

When you use the CRM connector app in Salesforce, a set of tabs appears. The tabs you see vary, depending on your permission settings. The following table lists the tabs provided by the connector app, and the permission sets allowed to use each tab.


| **Connector app tab** | **Permission sets** | 
| --- | --- | 
| **AWS Guided Setup** |  APN Business Administrator APN Integration User APN Business User ? AWS Marketplace Administrator  | 
| **Reports** |  APN Business User AWS Marketplace User (AWS Marketplace ISV) AWS Channel Partner User  | 
| **ACE Mappings** |  APN Business Administrator APN Business User ?  | 
| **Schedules** |  APN Business Administrator APN Integration User AWS Marketplace User (AWS Marketplace ISV)  | 
| **ACE Sync Logs** |  APN Business Administrator APN Integration User APN Business User  | 
| **ACE Leads** |  APN Business Administrator ? -> Available APN Integration User ? APN Business User  | 
| **ACE Opportunities** |  APN Business Administrator ? -> Available APN Integration User ? APN Business User  | 
| **Solution Offerings** |  APN Business Administrator APN Business User  | 
| **AWS Accounts** |  AWS Marketplace Administrator AWS Marketplace User (AWS Marketplace ISV) AWS Channel Partner User  | 
| **Products** |  AWS Marketplace Administrator AWS Marketplace User (AWS Marketplace ISV)  | 
| **Private Offers** |  AWS Marketplace Administrator ? -> Available AWS Marketplace User (AWS Marketplace ISV) AWS Channel Partner User  | 
| **Resale Authorizations** |  AWS Marketplace Administrator ? -> Available AWS Marketplace User (AWS Marketplace ISV) AWS Channel Partner user  | 
| **Shared Resale Authorizations** |  AWS Marketplace Administrator ? -> Available AWS Channel Partner user  | 
| **Marketplace sync logs** |  AWS Marketplace Administrator AWS Marketplace User (AWS Marketplace ISV) AWS Channel Partner User  | 
| **Agreements** |  AWS Marketplace User (AWS Marketplace ISV) AWS Channel Partner User  | 
| **AWS Marketplace Notifications** |  APN Business Administrator APN Business User AWS Marketplace Administrator AWS Marketplace User (AWS Marketplace ISV) AWS Channel Partner user  | 
| **Field Mappings** |  APN Business Administrator ? APN Integration User ?  | 
| **Offer Dimensions** |  AWS Marketplace Administrator ? AWS Marketplace User (AWS Marketplace ISV) AWS Channel Partner User  | 
| **Payment Schedules** |  AWS Marketplace Administrator ? AWS Marketplace User (AWS Marketplace ISV) AWS Channel Partner User  | 
| **Product Dimensions** |  AWS Marketplace Administrator ? AWS Marketplace User (AWS Marketplace ISV)  | 
| **Logs** |  APN Business Administrator APN Business User  | 