Prerequisites
The OAuth, OAuthClient, OAuthPassword, and AzureAD authentication methods require a custom OAuth application. The default OAuthPKCE method uses CData’s embedded OAuth application, so you can skip this section if you are using it.
To create a custom OAuth application in UM SaaS Cloud, follow these steps:
Log in to your Salesforce org (the org where UM SaaS Cloud is installed) and navigate to Setup. In the Quick Find box, search for Apps, then click New Connected App.
Enter a Connected App Name (the display name shown on the authentication dialog) and a Contact Email.
Select the OAuth scopes that your application should request from the user, then Save the application.
Open the connected app’s settings to retrieve the Consumer Key (your OAuth Client Id) and Consumer Secret (your OAuth Client Secret). You enter these values in Connect AI when configuring the connection.
Setup Guide
Follow these steps to connect UM SaaS Cloud to your Connect AI account:
On the Basic Settings tab of the UM SaaS Cloud connection, enter a connection name or keep the default name.
Set the Use Sandbox field to True (if you are connecting to a sandbox account). Otherwise, leave it as False.
Select the Authentication method, then proceed to the relevant section and follow those instructions.
Authentication Methods
OAuthPKCE
Basic
OAuth
OAuthClient
OAuthPassword
OAuthJWT
OneLogin
PingFederate
Okta
ADFS
AzureAD
Click Sign in to connect securely through OAuth. This action opens the UM SaaS Cloud sign-in page in a new tab.
Log in to your UM SaaS Cloud account and provide the requested permissions (if applicable).
At the top of the Connect AI Add Connection page, click Save & Test.
- If the connection test succeeds, a Connection successfully saved message appears, indicating that your connection has been created. The Status on the Edit Connection page also changes to Authenticated. View the data model of your successful connection in the right pane of the Edit Connection page, in the Data Model tab.
- If the connection test fails, ensure that you entered your login information correctly with no stray spaces or other characters. Connect AI displays error messages under the required fields with missing data. Some data sources require that you sign in directly to the source website. If you did not, an error message appears under the Sign in button. Correct the errors and try again.
- Unsuccessful connections are saved as drafts and have a Status of Not Authenticated. You can return to the connection and authenticate it later.
Enter the UM SaaS Cloud username for authentication.
Enter a Security Token. This step is mandatory unless your IP has been added to ‘Trusted IP Addresses’ in Salesforce already.
At the top of the Connect AI Add Connection page, click Save & Test.
- If the connection test succeeds, a Connection successfully saved message appears, indicating that your connection has been created. The Status on the Edit Connection page also changes to Authenticated. View the data model of your successful connection in the right pane of the Edit Connection page, in the Data Model tab.
- If the connection test fails, ensure that you entered your login information correctly with no stray spaces or other characters. Connect AI displays error messages under the required fields with missing data. Some data sources require that you sign in directly to the source website. If you did not, an error message appears under the Sign in button. Correct the errors and try again.
- Unsuccessful connections are saved as drafts and have a Status of Not Authenticated. You can return to the connection and authenticate it later.
Click Sign in to connect securely through OAuth. This action opens the UM SaaS Cloud sign-in page in a new tab.
Log in to your UM SaaS Cloud account and provide the requested permissions (if applicable).
At the top of the Connect AI Add Connection page, click Save & Test.
- If the connection test succeeds, a Connection successfully saved message appears, indicating that your connection has been created. The Status on the Edit Connection page also changes to Authenticated. View the data model of your successful connection in the right pane of the Edit Connection page, in the Data Model tab.
- If the connection test fails, ensure that you entered your login information correctly with no stray spaces or other characters. Connect AI displays error messages under the required fields with missing data. Some data sources require that you sign in directly to the source website. If you did not, an error message appears under the Sign in button. Correct the errors and try again.
- Unsuccessful connections are saved as drafts and have a Status of Not Authenticated. You can return to the connection and authenticate it later.
Enter the OAuth Client Id (also known as the consumer key) assigned to your custom OAuth application.
Enter the OAuth Client Secret assigned to your custom OAuth application.
At the top of the Connect AI Add Connection page, click Save & Test.
- If the connection test succeeds, a Connection successfully saved message appears, indicating that your connection has been created. The Status on the Edit Connection page also changes to Authenticated. View the data model of your successful connection in the right pane of the Edit Connection page, in the Data Model tab.
- If the connection test fails, ensure that you entered your login information correctly with no stray spaces or other characters. Connect AI displays error messages under the required fields with missing data. Some data sources require that you sign in directly to the source website. If you did not, an error message appears under the Sign in button. Correct the errors and try again.
- Unsuccessful connections are saved as drafts and have a Status of Not Authenticated. You can return to the connection and authenticate it later.
Enter the UM SaaS Cloud username for authentication.
Enter a Security Token. This step is mandatory unless your IP has been added to ‘Trusted IP Addresses’ in Salesforce already.
At the top of the Connect AI Add Connection page, click Save & Test.
- If the connection test succeeds, a Connection successfully saved message appears, indicating that your connection has been created. The Status on the Edit Connection page also changes to Authenticated. View the data model of your successful connection in the right pane of the Edit Connection page, in the Data Model tab.
- If the connection test fails, ensure that you entered your login information correctly with no stray spaces or other characters. Connect AI displays error messages under the required fields with missing data. Some data sources require that you sign in directly to the source website. If you did not, an error message appears under the Sign in button. Correct the errors and try again.
- Unsuccessful connections are saved as drafts and have a Status of Not Authenticated. You can return to the connection and authenticate it later.
Enter your OAuth JWT Cert. This is multi-line and in PEM format.
Select the OAuth JWT Cert Type, which is the type of key store containing the JWT Certificate.
Enter the OAuth JWT Issuer. This must include the client_id or connected app for which the certificate is registered.
(Optional) Enter an OAuth JWT Cert Password. If the certificate store does not require a password, leave this field blank.
(Optional) Enter an OAuth JWT Cert Subject, which identifies the subject of the OAuth JWT certificate used to locate a matching certificate in the store. The wildcard ’*’ selects the first certificate.
(Optional) OAuth JWT Subject contains the user subject for which the application is requesting delegated access. It is only required if you are implementing for an Experience Cloud site.
At the top of the Connect AI Add Connection page, click Save & Test.
- If the connection test succeeds, a Connection successfully saved message appears, indicating that your connection has been created. The Status on the Edit Connection page also changes to Authenticated. View the data model of your successful connection in the right pane of the Edit Connection page, in the Data Model tab.
- If the connection test fails, ensure that you entered your login information correctly with no stray spaces or other characters. Connect AI displays error messages under the required fields with missing data. Some data sources require that you sign in directly to the source website. If you did not, an error message appears under the Sign in button. Correct the errors and try again.
- Unsuccessful connections are saved as drafts and have a Status of Not Authenticated. You can return to the connection and authenticate it later.
Enter the OneLogin User Id.
Enter the Password for that account.
Enter the SSO Properties, with the format ‘ssoproperty1=value1;ssoproperty2=value2;ssoproperty3=value3;’. Make sure to separate all property-value pairs with semicolons.
Enter the SSO Exchange URL. You can find this in the UM SaaS Cloud account settings by navigating to Administration Setup > Security Controls > SAML Single Sign-On Settings and locating the OAuth 2.0 Token endpoint under your organization.
At the top of the Connect AI Add Connection page, click Save & Test.
- If the connection test succeeds, a Connection successfully saved message appears, indicating that your connection has been created. The Status on the Edit Connection page also changes to Authenticated. View the data model of your successful connection in the right pane of the Edit Connection page, in the Data Model tab.
- If the connection test fails, ensure that you entered your login information correctly with no stray spaces or other characters. Connect AI displays error messages under the required fields with missing data. Some data sources require that you sign in directly to the source website. If you did not, an error message appears under the Sign in button. Correct the errors and try again.
- Unsuccessful connections are saved as drafts and have a Status of Not Authenticated. You can return to the connection and authenticate it later.
Enter the PingFederate User Id.
Enter the Password for that account.
Enter the SSO Login URL, the identity provider’s login URL.
Enter the SSO Properties, with the format ‘ssoproperty1=value1;ssoproperty2=value2;ssoproperty3=value3;’. Make sure to separate all property-value pairs with semicolons.
Enter the SSO Exchange URL. You can find this in the UM SaaS Cloud account settings by navigating to Administration Setup > Security Controls > SAML Single Sign-On Settings and locating the OAuth 2.0 Token endpoint under your organization.
At the top of the Connect AI Add Connection page, click Save & Test.
- If the connection test succeeds, a Connection successfully saved message appears, indicating that your connection has been created. The Status on the Edit Connection page also changes to Authenticated. View the data model of your successful connection in the right pane of the Edit Connection page, in the Data Model tab.
- If the connection test fails, ensure that you entered your login information correctly with no stray spaces or other characters. Connect AI displays error messages under the required fields with missing data. Some data sources require that you sign in directly to the source website. If you did not, an error message appears under the Sign in button. Correct the errors and try again.
- Unsuccessful connections are saved as drafts and have a Status of Not Authenticated. You can return to the connection and authenticate it later.
Enter the Password for that account.
Enter the SSO Login URL, the identity provider’s login URL.
Enter the SSO Properties, with the format ‘ssoproperty1=value1;ssoproperty2=value2;ssoproperty3=value3;’. Make sure to separate all property-value pairs with semicolons.
Enter the SSO Exchange URL. You can find this in the UM SaaS Cloud account settings by navigating to Administration Setup > Security Controls > SAML Single Sign-On Settings and locating the OAuth 2.0 Token endpoint under your organization.
At the top of the Connect AI Add Connection page, click Save & Test.
- If the connection test succeeds, a Connection successfully saved message appears, indicating that your connection has been created. The Status on the Edit Connection page also changes to Authenticated. View the data model of your successful connection in the right pane of the Edit Connection page, in the Data Model tab.
- If the connection test fails, ensure that you entered your login information correctly with no stray spaces or other characters. Connect AI displays error messages under the required fields with missing data. Some data sources require that you sign in directly to the source website. If you did not, an error message appears under the Sign in button. Correct the errors and try again.
- Unsuccessful connections are saved as drafts and have a Status of Not Authenticated. You can return to the connection and authenticate it later.
Enter the Password for that account.
Enter the SSO Login URL, the identity provider’s login URL.
Enter the SSO Properties, with the format ‘ssoproperty1=value1;ssoproperty2=value2;ssoproperty3=value3;’. Make sure to separate all property-value pairs with semicolons.
Enter the SSO Exchange URL. You can find this in the UM SaaS Cloud account settings by navigating to Administration Setup > Security Controls > SAML Single Sign-On Settings and locating the OAuth 2.0 Token endpoint under your organization.
At the top of the Connect AI Add Connection page, click Save & Test.
- If the connection test succeeds, a Connection successfully saved message appears, indicating that your connection has been created. The Status on the Edit Connection page also changes to Authenticated. View the data model of your successful connection in the right pane of the Edit Connection page, in the Data Model tab.
- If the connection test fails, ensure that you entered your login information correctly with no stray spaces or other characters. Connect AI displays error messages under the required fields with missing data. Some data sources require that you sign in directly to the source website. If you did not, an error message appears under the Sign in button. Correct the errors and try again.
- Unsuccessful connections are saved as drafts and have a Status of Not Authenticated. You can return to the connection and authenticate it later.
Enter the SSO Properties, with the format ‘ssoproperty1=value1;ssoproperty2=value2;ssoproperty3=value3;’. Make sure to separate all property-value pairs with semicolons.
Enter the SSO Exchange URL. You can find this in the UM SaaS Cloud account settings by navigating to Administration Setup > Security Controls > SAML Single Sign-On Settings and locating the OAuth 2.0 Token endpoint under your organization.
Enter the OAuth Client Id assigned when you registered your custom OAuth application.
Enter the OAuth Client Secret assigned to your custom OAuth application.
Click Sign in to connect securely through OAuth. This action opens the UM SaaS Cloud sign-in page in a new tab.
Log in to your UM SaaS Cloud account and provide the requested permissions (if applicable).
At the top of the Connect AI Add Connection page, click Save & Test.
- If the connection test succeeds, a Connection successfully saved message appears, indicating that your connection has been created. The Status on the Edit Connection page also changes to Authenticated. View the data model of your successful connection in the right pane of the Edit Connection page, in the Data Model tab.
- If the connection test fails, ensure that you entered your login information correctly with no stray spaces or other characters. Connect AI displays error messages under the required fields with missing data. Some data sources require that you sign in directly to the source website. If you did not, an error message appears under the Sign in button. Correct the errors and try again.
- Unsuccessful connections are saved as drafts and have a Status of Not Authenticated. You can return to the connection and authenticate it later.
Last modified on September 22, 2026
