---
title: "Step 6. Connect Salesforce Organization"
description: "At the Connect Salesforce Organization step of the wizard, connect to a Salesforce organization that will be automatically added to Veeam Backup for Salesforce and protected by the default backup policy."
canonical: "https://helpcenter.veeam.com/docs/backup_salesforce/userguide/init_config_sf_org.html"
breadcrumb: "User Guide > Deployment > Performing Initial Configuration > Step 6. Connect Salesforce Organization"
dateModified: "2026-10-16"
---

# Step 6. Connect Salesforce Organization

At the **Connect** **Salesforce** **Organization** step of the wizard, connect to a Salesforce organization that will be automatically added to Veeam Backup for Salesforce and protected by the default backup policy. The backup policy is created by Veeam Backup for Salesforce during the initial configuration unless you disabled the default policy creation at [step 3](init_config_postresql.md#database) of the wizard. For more information on backup policies, see [Performing Backup](performing_backup.md).

::: important

For Veeam Backup for Salesforce to be able to connect to your Salesforce organization, the **Lock sessions to the IP address from which they originated** option must be disabled in the organization settings as described in [Salesforce Documentation](https://help.salesforce.com/s/articleView?language=en_US&id=ind.cg_task_admin_configure_session_settings_processing_services.htm&type=5).

:::

To connect to the organization, do the following:

1. Choose whether you want to connect to a Salesforce organization hosted on a production instance, sandbox instance or custom domain. 

   If you select the **Custom** option, you must also provide the organization domain name. If you specify a *lightning.force.com*, *my.salesforce-sites.com* or *my.site.com* domain names, keep in mind that the product will automatically change this name to *my.salesforce.com*.

2. Provide the consumer key and consumer secret of the external client app and click **Connect**. You will be redirected to the Salesforce authentication page.

   To learn how to find the key and secret pair, see [this Veeam KB article](https://www.veeam.com/kb4827).

   ::: note

   After you configure an external client app, it may take up to 10 minutes for Salesforce to finalize the configuration process. In the meantime, the key and secret pair may not be active.

   :::

   [![Performing Initial Configuration](images/init_config_app_keys.png "Performing Initial Configuration")](images/init_config_app_keys.png){.toggle scale=60}

3. On the Salesforce authentication page, enter credentials of an account created in the Salesforce organization that you want to protect, and click **Log in**.

   The specified account must be assigned permissions required for Veeam Backup for Salesforce to be able to perform backup and restore operations. For more information on the required permissions, see [Permissions](permissions.md).

   ::: note

   Veeam Backup for Salesforce does not have access to Salesforce user credentials. To authorize and access Salesforce data, Veeam Backup for Salesforce uses OAuth tokens of the external client app created during the [initial configuration](init_config_eca.md). You can change the app later, but you must consider that after changing the app, you will have to re-authorize the related Salesforce connection added to Veeam Backup for Salesforce as described in section [Editing Connections](editing_connections.md).

   :::

4. Back to the **Veeam Backup for Salesforce** wizard, click **Next** to proceed with the initial configuration.

   [![Connecting to Salesforce](images/init_config_connect_sf.png "Connecting to Salesforce")](images/init_config_connect_sf.png){.toggle scale=60}