We recommend that you create a separate Salesforce user account dedicated to FormAssembly. This allows you to keep your own credentials private and lets you restrict the permissions to the mimimum needed by FormAssembly.

To create the user and its permission profile please contact your Salesforce administrator or refer to the Salesforce documentation:

• Create or edit a profile
• Set login IP range or set a security token
• Create a new user

Whether you use a dedicated user or your own account, the following options must be enabled in your user’s profile:

1. Section “Administrative Permissions”:
   Check ‘API Enabled’.
2. Section “Standard Object Permissions”:
   Check all the objects that you wish to create using your web form (e.g. ‘Leads’, ‘CampaignMember’, etc…
3. Login IP Ranges (optional, if not set, a security token is needed):
   208.101.24.24 – 208.101.24.27
   75.126.54.108 – 75.126.54.111
   75.126.254.120 – 75.126.254.123

   75.126.252.2

   67.228.216.212 – 67.228.216.215

   67.228.213.170

Note that Enterprise customers will have a different range of IP addresses to white-list in their Salesforce interface.  For more information, Enterprise customers should contact FormAssembly Support.

To stay up to date with the latest on Salesforce security, visit trust.salesforce.com.