Connect Salesforce to LicenseMeter.
API connectorAt Salesforce prices, one forgotten seat pays for a lot of tooling. LicenseMeter queries the user list with license type and last login and cross-checks every license against Entra ID.
Setup, step by step.
Create a Connected App
In Setup > App Manager, create a Connected App with OAuth enabled and Enable Client Credentials Flow checked.
Salesforce: Configure a Connected App for the Client Credentials Flow (official documentation)
Set a read-only run-as user
Under Manage > Edit Policies > Client Credentials Flow, set the execution user. Use a dedicated API-only integration user whose profile can read users and nothing more. LicenseMeter's only query is the user list.
Connect
Paste your My Domain URL (https://<org>.my.salesforce.com), the consumer key and the consumer secret on the Salesforce connector page. Validated before storage, encrypted at rest.
What it finds.
- Salesforce licenses held by accounts that are disabled in Entra ID. At Salesforce prices, usually the single most expensive leak.
- Licenses with no matching directory account at all.
- Licenses nobody has logged into for your inactivity threshold.
What LicenseMeter reads
- The user list: email, name, active flag and license type
- Last login per user
What it never reads
- CRM records: no accounts, contacts, opportunities or reports
Credentials are validated against the vendor before anything is stored, encrypted at rest (AES-256-GCM), used read-only and deleted the moment you disconnect. Data lives in the EU (Postgres, Frankfurt). The security overview covers the full picture.
Ready in a few minutes.
Open the connector page in your workspace, or walk through the live demo first to see the findings this connector produces.