Other authentication methods for Microsoft Purview + Salesforce

Question

As per the Connect to and manage Salesforce in Microsoft Purview documentation, Purview relies on OAuth Username and Password authentication (link), which per Salesforce’s recommendation raises a few security concerns (Salesforce note).

Does anyone know if other authentication methods are supported, e.g., OAuth 2.0 Client Credentials, JWT, or SAML?

Thanks!

Answer 1

Hi Alvaro Costa,

Thanks for your question on the Microsoft Q&A portal!

You're absolutely right to raise this concern Microsoft Purview’s Salesforce connector currently uses the OAuth Username-Password flow for authentication, which Salesforce itself discourages due to security risks and has even blocked by default in orgs created from June 10, 2023 onward.

As of now, the official Microsoft documentation does not list support for more secure alternatives like OAuth 2.0 Client Credentials or JWT Bearer flow for the Purview Salesforce connector, even though those methods are recommended by Salesforce and supported in other integration tools.

To help me give you the most accurate and up-to-date guidance, could you confirm:

• Are you using a newer Salesforce org (created after June 10, 2023)?
• Have you explored using Azure Data Factory as an intermediary, since it supports broader Salesforce auth options and integrates with Purview?

I’ll double-check with internal resources if there’s any upcoming support for alternative auth methods in Purview, but today, the connector appears limited to the username-password OAuth flow.

Thanks

Pratyush