Setting Up Xero Auth Provider with Salesforce Integration

This guide provides a comprehensive step-by-step process for integrating Xero with Salesforce, ensuring a seamless authentication experience. By following the instructions closely, users can avoid common pitfalls and setup issues, resulting in a functional connection between the two platforms. It is particularly useful for those unfamiliar with OAuth protocols, as it clarifies terminology and necessary configurations. Overall, this guide is essential for anyone looking to streamline their financial management through effective software integration.

Timothy Gentet-Kell-O'Brien
45 steps
5 minutes

Salesforce

Xero

Metisphere

Setup Login to Xero

Navigate to [https://login.salesforce.com/lightning/n/xis__Setup_Login_to_Xero](https://xerosetupdemo-dev-ed.develop.lightning.force.com/lightning/n/xis__Setup_Login_to_Xero) and log into your Salesforce instance. If you are already logged in, please use the App Launcher to navigate to the "Xero Setup" App.

Please ensure you read all of the setup information that has been outlined within the Xero Integration Service application setup. It is important that you understand what you are doing at each step. The following steps below will all assume that you have fully read and understand the information that has been given to you.

Click "Setup Login to Xero" if you are not already on this Tab.

If you have not already created a Connected App in Xero, please read the "Pre-Setup Step - Create "App" in Xero", and use the Scribe on the right to set up a new Xero App.

Create an Auth. Provider

Click "Create Auth. Provider"

In the Provider Type, select the "Open ID Connect" option, which should updated the screen to look like the below.

DO NOT change any of the default values that we have entered into Salesforce by default for you, this includes the Name of the "Auth. Provider". If you do the integration may not work.

If you have your Xero Developer account already open on the Connected App "Configuration" page, switch back to that and skip to Step 13 below, otherwise continue with the next set of steps.

Navigate to <https://developer.xero.com>

Click "Log in"

Enter your Email Address and Password.

Click "Log in"

Click on the Connected App that you have already created.

Click "Configuration"

Click "Generate a secret"

Don't close this tab or navigate away from it, otherwise you will have to delete and generate a new secret again.

Click "Copy" on the "Client Id"

Switch back to Salesforce to the new Xero Auth. Provider Tab

You will notice there are interchangeable terms used between Salesforce and Xero. The term "Client" and "Consumer" mean the same thing, so does "key" and "Id". Salesforce uses "Consumer Key" and "Consumer secret", whereas Xero uses "Client Id" and "Client secret".

Click on the "Consumer Key" field

Paste in the Client Id that you copied from Xero.

Switch back to the Xero Connect App Tab

Click "Copy" on the "Client secret 1"

Switch back to Salesforce to the new Xero Auth. Provider Tab

Click on the "Consumer Secret"

Paste in the Client secret that you copied from Xero.

Click on the "Save" button

Once saved, copy the "Callback URL" from the bottom of the page under the "Salesforce Configuration", this will need to be added into Xero.

Switch back to the Xero Connected App tab

Enter the copied Callback URL into the "Redirect URIs" field, if you already have a Redirect URI, then click on "Add another URI" first and enter this into the new text box that appears.

Click "Save"

Switch back to Salesforce, but this time go back ot the "Setup Login to Xero" tab

You can now close the Auth. Provider tab

Click on the Refresh Icon at the top right, to reload the config of the page.

We will be hitting this refresh button, it should update the page with the latest information from the Salesforce backend and tends to be a lot faster than reloading your entire web page.

To check that "Step 1 - Create Auth. Profiver" is complete, you should now see a Tick inside a box against the header.

If you do not see the tick mentioned above, please confirm that you saved the Auth. Provider properly, if you did not you will need to start again from Step 4. If you have attempted this twice and are still having issues, please reach out to the Metisphere team for support. They can be emailed at support@metisphere.co.uk

Update the Xero Named Credential

Copy the Scope content so you have it ready

Click "Link Auth. Provider"

Click on the Authentication Protocol.

Select the "OAuth 2.0" option.

A new set of fields should now appear. To link the "Auth. Provider" you just created, click on the spyglass icon next to the "Authentication Provider" field

Please note, if you are unable to find the Xero "Auth. Provider" below, you have either not completed or set it up correctly. Please go back to Step 4 and start again to ensure you have completed the setup properly.

Click on "Xero" if it is already visible, if not search for it then select it

Click the "Scope" field.

Paste in the "scope" text you copied from the previous tab. Which should look something like this: offline_access openid profile email accounting.transactions accounting.journals.read accounting.settings accounting.contacts accounting.attachments

Click "Save"

You will now be redirected out to Xero to grant Salesforce access to Xero, once complete, you will then be redirected back to Salesforce to also confirm that Salesforce has permissions to integrate with Xero.

Confirm the details you see on screen are the correct Xero instance, then click "Allow access"

Click "Confirm"

To confirm that Salesforce has fully authenticated to Xero, you can check the "Authentication Status" on the Named Credential Page

Navigate back to the "Setup Login to Xero" Tab

You can now close the Named Credential and Xero Developer Tabs.

Click on the Refresh Icon at the top right, to reload the config of the page.

You should now see Ticks against both Steps 1 and 2.

Setting Up Xero Auth Provider with Salesforce Integration

Timothy Gentet-Kell-O'Brien
45 steps
5 minutes

Salesforce

Xero

Metisphere

Setup Login to Xero

Click "Setup Login to Xero" if you are not already on this Tab.

If you have not already created a Connected App in Xero, please read the "Pre-Setup Step - Create "App" in Xero", and use the Scribe on the right to set up a new Xero App.

Create an Auth. Provider

Click "Create Auth. Provider"

In the Provider Type, select the "Open ID Connect" option, which should updated the screen to look like the below.

DO NOT change any of the default values that we have entered into Salesforce by default for you, this includes the Name of the "Auth. Provider". If you do the integration may not work.

If you have your Xero Developer account already open on the Connected App "Configuration" page, switch back to that and skip to Step 13 below, otherwise continue with the next set of steps.

Navigate to <https://developer.xero.com>

Click "Log in"

Enter your Email Address and Password.

Click "Log in"

Click on the Connected App that you have already created.

Click "Configuration"

Click "Generate a secret"

Don't close this tab or navigate away from it, otherwise you will have to delete and generate a new secret again.

Click "Copy" on the "Client Id"

Switch back to Salesforce to the new Xero Auth. Provider Tab

Click on the "Consumer Key" field

Paste in the Client Id that you copied from Xero.

Switch back to the Xero Connect App Tab

Click "Copy" on the "Client secret 1"

Switch back to Salesforce to the new Xero Auth. Provider Tab

Click on the "Consumer Secret"

Paste in the Client secret that you copied from Xero.

Click on the "Save" button

Once saved, copy the "Callback URL" from the bottom of the page under the "Salesforce Configuration", this will need to be added into Xero.

Switch back to the Xero Connected App tab

Enter the copied Callback URL into the "Redirect URIs" field, if you already have a Redirect URI, then click on "Add another URI" first and enter this into the new text box that appears.

Click "Save"

Switch back to Salesforce, but this time go back ot the "Setup Login to Xero" tab

You can now close the Auth. Provider tab

Click on the Refresh Icon at the top right, to reload the config of the page.

We will be hitting this refresh button, it should update the page with the latest information from the Salesforce backend and tends to be a lot faster than reloading your entire web page.

To check that "Step 1 - Create Auth. Profiver" is complete, you should now see a Tick inside a box against the header.

Update the Xero Named Credential

Copy the Scope content so you have it ready

Click "Link Auth. Provider"

Click on the Authentication Protocol.

Select the "OAuth 2.0" option.

A new set of fields should now appear. To link the "Auth. Provider" you just created, click on the spyglass icon next to the "Authentication Provider" field

Click on "Xero" if it is already visible, if not search for it then select it

Click the "Scope" field.

Click "Save"

Confirm the details you see on screen are the correct Xero instance, then click "Allow access"

Click "Confirm"

To confirm that Salesforce has fully authenticated to Xero, you can check the "Authentication Status" on the Named Credential Page

Navigate back to the "Setup Login to Xero" Tab

You can now close the Named Credential and Xero Developer Tabs.

Click on the Refresh Icon at the top right, to reload the config of the page.

You should now see Ticks against both Steps 1 and 2.