Set Up the Account Engagement Sandbox-to-Production Flow
Copy changes and content from your Account Engagement sandbox to a production org with a preconfigured flow in Flow Builder. First, set up authentication between your sandbox org and the production org. Then, test the flow and add the flow component to record pages so that you can easily push changes to production.
Required Editions
| Available in: Account Engagement Advanced and Premium Editions |
| Available for an additional cost in: Account Engagement Plus Edition |
| User Permissions Needed | |
|---|---|
| To manage sandboxes: | Customize Application AND Modify All Data |
| To run the sandbox-to-production flow: | Manage Flows AND Run Flows |
Before you begin, verify that you have an integration user set up in your sandbox org has the Account Engagement Integration User permission set. You can create a dedicated integration user, or assign the permission set to an existing user in your org to be the integration user. See Manage Permission Set Assignments.
Create an External Client App in Your Sandbox Org
To access the interface that authenticates to your production org, first create an external client app in your sandbox org.
- From Salesforce Setup in your sandbox org, use the Quick Find box to find and select OAuth and OpenID Connect Settings.
- Turn off Require Proof Key for Code Exchange (PKCE) Extension for Supported Authorization Flows.
- From Setup in your sandbox org, use the Quick Find box to find and select App Manager.
-
Click New External Client App, and then enter the required
details.
- Enter a name for the integration that identifies the environment you’re connecting to, such as Account Engagement Production. You’ll use this name later.
- For Contact Email, enter the email address for the admin who manages the sandbox-to-production process.
- For the Distribution State, select Local.
-
Under API, select Enable OAuth Settings and enter the Callback URL
for the org you’re authenticating to.
You can find the callback URL in the org’s Setup under Auth Providers > Sandbox Asset Flow Auth > Salesforce Configuration > Callback URL.
-
Select these OAuth scopes:
- Manage user data via APIs
- Manage user data via Web browsers
- Perform requests at any time
- Access unique user identifiers
- Manage Pardot services
- Access the Salesforce API Platform
-
Under Security, make these selections:
- Deselect Require Proof Key for Code Exchange (PKCE) Extension for Supported Authorization Flows.
- Select Require Secret for Web Server Flow.
- Select Require Secret for Refresh Token Flow.
-
Click Create.
It can take up to 15 minutes for the app to be ready for authentication.
-
When the app is ready, copy the consumer key and secret for the next task.
- From the app record, under API (Enable OAuth Settings), click Manage Consumer Details.
- Authenticate if needed, and then copy the consumer key and secret.
Update the Authentication Provider in Your Production Org
Next, use the consumer key and secret that you created in the previous task to update the authentication provider in your production org.
- From Setup in your production org, use the Quick Find box to find and select Auth Providers.
- Find and edit Sandbox Asset Flow Auth.
- In the Consumer Key field, paste the key you copied from the External Client App that you created.
- In the Consumer Secret field, paste the secret you copied from the External Client App that you created.
- Save your work.
Create the Account Engagement API Named Credential
To grant Account Engagement API access to the integration user, create a named credential in your production org.
- From Setup in your production org, use the Quick Find box to find and select Named Credentials.
-
Click the dropdown menu and select New Legacy. Don’t select
New.

-
Configure the named credential.
- Enter a label for the named credential, such as Metadata API Access.
- For the URL, enter the URL for your sandbox org. For example, https://mydomain–sandboxname.sandbox.my.salesforce.com where mydomain is your company domain and sandboxname is the name of your sandbox org.
- For the Identity Type, select Named Principal.
- For the Authentication Protocol, select OAuth 2.0.
- For the Authentication Provider, enter Sandbox Asset Flow Auth.
- For the Scope, enter api refresh_token.
- Select Start Authentication Flow on Save.
- Select Generate Authorization Header.
- Save your work.
- When prompted, log in with the integration user’s credentials.
Create the Account Engagement API Named Credential
To verify that the preconfigured flow works, do a test run from your production org. When you’re done, add the flow component to record pages so that you can easily copy changes to production.
- From Setup in your production org, use the Quick Find box to find and select Flows under Process Automations.
- Find and open Account Engagement Sandbox-Production Bulk Asset Copy Flow.
- From Flow Builder, click Run.
- Follow the steps on the flow canvas. For the named credentials for Account Engagement Access and Metadata Access, select the credentials you created in the previous tasks.
- After you finish testing, add the Flow component to Lightning record pages. See Embed a Screen Flow in a Lightning Page.
When you're done, you can run the flow at any time from Flow Builder, or from any record page that contains the flow component.

