This article describes how to set up the Salesforce Bulk cloud data source.
The Salesforce Bulk cloud data source is currently in Early Access and is available to select customers only. Contact Tealium Support to get started with Salesforce Bulk.
For a general overview of setting up a cloud data source, see Manage a cloud data source.
How it works
The Salesforce Bulk cloud data source reads data from your Salesforce org using the Salesforce Bulk API 2.0.
Salesforce is a cloud data source that organizes data as objects and fields, rather than SQL databases. When you import data from Salesforce, Tealium processes each record from the selected object as an event.
The Salesforce Bulk data source uses a scheduled batch model:
- Scheduled frequencies: Supports hourly, daily, and weekly scheduling.
- Automatic data reads: Each scheduled run reads all new data since the previous run.
Data types
To ensure data is imported correctly, map Salesforce field types according to the following guidelines:
| Salesforce | Tealium |
|---|---|
| Number, Currency, Percent | Number attributes |
| Text, Email, Phone, URL, Picklist, TextArea, Time | String attributes |
| Checkbox | Boolean attributes |
| Date, Date/Time | Date attributes |
| Multi-Select Picklist | Array of strings (default), Array of numbers, Array of booleans |
For more information about Salesforce field types, see Salesforce: Custom field types.
Create a connection
To connect to Salesforce, create a reusable connection configuration. The connection configuration includes a name and authentication fields that depend on the authentication method you select.
The following OAuth 2.0 authentication methods are available.
Key-Pair
Use the Key-Pair method for server-to-server communication where servers exchange data without an interactive login each time. This flow uses a certificate to sign authentication requests and doesn’t require a user to log in, but it does require prior approval of the connected app. Tealium generates a key pair and uses the private key to sign authentication requests. You upload the corresponding certificate to your Salesforce Connected App. The app sends the signed JWT to the Salesforce token endpoint. Salesforce validates the signature and, assuming the app has prior approval, issues an access token. For more information, see Salesforce: OAuth 2.0 JWT bearer flow.
To create a connection using Key-Pair:
- Select Key-Pair as the authentication method.
- In the Consumer Key field, enter the consumer key of the connected app for which you registered the certificate.
- In the Username field, enter your Salesforce username.
- Click Add Key Pair and select Generate key pair. You can also reuse existing key pairs or upload a private key file.
- Download the generated key pair certificate file.
- Apply the downloaded certificate to the connected app.
- Click Done to save the connection.
Salesforce OAuth
Use the Salesforce OAuth method when your integration server can store secrets securely. The user approves access, and the server exchanges an authorization code for a token. For more information, see Salesforce: OAuth 2.0 web server flow.
To create a connection using Salesforce OAuth:
- Select Salesforce OAuth as the authentication method.
- Select an Account Type to specify which Salesforce endpoint to use for the connection.
- Click Establish Connection.
- In the Salesforce login screen that opens, enter your username and password.
- After a successful login, Salesforce redirects to an approval page. Grant access to the Tealium app.
- Click Done to save the connection.
OAuth
Use the OAuth method for server-to-server integrations where no user login is required. Tealium sends a consumer key and secret to the Salesforce OAuth token endpoint. Salesforce validates the credentials and returns an access token on behalf of an assigned integration user. Tealium uses the token to call the Salesforce API. For more information, see Salesforce: OAuth 2.0 client credentials flow.
To create a connection using OAuth:
- Select OAuth as the authentication method.
- In the Base URL field, enter your Salesforce host URL.
- In the Consumer Key field, enter the consumer key of the external client app.
- In the Consumer Secret field, enter the consumer secret of the external client app.
- Click Done to save the connection.
Query configurations
For a general overview, see Query configurations.
For the Salesforce Bulk data source, note the following:
- Incrementing, Timestamp + Incrementing, and Timestamp query modes: These query modes are not supported. Instead, specify an Offset Column. The offset column must be a Date or Date/Time field (for example,
CreatedDateorLastModifiedDate) with monotonically increasing values. The connector uses this column to track progress and avoid duplicate reads. - Advanced query mode: Write queries using Salesforce Object Query Language (SOQL) instead of SQL.
IP addresses to allow
If your Salesforce org restricts API access by IP address, add the Tealium IP addresses to your Salesforce trusted IP ranges.
This page was last updated: July 29, 2026