---
title: Connect for Salesforce
slug: cms-11/dev-docs/connect-for-salesforce
docTags: 
createdAt: 2026-07-22T19:45:17.666Z
---

## Prerequisites

- An Optimizely Content Management System (CMS) installation with Optimizely Forms and the required Marketing Automation connector components. See [Optimizely Connect for Marketing Automation](docId\:V1RAjPIyOupABDcYTiJqi).

## Install

Install the **Connect for Salesforce MA connector** through the NuGet package [EPiServer.MarketingAutomationIntegration.Salesforce](http://nuget.episerver.com/en/OtherPages/Package/?packageId=EPiServer.MarketingAutomationIntegration.Salesforce). See [Add-ons platform compatibility](docId\:bXYbY3IauDz9fts3sKR_c) for supported Optimizely versions.

## Configure

To configure your Optimizely website to use Salesforce:

- You need an email address, password, and token associated with your Salesforce account.
- You need to configure the connection of form fields to Salesforce to send data from the specified fields to Salesforce.
- In your SalesForce user account, you need to have *Marketing User* permissions.

These configurations are described in [Salesforce connector](docId\:lQK6UME73wMI1ceIGfm15) in the Optimizely User Guide.

## Encrypt Credentials

Credentials are encrypted and saved based on one of the following options:

- `MAICryptoKey` (AES encryption with a SHA256-computer hash based on the value of the key)
- `machineKey` of the server in `web.config`.

:::hint{type="info"}
**Note**
For DXP instances, use `MAICryptoKey`.
:::

If you choose to use `machineKey` configuration, you should specify a `machineKey` in the `web.config` of your site so that the same machine key is used on the new server when you deploy it to a different server.

:::hint{type="info"}
**Note**
If you neglect to specify a `machineKey` in the `web.config`, the credentials are removed when the site on the new server is accessed for the first time, in which case you need to save credentials again through the configuration screen.
:::

If the credentials are already encrypted using `machineKey` in an existing site, and you add the `MAICryptoKey` setting, then the credentials are deleted, and you must re-enter them.

Similarly, if the encryption uses `MAICryptoKey` first and then you decide to use `machineKey` encryption (by deleting the `MAICryptoKey` setting), then the credentials are deleted and must be re-entered.

**Related blog post:** [Creating multiple instances of the same connector](https://world.optimizely.com/blogs/jason-masterson/dates/2018/7/episerver-marketing-connectors---multiple-instances/) by Jason Masterson