There are two steps to setting up Salesforce so that it can be used with Nickelled Interactive guides.
Step 1: CSP Trusted Sites
Salesforce uses Content Security Policies (CSP) to impose restrictions on content. Nickelled requires the ability to connect to our external APIs in order to load content to be displayed in your Salesforce environment.
Your system administrator should follow the instructions below to whitelist external calls to Nickelled.
1. From Setup, enter CSP in the Quick Find box, then select CSP Trusted Sites.
2. Click ‘New Trusted Site’
3. Fill in the form, entering ‘nickelled_api’ as the Trusted Site Name and https://api.nickelled.com as the Trusted Site URL. Ensure that the Active checkbox is checked, that Context is set to ‘All’ and that all six CSP Directives are set. At the end, your form should look like this:
4. Click save
5. Repeat steps 1 to 4 for a further two trusted sites, with the following information
Trusted Site Name: nickelled_cdn, Trusted Site URL: https://cdn.nickelled.com
Trusted Site Name: nickelled_track, Trusted Site URL: https://track.nickelled.com
At the end, you should have three active CSP Trusted Sites in your Salesforce Setup.
Step 2: CORS
Cross-Origin Resource Sharing (CORS) allows web browsers to request resources from other origins. By default, Salesforce’s pages don’t allow requests from third-party origins. Nickelled requires that Salesforce can request data and images from its servers, so we need to whitelist it in Salesforce Setup.
Your system administrator should follow the instructions below to whitelist browser CORS requests to Nickelled from Salesforce and the Nickelled Chrome Extension.
From Setup, in the Quick Find box, enter CORS, and then select CORS.
Select New
In Origin URL Pattern, enter https://*.nickelled.com
Your form should look like this:
5. Click Save
6. Add another allowed origin by repeating steps 1 to 5, entering the following information: Origin URL pattern: chrome-extension://hdnceiiiecbijdidkkbfeoomfnagfagj
At the end, you should have two allowed origins in your Allowed Origins List.
Congratulations, you’re done with Salesforce setup!