This step-by-step guide explains how to configure Salesforce to allow BuiltWith to sync results using Salesforce Lightning Experience.
You must be a Salesforce System Administrator, and the Salesforce user authorizing BuiltWith must have API access and permission to update the records and fields you want to sync.
Already using BuiltWith Salesforce Sync? If your sync is working, no action is required. You do not need to change your Salesforce settings or reconnect. Existing connections continue using their current configuration. Running a normal sync does not change your connection settings.
If you want to enable the additional security settings below on an existing connection, first authenticate again from BuiltWith's Salesforce Configuration page using the updated connection flow. After authorization succeeds, enable the settings in Salesforce. Your BuiltWith mappings and sync settings are preserved. Salesforce may ask you to authorize again after a policy change.
1. Configure your Salesforce app In Salesforce Setup, open the OAuth settings for the app you will use with BuiltWith. Depending on your Salesforce organization, this may be a Connected App or an External Client App, and the available labels may differ. If Salesforce does not offer creation of a new Connected App, use an External Client App with the equivalent OAuth settings.
Connected App Name / External Client App Name: BuiltWith Hook
API Name: BuiltWith_Hook
Contact Email: support@builtwith.com
Logo Image URL: https://builtwith.com/img/salesforce/200x125-bw.webp
Icon URL: https://builtwith.com/img/salesforce/32x32-bw.webp
Info URL: https://kb.builtwith.com/category/salesforce
Description: BuiltWith Integration Hook
Enter these details where the corresponding fields are available.
2. Enable OAuth Tick
Enable OAuth Settings or the equivalent OAuth option.
Callback URL: https://builtwith.com/cb.asmx
Enter the callback URL exactly as shown.
Add the following OAuth scopes:
Access the identity URL service (id, profile, email, address, phone) Full access (full) Perform requests on your behalf at any time (refresh_token, offline_access) 3. Set security options for a new connection Enable the following options where available:
Require Proof Key for Code Exchange (PKCE) Extension for Supported Authorization Flows Require Secret for Web Server Flow Require Secret for Refresh Token Flow Enable Refresh Token Rotation BuiltWith supports PKCE using S256 and saves replacement refresh tokens when Salesforce issues them. You no longer need to turn off PKCE to create a new BuiltWith connection. Connections also work when PKCE or refresh token rotation is not required by your Salesforce app.
4. Connect BuiltWith Save your Salesforce app settings and obtain its Consumer Key and Consumer Secret. Keep the secret private.
Open the
Salesforce Configuration page in BuiltWith. Enter the Consumer Key, Consumer Secret and Salesforce login hostname, then select
Authenticate and complete authorization in Salesforce.
Return to BuiltWith to validate your Salesforce fields and finish configuring the sync. If you are reconnecting, your existing mappings and sync settings are retained.
Optional security policies Refresh token IP allowlist To use
Enforce Refresh Token IP Allowlist, add all four BuiltWith outgoing IPv4 addresses below before enabling the setting:
15.235.50.228
51.161.84.56
15.235.53.29
15.235.50.223
If Salesforce asks for a start and end address, enter the same IP address in both fields for each entry. Both authorization and token refresh must originate from an allowed address. After enabling the setting, validate your BuiltWith connection and confirm a scheduled sync succeeds. Contact support@builtwith.com to arrange IP-change notifications before relying on the allowlist.
Refresh token expiry You can apply your organization's refresh token expiry policy, including a 90-day policy where Salesforce allows it. Salesforce may also apply a shorter inactivity limit. When a refresh token expires or access is revoked, syncing cannot continue until you authenticate again from BuiltWith's Salesforce Configuration page. Reconnecting preserves your BuiltWith mappings and sync settings.
DPoP BuiltWith Salesforce Sync does not currently support Demonstrating Proof-of-Possession (DPoP). Do not enable a requirement for DPoP-bound tokens for this integration.
Salesforce documentation OAuth settings for Connected Apps OAuth settings for External Client Apps Refresh token flow and rotation Refresh token IP allowlists Refresh token inactivity limits