Application Management
Application Management
Day-to-day management of DuoKey Salesforce BYOK applications
The Salesforce Shield integration is in preview and is not yet enabled on standard DuoKey Cockpit tenants. This guide describes how it works and how it is set up. Contact DuoKey to discuss access for your project.
Overview
Once you've created a Salesforce BYOK application, you can:
View Details
Review application configuration
Edit Settings
Modify existing applications
Monitor Status
Check application health
View History
Track changes and audit logs
Viewing Applications
Access the Apps Section
- Login to DuoKey platform
- Navigate to Apps from the main menu
- All your Salesforce BYOK applications will be listed
Application List Information
| Column | Description |
|---|---|
| App Name | The name you assigned during creation |
| Type | Salesforce BYOK |
| Status | Active, Inactive, or Error state |
| Created | Date and time of creation |
| Actions | Available operations (View, Edit, Delete) |
View Application Details
Access View Mode
- From the Apps list, locate your Salesforce BYOK application
- Click the ACTION button (⋮)
- Select VIEW from the dropdown menu
Navigate Configuration Pages
The view mode allows you to review all configuration pages:
- Page 1: Application Details (name, domain)
- Page 2: REST API Credentials (masked for security)
- Page 3: Access Control Settings
- Page 4: Encryption Key Details
- Page 5: Certificate Configuration
- Page 6: Cache-Only Key Service Status
Sensitive credentials are masked in view mode for security purposes.
Edit Applications
Editable Fields
| Page | Editable Fields |
|---|---|
| Application Details | BYOK app name, Salesforce domain alias |
| REST API Credentials | Consumer Key/Secret, Username, Password, Security Token |
| Access Control | Assigned roles |
| Encryption Key | Select different encryption key |
| Certificate | Select different certificate |
When updating REST API credentials, ensure the new values are correct. Invalid credentials will break the integration.
Changing the encryption key requires careful planning. Understand the impact on encrypted data in Salesforce.
Common Management Tasks
Updating Credentials After Password Change
Reset Security Token in Salesforce
- Login to Salesforce
- Navigate to Settings → Reset My Security Token
- Check your email for the new token
Update Application in DuoKey
- Edit the Salesforce BYOK application
- Navigate to REST API Credentials page
- Update password and security token
- Submit the changes
Rotating Encryption Keys
- Create New Key in DuoKey vault
- Edit Application: Select new encryption key on Page 4
- Update Salesforce: Configure to use the new key
- Verify integration with the new key
Certificate Renewal
- Create New Certificate in Salesforce (Certificate and Key Management)
- Update Application: Edit and select the new certificate
- Submit the changes
Monitoring Application Status
Health Indicators
| Status | Color | Meaning |
|---|---|---|
| Active | Green | Normal operation |
| Warning | Yellow | Potential issues |
| Error | Red | Requires attention |
Common Status Issues
Deleting Applications
Deleting a Salesforce BYOK application removes the DuoKey integration but does not automatically remove the key from Salesforce.
- From Apps list, click ACTION (⋮)
- Select DELETE
- Review the deletion warning
- Confirm deletion
Post-Deletion Steps in Salesforce
- Login to Salesforce
- Navigate to Setup → Security → Certificate and Key Management
- Remove or deactivate the BYOK tenant entry
- Update field encryption settings if needed
Best Practices
Regular Maintenance
- Monthly: Review status and connectivity
- Quarterly: Audit access control
- Annually: Rotate encryption keys
Security
- Principle of least privilege
- Regular access audits
- Credential rotation
- Activity monitoring
Troubleshooting Checklist
Prerequisites
- Salesforce credentials are current and valid
- Consumer Key and Secret match Connected App
- Security Token has not been reset
- Certificate is valid and not expired
- Network connectivity to Salesforce is available
- DuoKey encryption key is accessible and active