Salesforce B2C Commerce

This documentation for the Salesforce B2C Commerce integration describes the technical capabilities of this integration, including authorization, scopes/permissions, and utilized endpoints. For more information on how to integrate Salesforce B2C Commerce, visit our connection instructions.

Version

This integration utilizes the Salesforce B2C Commerce B2C Commerce API v1.0.

Base URL

The base URL used for all Salesforce B2C Commerce API endpoints contains the Shortcode:

https://shortcode.api.commercecloud.salesforce.com

Endpoints Utilized

DataGrail uses the following endpoints to authorize and test the connection:

Method	Endpoint	Purpose	Docs
POST	https://account.demandware.com/dwsso/oauth2/access_token	Get and refresh access token

---

Authentication & Authorization

The DataGrail Salesforce B2C Commerce integration connects using OAuth 2.0 with the following credentials: Client ID and Client Secret.

Sensitive Credentials

Publicly exposing your API credentials can allow unauthorized access to Salesforce B2C Commerce API endpoints by a third party. DataGrail stores your API credentials encrypted and protected.

---

Field Level Permissions

Salesforce allows setting permissions at field level for both visibility and accessibility. Fields without read permissions will not be included in the queries from DataGrail.

Scopes

The Salesforce B2C Commerce integration requires specific scopes that must be granted in order to function for a given capability.

Scope	Access
mail	✅
roles	✅
tenantFilter	✅
profile	✅
openId	✅
sfcc.orders	✅

---

Limits

Limits in Salesforce B2C Commerce are calculated using the leaky bucket algorithm. All requests that are made after rate limits have been exceeded are throttled and an HTTP 429 Too Many Requests error is returned. Requests succeed again after enough requests have emptied out of the bucket.

• DataGrail supports requests throttling to stay within 70-80% of specified service rate limits.
• DataGrail processes API responses with HTTP 429 status to interrupt requests, waiting and retrying (using an exponential backoff strategy).

---

Capabilities

Access

DataGrail's Salesforce B2C Commerce integration provides Asynchronous Access capabilities for the following supported identifier category: Email.

Data Interactions

For Access requests, DataGrail will take the following actions:

1. For the Organization ID specified in the configuration and for each Site ID, search for Orders by the configured identifiers.

Endpoints Utilized

Method	Endpoint	Purpose	Docs
GET	/checkout/orders/v1/organizations/organization_id/orders?siteId=site_id	Retrieve Orders