We have a secure instance of Salesforce that mandates SSO and Oauth2. We are trying to set up the Splunk Add-on for Salesforce Streaming API Connection.
According to our team which supports Splunk they require the following from Salesforce:
Enable Username-Password Flow
Enable Real-time streaming objects
Splunk add-on for SFDC Streaming API will require SFDC username, password, consumer key and consumer password to create a connection.
The username password flow isn't available to us for new external client applications without explicit activation. This login flow was deprecated by Salesforce for security reasons. When I look at this app's python code, I see that it's using a very old package called aiosfstream for login. Are there plans to update this app to use a more secure and supported Oauth2 flow like client-credential anytime soon? The Splunk add-on for logging setup audit trail records uses the client-credential flow.
Until this app is updated to use a more secure login flow, it is not usable in a secure FedRAMP environment.
Thanks!
