We want to use Zapier to extract some data from our Salesforce org to Google drive.
It seems that the only way is using users credentials (user/passwd) and there is no way to filter by incoming IP...
Does anyone have the same problem?
It's a good idea to let any integration to connect to Salesforce without filtering incoming IPs and no other security credentials than user/passwd?
any ideas are welcomed.
thanks.
I wouldn’t be comfortable using just username/password either. In most cases you should be using OAuth with a dedicated integration user, not personal credentials, and definitely not bypassing IP controls without understanding the risk.
If IP restriction is a hard requirement, Zapier can be limiting since traffic comes from their infrastructure. In similar setups we either used a middleware that supports OAuth + more granular security control, or something like Skyvia where you connect via OAuth and don’t have to expose raw credentials. At minimum, create a dedicated integration user with least-privilege access and monitor API usage closely.
