Exposing an App in FSS to Salesforce via Saas-Proxy

1. Make the API Visible to GCP

To make an API of a NAIS app in FSS accessible to Salesforce, the app owner needs to configure an ingress that is visible to GCP. This is typically achieved using a special pub.nais.io ingress. For detailed instructions, refer to the NAIS documentation here

2. Grant Access to Saas-Proxy

The app owner must grant access to Saas-Proxy in the app's access policies. Below is an example configuration:

  accessPolicy:
    inbound:
      rules:
        - application: saas-proxy
          namespace: teamcrm
          cluster: <dev/prod-gcp>

3. Configure Saas-proxy

Follow the instructions provided in the Saas-proxy documentation to configure the proxy to redirect traffic to the configured ingress.