Last updated June 15, 2021

Heroku Connect is an add-on that synchronizes data between your Salesforce organization and a Heroku Postgres database. Using Heroku Connect with Heroku Postgres, you can build custom applications that interact with your Salesforce data.

Setting up Heroku Connect

You can provision the add-on via the Heroku Dashboard or the CLI. By default, the Heroku Connect demo plan is used when the add-on is provisioned. Customers with contracts for Heroku Connect’s paid plans can also provision enterprise and/or shield plans. Please see the Available plans section and contact sales for more details.

Creating a new instance via the Heroku Dashboard

To open the Heroku Dashboard, navigate to dashboard.heroku.com/apps.

1. Select the application you would like to attach Heroku Connect to from your applications list.
2. Click the Resources tab at the top of the page.
3. Search for Heroku Connect in the Add-ons section of the page.
4. Select a plan and click the Submit Order Form button.

Creating a new instance via the CLI

Heroku Connect can be attached to your application using:

$ heroku addons:create herokuconnect
Creating herokuconnect-gladly-8321... done, (free)
Adding herokuconnect-gladly-8321 to sleepy-ocean-5276... done
Use `heroku addons:open herokuconnect` to finish setup
Use `heroku addons:docs herokuconnect` to view documentation.

When you provision the add-on a globally unique identifier will automatically be generated: in the above example the unique identifier is herokuconnect-gladly-8321. You can specify your own unique identifier by passing the --name flag to the addons:create command.

If you have purchased Heroku Connect you can specify the plan type when adding the add-on to your application:

$ heroku addons:create herokuconnect:enterprise
$ heroku addons:create herokuconnect:shield

Provisioning the database

A Heroku Postgres database is used by Heroku Connect to store data for your mapped Salesforce objects.

Heroku Connect supports the following Heroku Postgres plan types: standard, premium and private. Heroku Connect shield plans can additionally support Heroku Postgres shield plans. Heroku Connect can be used to sync data between a Salesforce org and a Heroku Postgres database inside or outside a Heroku Private Space.

Provision a Heroku Postgres database if your app does not already have one. Refer to the Heroku Postgres article for instructions.

Completing configuration

1. Open the Heroku Connect Dashboard by navigating to the add-on from the Heroku Dashboard or from the CLI (heroku addons:open herokuconnect)
2. Click the Setup Connection button in the dashboard.
3. Choose a Heroku Postgres database that is attached to your application. If you have multiple databases attached to your application you can choose the one you want Heroku Connect to use. The database specified by the DATABASE_URL config var is selected by default.
4. Choose the Postgres schema to be used for the tables created by Heroku Connect. The default is salesforce. You can choose to put your tables in an existing schema, including public, as long as no tables exist in the schema.
5. Click Next to set up the database.
6. Choose to authenticate to a production or sandbox Salesforce organization. You can choose to use a custom login domain.
7. Select the Salesforce API version you want Heroku Connect to use. Once selected, the API version cannot be changed. It is straightforward to create a second instance using a different API version with the same configuration should you wish to change API version at a later date.
8. Click the Authorize button and you will be taken to Salesforce to enter your login credentials and authorize Heroku Connect to have access to your data.

It is recommended that you use a dedicated integration user for Heroku Connect with the necessary permissions to allow for successful synchronization (for example the most permissive option is to make the integration user a System Administrator).

To ensure optimal performance, Heroku Connect should have View All Data permission in Salesforce and it may also be necessary to grant Modify All Data permission when dealing with relationships between objects. Both the user and the Salesforce organization will also need to have API Enabled permission granted.

Without the View All Data permission, Salesforce has to check permissions for each row individually, which precludes use of indices and results in greatly reduced performance. For larger connections, lack of View All Data can also result in OPERATION_TOO_LARGE errors that cause sync to fail altogether.

After you have authenticated to your Salesforce organization you can start mapping objects. To begin the process, click Create Mapping on the Overview tab of the Heroku Connect dashboard.

Supported objects and API versions

The complete list of objects that Heroku Connect supports for your version of Salesforce is available on the Supported Salesforce Standard Objects page. The Bulk API is not available in versions before Salesforce API v39 and thus you should use at least v39 with Heroku Connect. See Supported Salesforce Objects for more info.

New Heroku Connect add-ons default to Salesforce API version 52.0. You can specify the API version at connection creation.

Mapping objects

A mapping determines how a Salesforce object and its fields are persisted in Heroku Postgres and Salesforce. See Managing Heroku Connect Mappings and Mapping Configuration Options for more info.

The Heroku Connect dashboard

The Heroku Connect dashboard allows you to configure, monitor and troubleshoot your connection.

The Heroku Connect dashboard is available to any member or collaborator on your application. See Collaborating with Other Developers on Your App for more information on how to manage the users who have access to your application.

Overview tab

The Overview tab provides a summary of your mappings and key associated metrics. Depending upon your configuration, there will be either one or two histograms displaying data movement from Salesforce to Heroku Postgres, and optionally from Heroku Postgres to Salesforce.

When present, errors for reads and writes are displayed in orange. You can highlight a data point to see the specific number of rows and errors and change the time period shown using the drop-down list to the top-right of the chart.

Mappings tab

The Mappings tab lists each mapping in the connection along with a set of key data points: mapped fields, Salesforce rows, Postgres rows, pending writes, and errored writes. The action button to the right of each row can be used to launch mapping-specific actions such as edit, reload and abort. Lastly, the mapping name is a hyperlink to the mapping detail view where you can view mapping-specific data movement graphs and see details of each mapped field.

Logs tab

The Logs tab allows you to view detailed information about the synchronization operations being performed by Heroku Connect as they happen. You can filter by mapped object, log type, and log level. To see and analyze historical logs, you need to configure a log drain.

Explorer tab

The Explorer tab provides access to Sync Explorer: a tool that allows you to get detailed information on the status of individual rows for each mapping.

You can filter by mapping and synchronization state (see Status information for details) and can search for text contained in the id, sfid, _hc_err and name fields.

Sync Explorer also allows you to view a side-by-side comparison of the data held in Salesforce and in the mapped database table.

Sync Explorer, used in conjunction with the Logs tab, is an invaluable tool to help you understand the operations being performed by Heroku Connect and enables you to diagnose and fix synchronization issues that can occur.

The most common synchronization error that occurs when reading is insufficient permissions to read the mapped object. The most common synchronization error that occurs when writing is insufficient write permissions for the target Salesforce org.

Settings tab

The Settings tab contains a drop-down list where you can choose:

Manage Connection

The Manage Connection page lets you Pause or Resume the connection, view your plan type, view the list of users with access to the dashboard, check for orphaned mappings, download an audit trail and even delete the connection itself. Recover From Error attempts to clear out an error state and to resume synchronization.

Manage Salesforce

The Manage Salesforce page shows your current connection details (Salesforce organization ID, authenticating user and environment). You can also re-authorize the user credentials used to access Salesforce and view your current Salesforce storage usage. Re-authorizing to a different user should not have any affect on the syncing of data, provided that the new user has permissions to the same objects that the previous user had.

Database

The Database page summarizes the Heroku Postgres database settings used by Heroku Connect, including the database and schema names, host and port, as well as providing useful command line examples showing how to connect to the database using PSQL.

Import/Export Configuration

It is possible to export your existing mapping configuration to or import a new configuration from a JSON file. This can be helpful when managing your Salesforce organizations.

Salesforce organizations

As part of the provisioning process for Heroku Connect you will be required to authenticate to a Salesforce organization.

When you authenticate Heroku Connect to an organization then the mappings you create are specific to that organization: this includes both the structure of the underlying database tables and the data that is synchronized between Salesforce and the database. In order to reduce the potential for data conflict and corruption it is not possible to re-authenticate an existing Heroku Connect connection to a different Salesforce organization.

If you want to synchronize data from a new production or a refreshed sandbox organization you will need to:

1. Export your current configuration to a JSON file.

   Navigate to the Settings tab, choose Import/Export Configuration, click the Export button and then on the confirmation page click Export to download the file. If connected to a sandbox that’s already been refreshed, the connection’s dashboard will be replaced by a link to these instructions and a button to export your configuration.

2. Remove and re-provision the Heroku Connect add-on authenticating to the new Salesforce organization.

3. Import the JSON configuration file.

   Navigate to the Settings tab, choose Import/Export Configuration, click the Import button and then click Choose file to locate the file to upload. Click the Upload button to begin the import.

On successful completion of the import Heroku Connect will begin syncing data from your new Salesforce organization into the database.

Login IP restrictions

If your Salesforce organization has org-wide or profile-based IP restrictions, you will need to extend your range of allowed IP addresses to include Heroku Connect. Connect runs inside a Private Space, so you can add these IPs to your allowed list depending on the cell your connection is in:

You can verify that Heroku Connect is logging in successfully by viewing the Login History for your Salesforce organization. You should see entries where the Username matches the email address you have used to authenticate and the Application is either Heroku Connect or Heroku Connect EU depending on the region where your instance is located.

Security

Heroku Connect observes Salesforce secure practices by storing an OAuth token which can be revoked at any time by the Salesforce admin. Heroku Connect uses secure SSL connections whenever data moves from Salesforce to the Heroku Postgres database, or from the Heroku Postgres database to Salesforce. Encrypted data may travel over the public internet while in flight and may be temporarily stored on an encrypted volume for up to 24 hours while being processed but otherwise is not stored outside of your Heroku Postgres database.

More information on Heroku security can be found here.

Using with Heroku Shield

Heroku provides a Shield Connect plan that is compatible with Shield Private Spaces. See the Heroku Connect FAQ for details.

Revoking Access to a Heroku Connect Add-on

Heroku Connect uses Heroku App Permissions to allow access to the Heroku Connect dashboard. Users are remembered the first time they perform an addons:open or use the CLI to associate themselves with the Connect Add-on. Heroku Connect proactively checks that the user has access after 6 hours or a period of inactivity, whichever comes first. If you wish to revoke access to a specific user sooner, then you can revoke permissions for the target user and perform an addons:open with any other user to force the target user to lose access to the add-on.

Advanced usage

Optimizing Performance

See Optimizing Heroku Connect Performance.

Multiple instances of Heroku Connect

It is possible to add multiple Heroku Connect add-ons to a single application; for example, you may wish to synchronize data from multiple Salesforce organizations and one way to achieve this is to have multiple add-ons each authorized and configured to work with different organizations.

It is also possible for multiple instances of Heroku Connect to be connected to the same Salesforce organization. This may be desirable to synchronize large numbers of Salesforce objects from a single organization.

When multiple Heroku Connect add-ons exist it is necessary to use the globally unique identifier assigned to the add-on when running commands from the CLI. For example to open the Heroku Connect dashboard:

$ heroku addons:open herokuconnect-gladly-8321

For more detailed information on Heroku Connect usage and features, see the Heroku Connect category page.

Managing add-on plans

Available plans

There are three plans for Heroku Connect:

• demo: This is the default plan when provisioning the add-on and provides access to all features of Heroku Connect with the following limitations:

  • A maximum of 10,000 synchronized rows across all mappings.
  • A minimum polling interval of 10 minutes.
  • The trigger log is archived for 7 days instead of 31 days.

• enterprise: This is the paid plan that you will use after purchasing Heroku Connect. If you have existing add-ons using the demo plan, you can upgrade them by following the steps in the Upgrading the add-on plan section. Rows allocated to you under your contract are calculated according to the total rows synchronized across all mappings, regardless of how often they change.

• shield: This is the paid plan that you will use after purchasing Heroku Shield Connect. Heroku Shield Connect can only synchronize data with Heroku Postgres databases that have shield plans.

Please contact sales for more information on the Heroku Connect enterprise or shield plans.

You can use the heroku addons command to see if your application already has Heroku Connect provisioned and the current plan:

$ heroku addons | grep herokuconnect
herokuconnect (herokuconnect-gladly-8321)  demo   free

Upgrading the add-on plan

If you are operating inside a Heroku team with a paid plan entitlement, you can upgrade by using the Edit plan option in the Heroku Dashboard or using the CLI:

$ heroku addons:upgrade herokuconnect:enterprise
WARNING: No add-on name specified (see `heroku help addons:upgrade`)
Finding add-on from service herokuconnect on app sleepy-ocean-5276... done
Found herokuconnect-gladly-8321 (herokuconnect:demo) on sleepy-ocean-5276.
Changing herokuconnect-gladly-8321 plan to herokuconnect:enterprise... done, (contract)
Plan change successful

If you have multiple Heroku Connect add-ons attached to your application you will also need to specify the globally unique identifier assigned to the add-on when running the upgrade command:

$ heroku addons:upgrade herokuconnect-gladly-8321 herokuconnect:enterprise
Changing herokuconnect-gladly-8321 plan to herokuconnect:enterprise... done, (contract)
Plan change successful

Removing the add-on

You can remove the add-on using the Heroku dashboard or using the CLI.

$ heroku addons:destroy herokuconnect

 !    WARNING: Destructive Action
 !    This command will affect the app: sleepy-ocean-5276
 !    To proceed, type "sleepy-ocean-5276" or re-run this command with --confirm sleepy-ocean-5276

> sleepy-ocean-5276
Destroying herokuconnect-gladly-8321 on sleepy-ocean-5276... done

Limitations

• Heroku Connect is incompatible with connection pooling for Heroku Postgres.
• Heroku Connect can’t be added to review apps via the app.json file. You can manually provision Heroku Connect once the review app has been created.
• Heroku Connect creates functions in the public schema of your database in order sync your data. If the public schema is removed from your search_path or if these functions are deleted, Heroku Connect can no longer find them which impairs data syncs. See this Knowledge Base article if Heroku Connect cannot find get_xmlbinary or other shared functions.
• Foreign data wrappers cannot be used with Heroku Connect as postgres_fdw changes the search_path to pg_catalog. This prevents Connect from using shared functions stored in the public schema needed to sync data.
• Heroku Connect uses Postgres triggers to observe changes in your Connect tables and write your changes to Salesforce. If you implement your own custom triggers on Connect tables, Connect may miss your updates, or you may create additional load. Heroku Support may not be able to provide help with custom triggers, so use them at your own risk. See more guidance on using custom triggers.

Support

All Heroku Connect support and runtime issues should be submitted via one of the Heroku Support channels.