Common errors
If you see any of the following errors when attempting to log in, access has not yet been granted by your Salesforce Admin:OAuth App BlockedOAuth ErrorOAUTH_APPROVAL_ERROR_GENERIC
Admin approval flow
Confirm Deal Brain is installed as a Connected App
In Salesforce, go to Setup → Apps → Connected Apps → Connected Apps OAuth Usage, find Deal Brain, and click Install.

Configure user access
Once installed, click Manage App Policies and ensure Permitted Users is set to All users may self-authorize (default).

Permissions
Deal Brain requests the following OAuth scopes:| Scope | Purpose |
|---|---|
email | Identify the authenticated user |
openid | Identify the authenticated user |
profile | Identify the authenticated user |
api | Read and write Salesforce data |
offline_access | Maintain access without requiring re-authentication |
What we do with these permissions
- Query and sync field definitions for Accounts, Contacts, and Opportunities
- Sync a subset of Opportunities and field values (selected by the user during onboarding)
- For that subset of Opportunities, sync related Account and Contact objects
- Write Opportunity field values back to Salesforce when a user edits them

