Configuring the IBM MQ Bridge to Salesforce

You can configure IBM® MQ and enter IBM MQ Bridge to Salesforce parameters to create the configuration file and connect Salesforce push topics and platform events to your IBM MQ queue manager.

1. Create and start a queue manager.
   1. Create a queue manager, for example SQM1.

      crtmqm SQM1

   2. Start your queue manager.

      strmqm SQM1

2. Optional:
   Note: To use existing login and security Salesforce credentials and self-signed certificate, skip to step 3.
   Create a security token for your Salesforce account.
   1. Log in to your Salesforce account.
   2. Create or reset your security token by following the steps in the help article Salesforce help: Reset your security token.
3. Create a CA-signed security certificate in Salesforce.
   1. Select Security controls from the Administer menu of your Force.com Home page, then Certificate and Key Management.
      The Certificate and Key Management page opens.
   2. Click Create CA-Signed certificate.
      The Certificates page opens.
   3. Enter a name for the certificate in the Label field, press Tab, then click Save.
      The Certificate and Key Detail information is displayed.
   4. Click Back to list: Certificates and keys.
   5. Click Export to Keystore.
   6. Enter a password for the keystore, then click Export.
   7. Save the exported keystore to your local file system.
4. Use the IBM Key Management GUI to open the keystore you exported from Salesforce and populate the signer certificates.
   1. Run the strmqikm command to open the IBM Key Management GUI.
      For more information, see Using runmqckm, runmqakm, and strmqikm to manage digital certificates.
   2. Click Open a key database file and browse to the location of the Salesforce keystore.
   3. Click Open, make sure to select JKS from the Key database type options, then click OK.
   4. Enter the password that you created for the keystore in step 3f, then click OK.
   5. Select Signer Certificates from the Key database content options.
   6. Click Populate.
   7. Select the Verisign Inc. check box from the Add CA Certificates list, then click OK.
5. Optional: Generate OAuth consumer key and secret by creating an app connection for IBM MQ Bridge to Salesforce in your Salesforce account.
   You need the Consumer Key and Consumer Secret codes when you are using the IBM MQ Bridge to Salesforce in production environments.
   1. Select Create, then Apps from the Build menu of your Force.com Home page.
      The Apps page opens.
   2. Click New from the Connected Apps section.
      The New Connected App page opens.
   3. Enter a name for your IBM MQ Bridge to Salesforce in the Connected App Name, for example MQBridgeToSalesforce.
   4. Enter the API Name.
      If you tab through to the next field, the Connected App Name is copied into the API Name name field.
   5. Enter your Contact Email.
   6. Select the Enable OAuth Settings option in the API (Enable OAuth Settings) section.
      Further options in that section are then presented.
   7. Add your Callback URL, for example https://www.ibm.com.
   8. Select the Full access (full) option from the Available OAuth Scopes list in the Selected OAuth Scopes subsection, then click Add, to add full access to the Selected OAuth Scopes list.
   9. Click Save.
   10. Click Continue.
   11. Take note of your Consumer Key and Consumer Secret codes.
6. Create the required synchronization queue on the queue manager.

   cat /opt/mqm/mqsf/samp/mqsfbSyncQ.mqsc | runmqsc SQM1

   The synchronization queue maintains event state across application or queue manager restarts. The queue depth can be small as only a single message is expected on the queue. Only one instance of the bridge can run at a time against this queue, so the default options are set for exclusive access.
7. Create a configuration file with connection and security parameters for IBM MQ, Salesforce, and the IBM MQ Bridge to Salesforce behavior.

   runmqsfb -o new_config.cfg

   The existing values are shown inside the brackets. Press Enter to accept existing values, press Space then Enter to clear values, and, type, then Enter to add new values.
   1. Enter values for the connection to queue manager SQM1:
      Minimum values that are needed for the connection are queue manager name, IBM MQ base topic root, and channel name.

      Connection to Queue Manager
      ---------------------------
      Queue Manager or JNDI CF   : []SQM1
      MQ Base Topic              : []/sf
      MQ Channel                 : []A channel you have defined or for example SYSTEM.DEF.SVRCONN
      MQ Conname                 : []
      MQ Publication Error Queue : [SYSTEM.SALESFORCE.ERRORQ]
      MQ CCDT URL                : []
      JNDI implementation class  : [com.sun.jndi.fscontext.RefFSContextFactory]
      JNDI provider URL          : []
      MQ Userid                  : []
      MQ Password                : []

      Note: Channel name is not required if you are connecting locally. You don't have to provide the queue manager name and base topic in the configuration file as they can be included on the command line later, when you run the bridge.
   2. Enter values for connection to Salesforce:
      Minimum values that are needed for the connection are Salesforce user ID, password, security token, and login endpoint. In production environments, you can add the consumer key and secret for OAuth security.

      Connection to Salesforce
      ------------------------
      Salesforce Userid (reqd)   : []salesforce_login_email
      Salesforce Password (reqd) : []salesforce_login_password        
      Security Token (reqd)      : []Security_Token 
      Login Endpoint             : [https://login.salesforce.com]
      Consumer ID                : []
      Consumer Secret Key        : []
      

   3. Enter values for certificate stores for TLS connections:
      Minimum values that are needed for TLS connections are the path to the keystore for TLS certificates and keystore password. If no trusted store path or password is provided, the keystore and password parameters are used for the trusted store and password. If you are using TLS for your IBM MQ queue manager connection, you can use the same keystore.

      Certificate stores for TLS connections
      --------------------------------------
      Personal keystore for TLS certificates : []path_to_keystore, for example: /var/mqm/qmgrs/SQM1/ssl/key.jks
      Keystore password          : []keystore_password
      Trusted store for signer certificates : []
      Trusted store password     : []
      Use TLS for MQ connection  : [N]
      

   4. Enter values to configure the behavior of the IBM MQ Bridge to Salesforce:
      You do not have to change or provide any of these values but if you know your push topic or platform event names, add them here. They can also be added later, in the command line, when you are ready to run the bridge. You must specify the log file, in the configuration file or on the command line.

      Behaviour of bridge program
      ---------------------------
      PushTopic Names          : []
      Platform Event Names     : []
      MQ Monitoring Frequency  : [30]
      At-least-once delivery? (Y/N) : [Y]
      Subscribe to MQ publications for platform events? (Y/N) : [N]
      Publish control data with the payload? (Y/N) : [N]
      Delay before starting to process events : [0]
      Runtime logfile for copy of stdout/stderr : []

8. Optional: Create the IBM MQ service to control the execution of the program. Edit the sample mqsfbService.mqsc file to point to the newly created configuration file and make any other changes to the command parameters.

   cat modified mqsfbService.mqsc | runmqsc SQM1

9. Optional: Follow instructions in Getting started with the IBM MQ Console to set up the IBM MQ Console.
10. Optional:
    Note: Before you can see any data about the bridge in MQ Console, you must run the bridge at least once so that when it is started, it makes the connections to Salesforce and IBM MQ. The meta-topics for the bridge are published at bridge start up.
    Add and configure widgets in your IBM MQ Console instance to view Salesforce data.
    1. Click Add widget.
       The new widget opens.
    2. Select Charts
    3. Click Configure widget icon in the title bar of the new widget.
    4. Optional: Enter a Widget title.
    5. Select Salesforce Bridge, from the Resource to monitor, Source drop-down menu.
    6. Click Save.