W-16420474 Updates to Connecting Salesforce orgs

modules/ROOT/nav.adoc

@@ -38,7 +38,10 @@
  ** xref:connected-apps-end-users.adoc[]
 * xref:external-organization-access.adoc[]
  ** xref:trusted-anypoint-platform-org.adoc[]
- ** xref:trusted-salesforce-org.adoc[]
+* xref:trusted-salesforce-org.adoc[]
+ ** xref:connecting-salesforce-orgs.adoc[]
+ ** xref:managing-connected-salesforce-orgs.adoc[]
+ ** xref:manage-capabilities.adoc[]
 * xref:allowlisting-trusted-domains.adoc[]
 * xref:audit-logging.adoc[Audit Logs]
 * xref:troubleshooting-anypoint-platform-access.adoc[]

modules/ROOT/pages/_partials/include-nav-steps-org-admin.adoc

@@ -1,2 +1,2 @@
-. Sign in to Anypoint Platform using an account that has the Organization Administrator permission.
+. Sign in to Anypoint Platform using an account that has the root Organization Administrator permission.
 . In the navigation bar or the main Anypoint Platform page, click *Access Management*.

modules/ROOT/pages/_partials/include-salesforce-mulesoft-setup-nav.adoc

@@ -0,0 +1,5 @@
+. Log in to your Salesforce organization with your admin credentials.
+. Go to *Setup*. 
++
+image:salesforce-setup.png["Salesforce Setup menu with Setup selected"]
+. From *Setup*, in the Quick Find box, enter `MuleSoft`, and then select *MuleSoft > Anypoint Platform Setup*.

modules/ROOT/pages/connecting-salesforce-orgs.adoc

@@ -0,0 +1,80 @@
+= Establish a Tenant Relationship With a Trusted Salesforce Organization
+
+Establishing a tenant relationship between an Anypoint Platform organization and a Salesforce organization enables users in your organization to:
+
+* Publish invocable actions directly from their Robotic Process Automations (RPA) and Composer flows.
+* Enhance Anypoint Code Builder and Intelligent Document Processing (IDP) developer experiences with Einstein. 
+* Make MuleSoft APIs available in the connected Salesforce organization's API Catalog.
+
+When you establish the tenant relationship, you can initiate, complete, and manage the tenant relationships. You can also enable, disable, and remove connections. 
+
+Tenant relationships are initiated in Anypoint Platform.   
+
+These are the ways a tenant relationship is established:
+
+* A Salesforce organization is provisioned with the tenant relationship to an Anypoint Platform organization already established. In this case, the Anypoint Platform organization administrator just needs to xref:managing-connected-salesforce-orgs.adoc#enable-disable-connection[enable the connection] in Anypoint Platform. 
+* The tenant relationship is created by the Anypoint Platform organization administrator in Anypoint Platform and setup is completed in the Salesforce organization by the Salesforce organization administrator.  
+
+In some cases, the Anypoint Platform organization administrator and Salesforce organization administrator are two different people, and in some cases, they are the same person.
+
+== Before You Begin
+
+Anypoint Platform organization administrators must have:
+
+* The Anypoint Platform Organization Administrator permission at the root organization level.
+* The Salesforce tenant key of the Salesforce organization to connect.
++
+The Anypoint Platform organization administrator can get the tenant key from the Salesforce organization administrator.
+
+Salesforce organization administrators must have:
+
+* The Salesforce administrator permission set.
+* The Anypoint Platform organization key.
++
+The Salesforce organization administrator can get the key from the Anypoint Platform organization administrator. 
+
+[connect-orgs]
+== Connect With a Salesforce Org in Anypoint Platform
+
+As an Anypoint Platform organization administrator, you can start the process of connecting to a trusted Salesforce organization. 
+
+You must have the Salesforce organization's connection key (tenant key) before you can connect to a Salesforce organization. Contact the Salesforce organization admin to get the tenant key. 
+
+TIP: Salesforce admins get the Salesforce organization tenant key and enable MuleSoft features in their Salesforce organization Setup in *MuleSoft > Anypoint Platform Setup*.
+
+include::partial$include-nav-steps-org-admin.adoc[]
+
+. Click *Salesforce*.
+. Click *Add Salesforce Org*.
+. Enter the Salesforce organization tenant key, and click *Confirm*. 
+The format for the Salesforce tenant key is `cloud/env/org-id`.
+. In the *Add the Salesforce Org* dialog verify the information and click *Add*. 
+. Click *Copy* to copy the Anypoint Platform organization key. 
+. If you are the admin for the Salesforce organization you are adding, click *Manage in Salesforce* to continue setting up the relationship in Salesforce. 
++
+If you are not the Salesforce admin, provide the Anypoint Platform organization key to the Salesforce admin so they can finish the connection process in Salesforce.
+
+When the connection process is complete, the Salesforce organization appears in the *Salesforce Orgs* section of the *Salesforce* page.
+
+[complete-organization-connection]
+== Complete the Organization Connection in Salesforce
+
+As a Salesforce organization administrator, you complete the connection between your organization and the Anypoint Platform organization when the connection process is initiated in Anypoint Platform. You must have the Anypoint Platform organization key to complete the connection.
+
+include::partial$include-salesforce-mulesoft-setup-nav.adoc[]
+
+. In the *Your connected Anypoint Platform Organization* section, click *View Connection Info*.
+. In the *Connection to MuleSoft Anypoint Platform* dialog, enter the Anypoint Platform organization key in the *Anypoint Platform Organization ID* field, and then click *Connect*.
++
+NOTE: The Anypoint Platform organization key is the universally unique identifier (UUID) for the Anypoint Platform organization ID.
++ 
+If you don't have the Anypoint Platform organization key, contact the Anypoint Platform organization administrator.
++ 
+You are returned to the *Connection to MuleSoft Anypoint Platform* page and see the details of the connected Salesforce organization, including the enablement status of the capabilities associated with the connected Salesforce organization. 
+
+image::connected-salesforce-org-invocable-actions-enabled.png["The connected Salesforce organization with API Catalog disabled and Invocable Actions enabled"]
+
+== See Also
+
+* xref:trusted-salesforce-org.adoc[]
+* xref:managing-connected-salesforce-orgs.adoc[]

modules/ROOT/pages/external-organization-access.adoc

@@ -1,11 +1,8 @@
 = External Organization Access
-ifndef::env-site,env-github[]
-include::_attributes.adoc[]
-endif::[]
 
 The External Access feature enables separate organizations to collaborate in Anypoint Platform. For example, organizations can share API specifications, connectors, and other assets in Anypoint Exchange with each other, without making them public. Additionally, you can establish a connection with a trusted Salesforce organization.
 
-Organization administrators control which organizations their users can collaborate with by maintaining a list of trusted organizations in Access Management. Adding an entry to this list means that you trust the other organization and its users, and you acknowledge that you are enabling your users to grant permission to and be granted permissions by the other organization.
+Anypoint Platform organization administrators control which organizations their users can collaborate with by maintaining a list of trusted organizations in Access Management. Adding an entry to this list means that you trust the other organization and its users, and you acknowledge that you are enabling your users to grant permission to and be granted permissions by the other organization.
 
 Using the External Access functionality in Access Management, you can:
 

modules/ROOT/pages/manage-capabilities.adoc

@@ -0,0 +1,60 @@
+= Managing Capabilities for a Connected Salesforce Organization
+
+When you establish a tenant relationship and enable the connection between your Anypoint Platform organization and a trusted Salesforce organization, you can enable and disable capabilities associated with the Salesforce organization. 
+
+[[enable-disable-api-catalog]]
+== Enable or Disable API Catalog in Anypoint Platform
+
+Enable a connected Salesforce organization to access and import Anypoint Platform APIs into the Salesforce API Catalog and expose them as invocable actions. This capability is enabled in Anypoint Platform Access Management by an Anypoint Platform organization administrator.
+
+To enable this feature:
+
+include::partial$include-nav-steps-org-admin.adoc[]
+
+. Click *Salesforce*.
+. In the *Capabilities Managed in Anypoint Platform* section, click *Settings* next to *Make MuleSoft Anypoint Platform APIs Available in Salesforce*.
+. In *Settings for Anypoint APIs in Salesforce*, click *Continue*.
+. In the *Settings* page, select the Anypoint Platform business groups that allow the selected Salesforce organization to import Anypoint Platform APIs into its API Catalog, and click *Save Settings*.
++
+[NOTE]
+Within the selected business groups, only APIs that have specs published in Exchange with active instances can be imported into Salesforce.
+. In the *Capabilities Managed in Anypoint Platform* section, switch between *Enabled* or *Disabled* in the *Make MuleSoft Anypoint Platform APIs Available in Salesforce* section. 
++
+image:connected-salesforce-org-api-catalog-enabled.png["Connected Salesforce organization with both Invocable Actions and API Catalog enabled"]
++
+The Salesforce organization administrator can then sync APIs into their catalog. 
++
+For details about syncing APIs and using API Catalog in Salesforce, see xref:general::api-catalog-in-salesforce.adoc[].
++
+. After the APIs are imported, the Salesforce administrator selects individual API instances and operations and converts them into invocable actions for access by selected Salesforce developers.
+. A client ID is created and an access request for the selected Salesforce developers is sent to the Anypoint Platform owner of that API through API Manager.
++
+Only after the request is accepted can those selected Salesforce developers start using the API.
+
+[[add-api-catalog-permission]]
+=== Add the API Catalog Permission
+
+When you connect a Salesforce organization to your Anypoint Platform organization and enable API Catalog, an API Catalog Integration user is automatically created with the URL of the connected Salesforce organization. You must assign the *API Catalog Contributor* permission to this user to enable the sync of APIs from Anypoint Platform to API Catalog in Salesforce. 
+
+To assign the *API Catalog Contributor* permission:
+
+. In the Access Management navigation menu, click *Users*.
+. Click the *Username* of the API Catalog Integration user.
+. Click *Add permissions*.
+. In the *API Catalog Contributor* section of *Permissions*, select *API Catalog Contributor* and click *Next*. 
+. Select the business groups to add the permission to and click *Next*. 
+. Click *Add Permissions*. 
+
+[[enable-disable-invocable-actions]]
+== Enable or Disable Invocable Actions in the Salesforce Org
+
+When this capability is enabled by the Salesforce admin in Salesforce, MuleSoft automation developers can publish invocable actions directly from their Robotic Process Automations (RPA) and Composer flows to the connected Salesforce organization.
+
+. In Salesforce Setup, go to the *Quick Find* box and enter `MuleSoft`, then select *MuleSoft > MuleSoft Anypoint Platform*.
+. In the *Your connected Anypoint Platform Organization* section, click *View Connection Info* to open a new dialog.
+. In the *Connection to MuleSoft Anypoint Platform* window, switch between *Enabled* or *Disabled* in the *Enable Invocable Actions from MuleSoft Anypoint Platform Automations* section.
+
+== See Also
+
+* xref:trusted-salesforce-org.adoc[]
+* xref:managing-connected-salesforce-orgs.adoc[]

modules/ROOT/pages/managing-connected-salesforce-orgs.adoc

@@ -0,0 +1,104 @@
+= Managing Connected Salesforce Orgs
+
+As an Anypoint Platform organization administrator, you can:
+
+* <<enable-disable-connection,Enable or disable the connection>> to a Salesforce organization.
+* <<removing-connections,Remove the connection>> to a Salesforce organization.
+* <<repairing-org-connection,Repair the connection>> to a Salesforce organization.
+* <<edit-org-name,Edit the Salesforce organization name>>.
+
+[enable-disable-connection]
+== Enable or Disable a Connection in Anypoint Platform
+
+Enable or disable the connection to a Salesforce organization that has an established tenant relationship with your Anypoint Platform organization. 
+
+[NOTE]
+Tenant relationships that are automatically provisioned for your Anypoint Platform organization are disabled until you enable them. 
+
+When you disable the connection between your Anypoint Platform and a connected Salesforce organization, the Salesforce organization still appears in the list of available organizations with a status of `Disabled`. When the connection is disabled, you can't publish assets from your Anypoint Platform organization to the Salesforce organization or use any of the other features associated with the connected Salesforce organization until the connection is reenabled. Disabling a connection doesn't remove the connection to the Salesforce organization. 
+
+include::partial$include-nav-steps-org-admin.adoc[]
+
+. Click *Salesforce*.
++
+If your organization has at least one established tenant relationship with a Salesforce organization, a list of Salesforce orgs appears, showing the name, organization ID, and status of the tenant relationship connection.
+. Click *Enable* or *Disable* for the Salesforce organization you want to enable or disable the connection for.
+
+[[removing-connections]]
+== Remove the Connection Between Anypoint Platform and Salesforce Organizations
+
+When you remove the connection between your Anypoint Platform organization and Salesforce organization, the Salesforce organization no longer appears in the list of connected organizations. The connection still exists in the Salesforce organization until it's removed by the Salesforce organization administrator.
+
+To reestablish the connection between Anypoint Platform and removed Salesforce organizations, administrators with the appropriate permissions in both Anypoint Platform and Salesforce organizations must recreate the connection.
+
+[removing-connection-anypoint-platform]
+=== Remove a Connected Salesforce Org in Anypoint Platform
+
+An Anypoint Platform organization administrator can remove the connection between their Anypoint Platform organization and a connected Salesforce organization.
+
+When you remove a connection to a Salesforce organization, any capabilities that are associated with the Salesforce organization, such as API Catalog, are removed. 
+
+To remove the connection to a Salesforce organization:
+
+include::partial$include-nav-steps-org-admin.adoc[]
+
+. Click *Salesforce*.
+. Click the *Actions* menu (*...*) in the Salesforce organization to remove the connection from and select *Remove Salesforce Org*. 
+. In the *Remove Salesforce Org* dialog, click *Remove Org*.
+
+[removing-connection-salesforce]
+=== Remove a Connected Anypoint Platform Organization in Salesforce
+
+A Salesforce organization administrator can remove the connection between an Anypoint Platform organization and Salesforce organization using the Salesforce user interface. 
+
+To remove the connection to an Anypoint Platform organization in Salesforce:
+
+include::partial$include-salesforce-mulesoft-setup-nav.adoc[]
+
+. In the *Your connected Anypoint Platform Organization* section, click *View Connection Info*.
+. In the *Go To Anypoint* drop-down list, select *Remove connection*.
+. In the *Remove connection to Anypoint Platform* dialog box, click *OK*.
+
+Alternatively, if you want to temporarily prevent Anypoint Platform users from publishing assets to Salesforce from the Anypoint Platform side, you can instead <<enable-disable-connection,disable>> the connection temporarily.
+
+For more information about managing this relationship from the Salesforce user interface, see the https://help.salesforce.com/s/articleView?id=sf.external_services_manage_your_mulesoft_anypoint_platform_connection.htm&type=5[Salesforce documentation]. 
+
+[[repairing-org-connection]]
+== Repair the Connection to a Salesforce Organization
+
+If the Salesforce *My Domain* is changed in the connected Salesforce organization, you can rediscover the Salesforce organization and repair the connection. 
+
+include::partial$include-nav-steps-org-admin.adoc[]
+
+. Click *Salesforce*.
+. Click the *Actions* menu (*...*) in the Salesforce organization to repair the connection for and select *Repair Org Info*.
+. Click *Repair* to rediscover the Salesforce organization. 
+
+[[edit-org-name]]
+== Edit the Salesforce Organization Name
+
+You can edit the Salesforce organization display name in your Anypoint Platform organization. This doesn't change the name of the Salesforce organization within Salesforce. 
+
+To edit a Salesforce organization name:
+
+include::partial$include-nav-steps-org-admin.adoc[]
+
+. Click *Salesforce*.
+. Click the *Actions* menu (*...*) in the Salesforce organization to edit the name for and select *Edit Org Name*. 
+. Enter the name for the Salesforce organization and click *Save*.
++
+The Salesforce organization name appears in Anypoint Platform anywhere the organization is referenced.
+
+== Copy Your Anypoint Platform Organization ID
+
+include::partial$include-nav-steps-org-admin.adoc[]
+
+. Click *Salesforce*.
+. Click the *Actions* menu (*...*) and select *Get Anypoint Platform Organization ID*.
+. Click *Copy*. 
+
+
+== See Also
+
+* xref:trusted-salesforce-org.adoc[]
+* xref:manage-capabilities.adoc[]

modules/ROOT/pages/organization.adoc

@@ -2,6 +2,7 @@
 
 When you create an Anypoint Platform account, a root organization (business group) is created, and you are assigned as the owner of the organization. A root organization is a single instance of Anypoint Platform that includes all the entitlements, features, and capabilities you purchased. The owner of the root organization automatically inherits the Organization Administrator permission.
 
+
 The organization name is the name you entered in the *Company* field in the initial Anypoint Platform signup form. You can change the name in the organization settings.
 
 An organization is an account where multiple users can share resources, including applications and environments. The level of access users have to various resources depends on their assigned roles and permissions. For example, one user might have permission to manage API alerts, while another user has permission only to view API alerts.