Vertex AI Setup

Vertex AI requires a Service Account authentication method involving certificates and JWT (JSON Web Token) configuration. Follow these steps precisely.

1. Google Cloud Configuration

https://console.cloud.google.com/

Create Project & Service Account:

  • Go to Google Cloud Console and create a New Project (e.g., “Peeklogic Vertex”).

Content Image

  • Navigate to APIs & ServicesLibrary. Search for “Vertex AI API” and click Enable.

Content Image

Content Image

Content Image

Content Image

Content Image

  • Navigate to IAM & AdminService Accounts.

Content Image

  • Click + Create Service Account.

Content Image

  • Name: e.g., “salesforce-integration”.

Content Image

  • Role: In the “Grant this service account access to project” step, select Vertex AI User.

Content Image

  • Click Done.

  • Important: From the Service Account list, copy the Email address (e.g., vertex@project-id.iam.gserviceaccount.com) and the Unique ID. You will need these for Salesforce.

Content Image

Content Image

Generate Key:

  • Click the Actions (three dots) menu on your Service Account → Manage keys.

Content Image

  • Click Add keyCreate new key.

Content Image

  • Select P12 (NOT JSON) and click Create.

Content Image

  • The file will download. Note the password (usually notasecret).

  • Copy the Key ID: In the key list, copy the Key ID string associated with the new key.

Content Image

Content Image

2. Convert Certificate (JKS)

Salesforce requires the Java Keystore (JKS) format.

  • Open your Command Line / Terminal.

Content Image

Note: Run the following command (requires Java installed):

keytool -importkeystore -srckeystore ./YOUR_FILE.p12 -destkeystore GoogleVertexJWT.jks -srcstorepass notasecret -srcalias privatekey -srcstoretype pkcs12 -deststoretype jks -destalias GoogleVertexJWT -deststorepass notasecret

Replace YOUR_FILE.p12 with the downloaded filename.

3. Salesforce Certificate Setup

Enable Identity Provider:

  • In Salesforce Setup, go to IdentityIdentity Provider.

Content Image

  • Click Enable Identity Provider.

  • Select a Self-Signed Certificate (create one if none exists) to activate the feature.

Content Image

Import Vertex Certificate:

  • Go to SecurityCertificate and Key Management.

  • Click Import from Keystore.

Content Image

  • Choose File: Select the google-vertex.jks file you generated.

  • Password: Enter notasecret.

  • Click Save.

4. Named Credential Configuration

External Credential:

  • Go to Named CredentialsExternal Credentials.

Content Image

  • Edit Google Vertex AI External Credential.

    • Issuer (iss): Paste the Service Account Email from Google Cloud.

    • Subject (sub): Paste the Service Account Email again.

Content Image

  • JWT Signing:
  • Signing Certificate: Select the googlevertexjwt certificate you imported.

Content Image

 

Ready to simplify your Salesforce integrations?

    Peeklogic AI Orchestrator