Live
FastGRC × Salesforce AgentForce
Integrate FastGRC with Salesforce AgentForce so every agent action is evaluated against your compliance policy before it executes. Setup takes about 5 minutes.
Prerequisites
- •Salesforce org with AgentForce enabled (Spring '25 or later)
- •A FastGRC API key — get one free at fastgrc.ai/connect
1
Create a Named Credential
Named Credentials store your API key securely and keep it out of flows.
- 1. In Salesforce, go to Setup → search Named Credentials → click New
- 2. Fill in:
| Field | Value |
|---|---|
| Label | FastGRC |
| Name | FastGRC |
| URL | https://app.fastgrc.ai |
| Certificate | leave blank |
| Auth Protocol | No Authentication |
3. Under Custom Headers, click Add and set:
| Header Name | Header Value |
|---|---|
Authorization | Bearer fgrc_k1_your_key_here |
4. Click Save
2
Register FastGRC as an External Service
External Services turns the FastGRC OpenAPI spec into callable AgentForce actions automatically.
- 1. Go to Setup → search External Services → click New External Service
- 2. Fill in:
| Field | Value |
|---|---|
| External Service Name | FastGRC |
| Service Schema | URL |
| URL | https://app.fastgrc.ai/api/v1/openapi.json |
| Named Credential | FastGRC (select from dropdown) |
3. Click Save & Next
4. Salesforce parses the spec and shows available operations. Confirm evaluateAgentAction is listed, then click Next → Finish
3
Import the pre-built Agent Action
Download and import the pre-built Agent Action so you don't have to configure it manually.
- 1. In Salesforce, go to Setup → Custom Metadata Types → find Agent Actions → Manage Records → Import
- 2. Upload
FastGRC_EvaluateBeforeActing.xmland click Deploy
Or create it manually:
- 1. Go to Setup → Agent Actions → New
- 2. Set Action Type to
External Service - 3. Select
FastGRC → evaluateAgentAction - 4. Name it
FastGRC: Evaluate Before Acting - 5. Map inputs:
subjectContent→ planned action text,subjectType→ hardcodetool_argument
4
Add to your AgentForce Agent
- 1. Open AgentForce Builder and select your agent
- 2. In the Actions panel, click Add Action
- 3. Search for
FastGRC: Evaluate Before Actingand select it - 4. Drag it to the first position in the action list (it must run before any other action)
- 5. Configure the On Block behavior:
- • If
decision = block→ add a Decision element that stops the flow and returns thereasoningto the user - • If
decision = allow→ continue to the next action
- • If
- 6. Click Save → Activate
How decisions work
| Decision | What it means | Recommended action |
|---|---|---|
allow | Policy permits this action | Proceed |
block | Policy violation — action blocked | Stop, show reasoning to user |
require_approval | Needs human review | Pause flow, notify approver |
uncertain | Not enough signal to decide | Proceed (logged for review) |
All decisions are logged in your FastGRC dashboard → Audit Log.
Troubleshooting
⚠️External Service import fails — Check that your Named Credential URL is exactly
https://app.fastgrc.ai (no trailing slash) and the Authorization header value starts with Bearer .⚠️evaluateAgentAction not listed — Salesforce may have cached the spec. Delete and re-import the External Service, or wait 5 minutes.
⚠️All decisions return allow — Your policy may be in Observability Mode. Check your dashboard — the
👁 observe badge means violations are logged but not blocked. Switch to enforcement when ready.