Overview

Jetstream is the most advanced toolkit for working with and administering Salesforce. We know that once you start using Jetstream, you'll wonder how you ever got on without it!

If you have questions or want to talk with a human, you can reach support by emailing [email protected].

tip

If you haven't created a Jetstream account, you can sign up here.

tip

To get the most out of Jetstream, sign up for a paid plan. View features included in Pro here.

Adding your first org

After logging in to Jetstream for the first time, you need to connect Jetstream to one or more of your Salesforce orgs.

Jetstream uses OAuth2 for org connections, which means that Jetstream never gains access directly to your password.

To add an org, click the button at the top of the page.

You will be asked to choose an org type which is used to determine which Salesforce login page to redirect you to for authorization.

• Production / Developer
  • https://login.salesforce.com
• Sandbox
  • https://test.salesforce.com
• Pre-release
  • https://prerellogin.pre.salesforce.com
• Custom Login URL
  • https://my--domain.my.salesforce.com

info

Starting in September 2025, Salesforce requires that all 3rd party connected apps are installed in your org for any new authorizations.

If you are a System Administrator, you may be unaffected if you have not modified the "Approve Uninstalled Connected Apps" setting, which Salesforce set on all System Administrator profiles by default.

After you attempt to Login to Jetstream and receive a login error, you will see Jetstream show up in the list on the Manage Connected Apps setup page.

You will need to click "Install" and then you can configure your desired security policies for the connection.

Jetstream will NEVER communicate with Salesforce APIs without your explicit authorization and will never do so in the background or for any actions you have not explicitly taken while using Jetstream.

Refer to the Salesforce Connected App documentation for additional information.

Authorization

When you are authorizing with Salesforce, you will see a consent screen with the following permission requests:

Permission	Description
Access the identity URL service	Provide access to your unique identifier and basic user profile information.
Manage user data via Web browsers	Allows logging in using "frontdoor" login, this means when you click a link from Jetstream, you will be auto-logged in if you were not already logged in.
Manage user data via APIs	Allows Jetstream to communicate with Salesforce.
Perform requests at any time	Allows Jetstream to store "refresh tokens" so that you don't need to continuously re-connect your Salesforce org to Jetstream.

Jetstream IP Addresses

If you need to allow IP addresses for your org, Jetstream will use one of the following addresses:

• 74.220.50.22
• 74.220.50.23
• 74.220.50.24

On Salesforce, configure as 74.220.50.22 to 74.220.50.24.

Prior IP Address Ranges:

Prior to May 28, 2026:

• 74.220.58.0/24
  • On Salesforce, configure as 74.220.58.0 to 74.220.58.255
• 74.220.50.0/24
  • On Salesforce, configure as 74.220.50.0 to 74.220.50.255

Troubleshooting Tips

If you have issues adding your org, here are some likely causes and solutions.

Problem	Possible Causes	Solution
You are unable to login, your username and password is not accepted from Salesforce	Your org may have a login restriction that only allows access by logging in using the custom domain.	This setting can be found in Salesforce under Setup → My Domain → Policies → Prevent login from https://login.salesforce.com. If this is set to true, then you will want to use the Custom Login URL option and provide custom domain shown on the Current My Domain URL on the setup page.
You receive an error message after successfully logging in	You may have 3rd party OAuth apps blocked by your administrator You might require an administrator to pre-install or enable 3rd party OAuth apps in your org You may have IP address restrictions enabled for your profile or for Connected Apps	OAuth configuration settings can be managed in Setup → Connected Apps OAuth Usage → Find Jetstream and click Edit. From here, you have the ability to: Install the connected app, which pre-authorizes users Choose which profiles have access to use the connected app Relax IP address restrictions for this app Refer to the Salesforce Documentation for more information. warning There is a Salesforce bug where the Connected App may not show up in Connected App OAuth Usage even after attempting to login. To resolve this, you may need to Match Production Licenses to Sandbox without a Refresh to ensure the Approve Uninstalled Connected Apps permission exists in the Sandbox. See Salesforce Documentation for more information. Alternatively you can manually install our connected apps using the links below even if the app is not listed in the OAuth Usage page: Replace <your_domain> with your Salesforce custom domain. Jetstream Web Application <your_domain>/identity/app/AppInstallApprovalPage.apexp?app_id=0Ci4S000000CaUB&app_org_id=00D4S000000pHDF Jetstream Desktop Application <your_domain>/identity/app/AppInstallApprovalPage.apexp?app_id=0Ci4S000000CadS&app_org_id=00D4S000000pHDF Jetstream Authentication (logging into Jetstream using Salesforce) <your_domain>/identity/app/AppInstallApprovalPage.apexp?app_id=0Ci4S000000Cact&app_org_id=00D4S000000pHDF
When you click a Salesforce link, you are required to "Choose a Verification Method" to continue to Salesforce.	You may have very strict session settings in Salesforce, such as "High Assurance".	By default, Jetstream uses Frontdoor to login using your existing Jetstream session. This can be disabled by navigating to your settings and enabling the option to Don't Auto-Login on Link Clicks.