# Backup & Archive Prerequisites

## ![](/files/CBvqj0H8446fKLeXtHLv) Overview

This article outlines the required prerequisites and preparatory steps for setting up and using Flosum Backup & Archive. It includes user permission requirements, domain allowlisting, key management, API considerations, and SSO setup.

## Prerequisites and Setup Requirements

{% stepper %}
{% step %}

### Salesforce User Requirements

* Use a **Salesforce Standard License** (not a Community/Platform user).
* The user must have:
  * **System Administrator** profile
  * **API Enabled** permission
  * **Query All Files** permission
* Use a **dedicated Salesforce user** for registration instead of a personal admin's login. This approach ensures that deactivating a regular user won't disrupt integration or halt your backup jobs.

{% hint style="info" %}
For more details about creating a **Dedicated Salesforce User** see the following article.

* [Creating a Dedicated Salesforce User](/global-settings/environment/organizations/creating-a-dedicated-salesforce-user.md)
  {% endhint %}
  {% endstep %}

{% step %}

### Allowlist Required Domains

If your organization uses ZScaler or similar tools to block traffic, allowlist the following domain URLs:

<table><thead><tr><th width="120.33331298828125">Region</th><th>Backup &#x26; Archive URL</th><th>Global Settings URL</th><th>OAuth URL</th></tr></thead><tbody><tr><td><strong>United States</strong></td><td>https://backup-us.flosum.app/</td><td>https://global-us.flosum.app/</td><td>https://backup-auth.flosum-service.com/</td></tr><tr><td><strong>Germany</strong></td><td>https://backup-de.flosum.app/</td><td>https://global-de.flosum.app/</td><td>https://backup-auth.flosum-service.com/</td></tr><tr><td><strong>Japan</strong></td><td>https://backup-jp.flosum.app/</td><td>https://global-jp.flosum.app/</td><td>https://backup-auth.flosum-service.com/</td></tr><tr><td><strong>Austrailia</strong></td><td>https://backup-au.flosum.app/</td><td>https://global-au.flosum.app/</td><td>https://backup-auth.flosum-service.com/</td></tr></tbody></table>
{% endstep %}

{% step %}

### Security & Risk Approval

Submit any required documentation to your **Security, Compliance, or Risk team** for approval before connecting Flosum Cloud Apps to your Salesforce org.
{% endstep %}

{% step %}

### Prepare Sample Data for Trial or PoC

For a trial environment:

* Use a **Salesforce Sandbox** org.
* Prepare up to **100 GB** of combined data across:
  * Accounts, Contacts, Cases, Custom Objects
* Mask or obfuscate sensitive fields before uploading.

{% hint style="info" %}
A full org backup occurs only during the first composite backup. Future backups pull only delta changes.
{% endhint %}
{% endstep %}

{% step %}

### Optional: Relax Salesforce API Limits

Composite backups rely on Salesforce API calls.

* Initial backups may consume a significant amount of your API quota in **large orgs**.
* Flosum throttles usage to **80%** of the daily API limit by default.
* To avoid throttling delays, you can request **temporary API limit increases** from Salesforce Support.
  {% endstep %}

{% step %}

### Allowlist Flosum Email Domains

Ensure that Flosum system notifications are not blocked or marked as spam.

Allowlist these domains on your corporate email server:

* **@flosum.app**
* **@flosum.com**
* **@flosum.tech**
  {% endstep %}

{% step %}

### Using Single Sign-On (SSO)

Flosum User Pool supports SSO via OAuth token-based identity providers.

See the following guides to configure your IDP:

* [Adding an Identity Provider (SSO)](/global-settings/security/identity-providers-sso/adding-an-identity-provider-sso.md)
* [Auth0 - OIDC - Configuration](/global-settings/security/identity-providers-sso/oidc-identity-providers/auth0-oidc-configuration.md)
* [AWS Cognito - OIDC - Configuration](/global-settings/security/identity-providers-sso/oidc-identity-providers/aws-cognito-oidc-configuration.md)
* [Microsoft Entra ID - OIDC - Configuration](/global-settings/security/identity-providers-sso/oidc-identity-providers/microsoft-entra-id-oidc-configuration.md)
* [Google IDP - OIDC - Configuration](/global-settings/security/identity-providers-sso/oidc-identity-providers/google-idp-oidc-configuration.md)
  {% endstep %}
  {% endstepper %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.flosum.com/backup-and-archive/getting-started/backup-and-archive-prerequisites.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.