Real IntelligenceReal Intelligence Docs
Real BotsReal EventsReal Messaging EngineRI Social Media

Real Bots

Relationship Intelligence Architecture

How the Salesforce package, the Real Intelligence public API, and Google Workspace fit together.

Salesforce

The Real Bots managed package, namespace ribot, is responsible for:

  • Salesforce configuration
  • Initiating Relationship Intelligence operations
  • Generating signed authentication assertions
  • Storing the signing certificate KID
  • Presenting verification results

Public API boundary

Salesforce communicates with the public Real Intelligence endpoint rather than with backend execution infrastructure.

https://eie-api.realintelligence.com

The Relationship Intelligence endpoint:

https://eie-api.realintelligence.com/functions/v1/relationship-intelligence

Authentication

Salesforce authenticates using an org-bound RS256 JWS assertion. The Salesforce private signing key never leaves Salesforce.

ClaimValue
issSalesforce Organization ID
subSalesforce Organization ID
audRelationship Intelligence endpoint
kidRegistered certificate fingerprint
jtiUnique assertion identifier
iatIssued time
expExpiration time

Assertion lifetime: 300 seconds.

Tenant resolution

The Salesforce Organization ID identifies the Real Intelligence tenant.

Salesforce Org ID
        →
EIE Tenant
        →
Tenant Signing Certificate
        →
Tenant Google Workspace Provider

There is no cross-tenant credential fallback. If the Salesforce Org ID does not resolve to a tenant with a registered certificate and a configured Google provider, the request fails.

Google Workspace

Relationship Intelligence uses tenant-specific Google Workspace service-account credentials and Domain-Wide Delegation.

Current verification includes:

  • Google Workspace connection
  • Domain-Wide Delegation
  • Admin Directory API
  • Gmail API

Was this helpful?

PreviousOverviewNextPost-Install Checklist

Last updated 1 month ago