Skip to content

Process Steps ​

Bulk Retrieve ​

Download all components of a single metadata type into a local directory.

NameTypeDescriptionRequired
Salesforce CLI PathtextBoxPath to the sf executable. Defaults to sf on the agent PATH.Yes
Metadata TypetextBoxThe type of metadata to retrieve, for example ApexClass or CustomObject. Type names are case-sensitive.Yes
Retrieve TargettextBoxThe root of the directory structure into which the metadata files are retrieved, for example codepkg.Yes
Containing FoldertextBoxFor folder-based types (Report, Dashboard, Document, EmailTemplate), the folder whose contents are retrieved. Passed to the CLI as Type:Folder.No
UnzipcheckBoxIf selected, the retrieved components are extracted. Otherwise they are left as a zip file in the Retrieve Target directory.No
TracecheckBoxRun the Salesforce CLI with SF_LOG_LEVEL=debug for troubleshooting. Produces verbose output.No
Authentication MethodselectBoxIf the authentication method is JWT Bearer, require Username, Consumer Key, and either JWT Key File or JWT Private Key; if SFDX Auth URL is selected, require SFDX Auth URL.Yes
UsertextBoxSalesforce username. Required for the JWT bearer flow.No
Consumer KeysecureBoxConsumer key of the connected app used for JWT. Required for the JWT bearer flow.No
JWT Key FiletextBoxPath on the agent to the PEM private key matching the connected app certificate. Required this or JWT Private Key.No
JWT Private KeysecureBoxPEM private key contents. Staged to a temporary owner-only file and deleted when the step ends. Required this or JWT Key File.No
SFDX Auth URLsecureBoxRequired when Authentication Method is SFDX Auth URL.No
API VersiontextBoxMetadata API version, for example 62.0. Leave empty to let the CLI use the org default.No
Max PolltextBoxLegacy poll count. Combined with Poll Wait Time to derive the CLI --wait value in minutes.No
Poll Wait TimetextBoxLegacy poll interval in milliseconds. Combined with Max Poll to derive the CLI --wait value in minutes.No
Proxy HosttextBoxHTTP proxy host. Exported to the CLI as HTTP_PROXY and HTTPS_PROXY. SOCKS proxies are not supported by Salesforce CLI v2.No
Proxy PorttextBoxHTTP proxy port. Defaults to 80.No
Proxy UsernametextBoxProxy user.No
Proxy PasswordsecureBoxProxy password. Used only when Proxy Username is set.No
No ProxytextBoxComma-separated hosts that bypass the proxy. Exported as NO_PROXY.No

Deploy ​

Deploy a metadata-format directory to an org, or validate it without saving.

NameTypeDescriptionRequired
Salesforce CLI PathtextBoxPath to the sf executable. Defaults to sf on the agent PATH.Yes
Deploy RoottextBoxDirectory, relative to the working directory or absolute, containing the metadata-format payload and its package.xml.Yes
Check OnlycheckBoxRun a validation instead of a deployment. A validation that passes its tests can later be quick-deployed with the Deploy Recent Validation step. Sets the recentValidationId output property.No
Roll Back on ErrorcheckBoxLeave selected for all-or-nothing deployments. Clearing it passes --ignore-errors, which production orgs reject. Ignored for validations.No
Test LevelselectBoxWhich Apex tests run as part of the deployment. Validations intended for quick deploy to production must run tests.No
Test NamestextAreaBoxIgnored unless Test Level is RunSpecifiedTests. Apex test class names, one per line.No
Authentication MethodselectBoxIf the authentication method is JWT Bearer, require Username, Consumer Key, and either JWT Key File or JWT Private Key; if SFDX Auth URL is selected, require SFDX Auth URL.Yes
UsertextBoxSalesforce username. Required for the JWT bearer flow.No
Consumer KeysecureBoxConsumer key of the connected app used for JWT. Required for the JWT bearer flow.No
JWT Key FiletextBoxPath on the agent to the PEM private key matching the connected app certificate. Required this or JWT Private Key.No
JWT Private KeysecureBoxPEM private key contents. Staged to a temporary owner-only file and deleted when the step ends. Required this or JWT Key File.No
SFDX Auth URLsecureBoxRequired when Authentication Method is SFDX Auth URL. Obtain with: sf org display --target-org <alias> --verboseNo
API VersiontextBoxMetadata API version, for example 62.0. Leave empty to let the CLI use the org default.No
TracecheckBoxRun the Salesforce CLI with SF_LOG_LEVEL=debug for troubleshooting. Produces verbose output.No
Max PolltextBoxLegacy poll count. Combined with Poll Wait Time to derive the CLI --wait value in minutes.No
Poll Wait TimetextBoxLegacy poll interval in milliseconds. Combined with Max Poll to derive the CLI --wait value in minutes.No
Proxy HosttextBoxHTTP proxy host. Exported to the CLI as HTTP_PROXY and HTTPS_PROXY. SOCKS proxies are not supported by Salesforce CLI v2.No
Proxy PorttextBoxHTTP proxy port. Defaults to 80.No
Proxy UsernametextBoxProxy user.No
Proxy PasswordsecureBoxProxy password. Used only when Proxy Username is set.No
No ProxytextBoxComma-separated hosts that bypass the proxy. Exported as NO_PROXY.No

Deploy Recent Validation ​

Quick-deploy a previously validated deployment without rerunning its tests.

NameTypeDescriptionRequired
Salesforce CLI PathtextBoxPath to the sf executable. Defaults to sf on the agent PATH.Yes
Recent Validation IDtextBoxJob id of a successful validation, produced by the Deploy step with Check Only selected.Yes
Authentication MethodselectBoxIf the authentication method is JWT Bearer, require Username, Consumer Key, and either JWT Key File or JWT Private Key; if SFDX Auth URL is selected, require SFDX Auth URL.Yes
UsertextBoxSalesforce username. Required for the JWT bearer flow.No
Consumer KeysecureBoxConsumer key of the connected app used for JWT. Required for the JWT bearer flow.No
JWT Key FiletextBoxPath on the agent to the PEM private key matching the connected app certificate. Required this or JWT Private Key.No
JWT Private KeysecureBoxPEM private key contents. Staged to a temporary owner-only file and deleted when the step ends. Required this or JWT Key File.No
SFDX Auth URLsecureBoxRequired when Authentication Method is SFDX Auth URL. Obtain with: sf org display --target-org <alias> --verboseNo
API VersiontextBoxMetadata API version, for example 62.0. Leave empty to let the CLI use the org default.No
TracecheckBoxRun the Salesforce CLI with SF_LOG_LEVEL=debug for troubleshooting. Produces verbose output.No
Max PolltextBoxLegacy poll count. Combined with Poll Wait Time to derive the CLI --wait value in minutes.No
Poll Wait TimetextBoxLegacy poll interval in milliseconds. Combined with Max Poll to derive the CLI --wait value in minutes.No
Proxy HosttextBoxHTTP proxy host. Exported to the CLI as HTTP_PROXY and HTTPS_PROXY. SOCKS proxies are not supported by Salesforce CLI v2.No
Proxy PorttextBoxHTTP proxy port. Defaults to 80.No
Proxy UsernametextBoxProxy user.No
Proxy PasswordsecureBoxProxy password. Used only when Proxy Username is set.No
No ProxytextBoxComma-separated hosts that bypass the proxy. Exported as NO_PROXY.No

Describe Metadata ​

List every metadata type available in the target org.

NameTypeDescriptionRequired
Salesforce CLI PathtextBoxPath to the sf executable. Defaults to sf on the agent PATH.Yes
Result File PathtextBoxOptional path for the JSON results. The default output is the step log.No
Authentication MethodselectBoxIf the authentication method is JWT Bearer, require Username, Consumer Key, and either JWT Key File or JWT Private Key; if SFDX Auth URL is selected, require SFDX Auth URL.Yes
UsertextBoxSalesforce username. Required for the JWT bearer flow.No
Consumer KeysecureBoxConsumer key of the connected app used for JWT. Required for the JWT bearer flow.No
JWT Key FiletextBoxPath on the agent to the PEM private key matching the connected app certificate. Required this or JWT Private Key.No
JWT Private KeysecureBoxPEM private key contents. Staged to a temporary owner-only file and deleted when the step ends. Required this or JWT Key File.No
SFDX Auth URLsecureBoxRequired when Authentication Method is SFDX Auth URL. Obtain with: sf org display --target-org <alias> --verboseNo
API VersiontextBoxMetadata API version, for example 62.0. Leave empty to let the CLI use the org default.No
TracecheckBoxRun the Salesforce CLI with SF_LOG_LEVEL=debug for troubleshooting. Produces verbose output.No
Proxy HosttextBoxHTTP proxy host. Exported to the CLI as HTTP_PROXY and HTTPS_PROXY. SOCKS proxies are not supported by Salesforce CLI v2.No
Proxy PorttextBoxHTTP proxy port. Defaults to 80.No
Proxy UsernametextBoxProxy user.No
Proxy PasswordsecureBoxProxy password. Used only when Proxy Username is set.No
No ProxytextBoxComma-separated hosts that bypass the proxy. Exported as NO_PROXY.No

List Metadata ​

List the components of a given metadata type in the target org.

NameTypeDescriptionRequired
Salesforce CLI PathtextBoxPath to the sf executable. Defaults to sf on the agent PATH.Yes
Metadata TypetextBoxThe metadata type to list, for example CustomObject or Report. Type names are case-sensitive.Yes
FoldertextBoxRequired for folder-based components such as Dashboard, Document, EmailTemplate or Report.No
Result File PathtextBoxOptional path for the JSON results. Writing to a file makes it easier to build a package.xml manifest.No
TracecheckBoxRun the Salesforce CLI with SF_LOG_LEVEL=debug for troubleshooting. Produces verbose output.No
Authentication MethodselectBoxIf the authentication method is JWT Bearer, require Username, Consumer Key, and either JWT Key File or JWT Private Key; if SFDX Auth URL is selected, require SFDX Auth URL.Yes
UsertextBoxSalesforce username. Required for the JWT bearer flow.No
Consumer KeysecureBoxConsumer key of the connected app used for JWT. Required for the JWT bearer flow.No
JWT Key FiletextBoxPath on the agent to the PEM private key matching the connected app certificate. Required this or JWT Private Key.No
JWT Private KeysecureBoxPEM private key contents. Staged to a temporary owner-only file and deleted when the step ends. Required this or JWT Key File.No
SFDX Auth URLsecureBoxRequired when Authentication Method is SFDX Auth URL. Obtain with: sf org display --target-org <alias> --verboseNo
API VersiontextBoxMetadata API version, for example 62.0. Leave empty to let the CLI use the org default.No
Proxy HosttextBoxHTTP proxy host. Exported to the CLI as HTTP_PROXY and HTTPS_PROXY. SOCKS proxies are not supported by Salesforce CLI v2.No
Proxy PorttextBoxHTTP proxy port. Defaults to 80.No
Proxy UsernametextBoxProxy user.No
Proxy PasswordsecureBoxProxy password. Used only when Proxy Username is set.No
No ProxytextBoxComma-separated hosts that bypass the proxy. Exported as NO_PROXY.No

Retrieve ​

Retrieve unpackaged metadata or named packages into a metadata-format directory.

NameTypeDescriptionRequired
Salesforce CLI PathtextBoxPath to the sf executable. Defaults to sf on the agent PATH.Yes
Retrieve TypeselectBoxUnpackaged retrieves the components named in a package.xml manifest. Package retrieves named packages.Yes
Retrieve TargettextBoxThe root of the directory structure into which the metadata files are retrieved, for example codepkg.Yes
UnpackagedtextBoxRequired when Retrieve Type is Unpackaged. Path to the package.xml manifest listing the components to retrieve, for example codepkg/package.xml.No
Package NamestextBoxRequired when Retrieve Type is not Unpackaged. Comma-separated package names. Specify either Package Names or Unpackaged, not both.No
UnzipcheckBoxIf selected, the retrieved components are extracted. Otherwise they are left as a zip file in the Retrieve Target directory.No
Authentication MethodselectBoxIf the authentication method is JWT Bearer, require Username, Consumer Key, and either JWT Key File or JWT Private Key; if SFDX Auth URL is selected, require SFDX Auth URL.Yes
UsertextBoxSalesforce username. Required for the JWT bearer flow.No
Consumer KeysecureBoxConsumer key of the connected app used for JWT. Required for the JWT bearer flow.No
JWT Key FiletextBoxPath on the agent to the PEM private key matching the connected app certificate. Required this or JWT Private Key.No
JWT Private KeysecureBoxPEM private key contents. Staged to a temporary owner-only file and deleted when the step ends. Required this or JWT Key File.No
SFDX Auth URLsecureBoxRequired when Authentication Method is SFDX Auth URL. Obtain with: sf org display --target-org <alias> --verboseNo
API VersiontextBoxMetadata API version, for example 62.0. Leave empty to let the CLI use the org default.No
TracecheckBoxRun the Salesforce CLI with SF_LOG_LEVEL=debug for troubleshooting. Produces verbose output.No
Max PolltextBoxLegacy poll count. Combined with Poll Wait Time to derive the CLI --wait value in minutes.No
Poll Wait TimetextBoxLegacy poll interval in milliseconds. Combined with Max Poll to derive the CLI --wait value in minutes.No
Proxy HosttextBoxHTTP proxy host. Exported to the CLI as HTTP_PROXY and HTTPS_PROXY. SOCKS proxies are not supported by Salesforce CLI v2.No
Proxy PorttextBoxHTTP proxy port. Defaults to 80.No
Proxy UsernametextBoxProxy user.No
Proxy PasswordsecureBoxProxy password. Used only when Proxy Username is set.No
No ProxytextBoxComma-separated hosts that bypass the proxy. Exported as NO_PROXY.No