Enabling the Envestnet Tamarac Integration

Overview

The Evestnet Tamarac integration keeps your firm's information within your Tamarac instance in sync with your records within Practifi. This article outlines the steps to enable the Evestnet Tamarac integration within your organization. For more information about this integration, please consult our Using the Envestnet Tamarac Integration article.

**Note: This content is intended for system administrators and is technical in nature. Please discuss your integration installation plans with your Practifi Customer Support Team for their assistance.*

• Integration Summary
• Single Sign-On (SSO) Limitation
• Installation
  • Install the Tamarac Package
    • Set Up My Domain
    • Create a Self-Signed Certificate
    • Send Information to Tamarac
    • Install the Application
  • Configure Salesforce Settings
    • Remote Site Settings
    • Connected App and Permission Settings
    • Configure Custom Metadata Type
    • Enable SSO Authentication
    • Map Asset Fields
    • Adjust Field Mapping
    • Add Links to Practifi Client Record
  • Troubleshooting
    • Connection to Tamarac Failure
    • Reconfiguring After Password Change

Integration Summary

Our integration with Tamarac allows you to keep your Practifi Client, People, and Asset records in sync with Tamarac’s Households, Clients, and Accounts, as well as providing deep links from Practifi directly into Tamarac records. The information flow between systems functions as below:

Practifi	Sync	Tamarac
Client	🠜 Real-time 🠞	Household
People	🠜 Real-time 🠞	Client
Asset	🠜 Manual	Account

As part of the integration enablement process, Practifi Support will need to create a workflow so that the Asset Category, Source and Under Advice fields are updated on the Tamarac assets. 

Single Sign-On (SSO) Limitation

The Tamarac Salesforce app allows the user to Send and View a linked Household in the Tamarac Reporting portal from within Practifi, using Create in Tamarac and Open in Tamarac links. However, this feature is only accessible to a user login that meets the following two criteria:

1. Must have an Enterprise Administrator account in Tamarac and
2. Must be a Practifi user with the System Administrator Profile with the Customize Application permission assigned.

If meeting the above requirements leads to compliance issues, a client firm should deactivate this SSO feature by removing the Create in Tamarac and Open in Tamarac buttons. To view a Practifi client in Tamarac, users should open a separate browser tab and log on directly to their Tamarac account.

Please note: Password changes made to the user that authenticated the integration will cause issues within the integration. If the password was changed in either Practifi or Tamarac then the integration needs to be reconfigured. Please consult the Reconfiguring After Password Change section for the steps to reconfigure. 

Installation

Please note: The process of enabling the Tamarac integration is somewhat technical. If you have any difficulties, please contact your Customer Success Manager to help get you up and running.

Install the Tamarac Package

Set Up My Domain

1. From Practifi, select the Setup icon in the top-right corner select Setup from the drop-down menu.
   
2. In the Quick Find search bar, search for and select My Domain.
   
   
3. Under Choose Your Domain Name, enter your desired domain name and click Check Availability.
   
4. When you have a domain name, click Register the Domain. Once registration is complete, you will receive an email that says your domain is ready for testing.
5. Copy the complete URL of your domain; you'll provide this to Tamarac in the next step.

Create a Self-Signed Certificate

Tamarac advises that creating and sending this certificate to them is a one-off exercise, and the expiry date is not important. It does not need to be renewed upon expiry.

1. From Salesforce Setup, use the Quick Find search bar to search for and select Certificate and Key Management.
2. Click the Create Self-Signed Certificate button in the Certificates section.
3. Give the certificate a Name and then click out of the text box. The Unique Name field should automatically populate.
4. Then select Save to be taken back to the Certificates page, where you'll see the one you just created.
   
5. Select the Certificate Name to be taken to a page where you can download a copy.
   
6. Change the file extension of the downloaded certificate from .crt to .txt.

Send Information to Tamarac

You'll need to provide the following information to the Tamarac Service Team:

• The domain URL you created above
• The certificate file you downloaded above
• The Salesforce.com Organization ID for your Practifi instance. This is found on the Company Information page in Salesforce Setup.
   

Install the Application

1. In your web browser, enter the URL received from the Tamarac Account Management team.
2. Select the Get It Now button.
   
3. Log in to the Salesforce AppExchange using your Practifi login.
4. Select Install in Production.
   
5. Click Agree, then select Confirm & Install.
6. Log in to Practifi. You must use an administrator login for this step.
7. Under Install Tamarac Advisor View, select Install for All Users and click Install.
   Below is the link to install the Tamarac Advisor View version 1.81.
   "https://login.salesforce.com/packaging/installPackage.apexp?p0=04t41000002Ih3E"
   
   
   • Please note: Tamarac Advisor View version 1.81 has an important fix for reliable integration on Salesforce systems. Otherwise, an error similar to the below will be encountered when using the integration. If the wrong version 1.80 Tamarac app is installed, please follow the URL given above, which will take you to upgrade the app. There is no need to uninstall the previous version of the app.
     
8. In the Approve Third-Party Access window, select Yes, grant access to these third-party websites, and click Continue. The app will install.
   
9. When the app has been installed, select Done on the Installation Complete page

Configure Salesforce Settings

Remote Site Settings

1. In the Quick Find search bar in Salesforce Setup, search for and select Remote Site Settings.
   
2. Under All Remote Sites, select Edit under the Action column.
   
3. Under Remote Site Edit, provide the following information:
   • Remote Site Name - Leave as the default value.
   • Remote Site URL - https://advisorapi.tamaracinc.com
   • Description - Optional
     
4. Select Save to finalize this change.

Connected App and Permission Settings

1. In the Quick Find search bar in Salesforce Setup, search for and select Identity Provider.
   
2. Click Enable Identity Provider.
   
3. Select the self-signed certificate you created earlier, then click Save.
   
4. In the Quick Find search bar in Salesforce Setup, search for and select Manage Connected Apps.
   
5. Click the Edit link for the Tamarac connected app.
   
6. Under SAML Service Provider Settings, complete the following fields:
   • Entity Id - https://portal.tamaracinc.com
   • ACS URL - https://integrationservices.tamaracinc.com/genericsso.aspx
   • Subject Type - Select User ID
   • Name ID Format - Leave as the default value.
   • Issuer - Enter the Salesforce domain URL you created previously.
   • Idp Certificate - Select the self-signed certificate you created previously.
     
7. Select Save, and you'll return to the Connected Apps page.
8. Click on the Tamarac app's name to be taken to the Manage Connected Apps page. Look for SAML Login Information and copy the IdP-Initiated Login URL. You will need this to set up the custom metadata later.
   
9. Set which Salesforce profiles should have SSO access from Salesforce to Tamarac:
   1. On the Manage Connected Apps page, look for Profiles.
   2. Click Manage Profiles.
   3. Select all Practifi user profiles, along with System Administrator, then click Save.
10. Ensure Custom Setting Permissions the Profile the Users are assigned to are enabled for Tamarac.
    1. Note the Profile Name(s) of the Users requiring access to Tamarac.
    2. In the Quick Find search bar in Salesforce Setup, search for and select Users.
    3. Locate the Profiles section.
    4.  From the list of Profiles, choose the required Profile name. For example, the System Administrator profile.
    5. From the Profiles panel, skip to the Enabled Custom Setting Definitions Access section by selecting its sublink.
       
    6. Select Edit on the Enabled Custom Setting Definitions Access section.
    7. Ensure the Tamarac.TamAdvisor.Tamarac.<etc> Custom Setting Definitions are listed in the Enabled column, and click Save.
       
       •  

Configure Custom Metadata Type

1. In the Quick Find search bar in Salesforce Setup, search for and select Custom Metadata Types.
   
2. Under All Custom Metadata Types, select Advisors View Setting under the Label column.
   
3. Under Custom Metadata Type Detail, select Manage Advisor View Settings.
   
4. Under Advisor View Settings, select Edit.
   
5. Provide the following information:
   • Enterprise ID - This is your Tamarac Enterprise ID. Contact the Tamarac Service Team if you need assistance with finding your Enterprise ID.
   • Local IdP Initiated Login URL - Copy and paste the IdP-initiated Login URL from the Connected App.
   • Override Base URL- Copy the base URL from the Base URL field to the left and add /api to the URL.
     
6. Select Save to finalize this change.
7. Practifi Support will need to create a workflow so that the Asset Category, Source and Under Advice fields are updated on the Tamarac assets. 

Enable SSO Authentication

Please note: As outlined above, the Tamarac Salesforce app supports users sending and viewing a linked Household in the Tamarac Reporting portal from within Practifi. However, this feature is only accessible to a user login that meets the following two criteria:

1. Must have an Enterprise Administrator account in Tamarac and
2. Must be a Practifi user of System Administrator Profile with the Customize Application permission assigned.

If meeting the above requirements leads to compliance and security issues for the firm, a client firm should not activate this SSO feature and not install the Tamarac links. To view a Practifi client in Tamarac, users should open a separate browser tab, log in directly to their Tamarac account and search for the client.

If you wish to proceed:

1. Notify the Tamarac Service Team that your Practifi instance is ready for SSO integration. The team will configure their systems to allow SSO to take place.
2. When they inform you that the SSO integration is complete, log into Practifi and navigate to Salesforce Setup.
3. Select the Tamarac app from the App Launcher in the upper left-hand corner.
   
4. Select the Configuration tab.
5. To authenticate the Tamarac Reporting credentials for Salesforce, enter your Tamarac Reporting credentials in the first section. These credentials must be for an Enterprise Administrator, and they must have the following settings in Tamarac:
   
6. After entering the Tamarac Reporting credential for the user, select Save.
   
7. To authenticate the Salesforce Credentials for Tamarac Reporting, the credentials must be for a user with the System Administrator profile with the Customize Application permission assigned. They must be the same user in Tamarac.
   
8. In the Salesforce OAuth Settings section of Tamarac, click Change Salesforce Login and enter your Salesforce credentials. Click Allow.
   

Please note: Password changes made to the user that authenticated the integration will cause issues within the integration. If the password was changed in either Practifi or Tamarac then the integration needs to be reconfigured. Please consult the Reconfiguring After Password Change section for the steps to reconfigure.

Map Asset Fields

By default, the Tamarac package is configured to suit the Salesforce data model. However, Out-of-the-Box, Practifi supports only a subset of the fields offered by the Tamarac App. Any additional mapping will require custom fields and might not be supported per our standard support arrangement.

Verify the following values under the Manage Mappings subtab.

1. Click the Manage Mappings tab on the Tamarac app, and click Edit on the rows listed.
   
2. For the Client - Contact row, validate 7 fields only OTTB:
   
   • Tamarac Entity - Client
   • Salesforce Object - Contact
   • For the Client Fields:
     1. CRM Id - Contact ID
     2. Email - Email
     3. First Name - First Name
     4.  Household CRM Id - Primary Entity
     5.  Last Name - Last Name
     6.  Tamarac Id - Tamarac Advisor View ID
     7. Updated by Tamarac Integration - Updated by Tamarac Integration
3. For the Event - Task row, validate 1 field only OTTB:
   
   • Tamarac Entity - Event
   • Salesforce Object -Task
   • For the Event fields:
     •  Is Active - Checked
     •  Client Email Address Changes - Checked
     •  Client Household Membership Changed - Checked
4. For the Household - Entity row, validate 13 fields only OTTB:
   
   • Tamarac Entity - Household
   • Salesforce Object - Entity
   • For the Household Fields:
     • CRM Id - Entity ID
     • City - Billing City
     • Managed Value - Managed Value
     • Management Fee - Mgmt Fee
     • Name - Entity Name
     • State - Billing State/Province
     • State of Primary Residence - State of Primary Residence
     • Street - Billing Street
     • Tamarac Id -Tamarac Advisor View Id
     • Total Value - Total Value
     • Unmanaged Value - Unmanaged Value
     • Updated by Tamarac Integration - Updated by Tamarac Integration
     • Zip - Billing Zip/Postal Code

Adjust Field Mapping

To see Tamarac Assets (Financial Accounts) in Practifi, we need to adjust the field mapping to match that used in Practifi.

1. Click Del next to Financial Account and confirm the deletion in the pop-up window.
   
2. Click the New Mapping button in the top-right corner to go to the Configure Object Mapping page.  
3. Complete the new mapping as follows:
   1. In the dropdown header, select the following objects:
      • Tamarac Entity - Financial Account
      • Salesforce Object - Asset/Liability
   2. For the Financial Account Fields, validate 9 fields only OTTB:
      • Account Name - Asset/Liability Name
      • Account Number - Account Number
      • Account Type - Notes
      • CRM Id - Record ID
      • Managed Value - Current Value
      • Household CRM Id - Client
      • Tamarac Id - External Id 4
      • Total Value - Value
      • Updated by Tamarac Integration - Updated by Tamarac Integration
4. Select the Save button.
5. Select the Send Mappings button to transfer the mappings across to the Tamarac server.

Add Links to Practifi Client Record

The Tamarac integration is visible as two links under the Actions menu on the Practifi Client record.

1. While on the Client Record page, select the Setup icon in the top-right corner and select Edit Page from the drop-down menu.
   
2. Click on the section displaying the name of the Client, located under the icons.
   
3. On the right-hand column, on the Page > Highlights Panel section, select the Add Action button and select the search bar located under Actions.
   
4. Search for Create in Tamarac and select this option from the drop-down menu. 
5. Click Done when selected.
6. Repeat the steps searching for Open in Tamarac, and click Done.
   
7. Select the Save button to finalize these additions.
   
8. Return to the Client Record page using the back arrow in the top-left corner.
   
9. The new links for Tamarac appear under the dropdown arrow located in the record side panel. You may need to refresh your browser to see this change.
   

Troubleshooting

Connection to Tamarac Failure

If no response to clicking on the Tamarac buttons is found, there may be an issue with the Salesforce login and the connection to the Tamarac system. To troubleshoot this error, please follow these steps:

1. Open an incognito tab on the browser. This is due to the Salesforce credential information for the non-working credentials being retained in the browser.
2. Open the Tamarac portal using https://portal.tamaracinc.com/salesforcesettingdetails.aspx and log in to the Tamarac portal using your Tamarac credentials, not your Salesforce credentials.
3. Select the Change Salesforce Login button on the top right.
   
4. A Salesforce login panel will appear. Enter the credentials of the Salesforce user who should be enrolled against the Tamarac account.

Reconfiguring After Password Change

Password changes made to the user that authenticated the integration will cause issues within the integration. If the password was changed in either Practifi or Tamarac then the integration needs to be reconfigured using the following steps.

In Practifi:

1. Sign in to Practifi and navigate to the Tamarac App's Configuration Page.

2. On the top portion, reenter the Email and Password for Tamarac Reporting in the boxes available and select Save.

3. Once these steps are completed, sign out of Practifi.

In Tamarac:

1. Sign into Tamarac.

2. In the Browser search bar, enter the following URL: https://portal.tamaracinc.com/salesforcesettingdetails.aspx

3. On this page click the "Change Salesforce Login" button on the right of the page.

4. A Salesforce login page will pop up. Enter the Practifi Credentials and press Save.

5. You may be presented with another Popup asking to "Allow" Tamarac to access Salesforce through the API. Click Allow.

6. Next, sign back into Practifi and head to the Tamarac Manage Mapping page. Click the Send Mapping button.