Get back to your work
Search the message you saw, understand what stopped the action, and follow the safest recovery path for the canvas and Salesforce.
Common recovery paths
Start with what you see
Sign in and prerequisites
Connection and setup
“Install Org Loom in your Salesforce org”
What happened: The Salesforce org does not have the Org Loom managed package and External Client App needed to complete the connection.
- Ask a Salesforce admin to install the package in the same production, sandbox, or My Domain org you are connecting.
- Choose Install for All Users.
- In External Client App Manager, set Org Loom’s IP Relaxation policy to Relax IP restrictions, then retry sign-in.
Who can fix this Salesforce admin
Review the package installation steps“Your Salesforce admin needs to grant you Org Loom access”
What happened: Salesforce sign-in succeeded, but the connected user does not have a directly assigned Orgloom User or Orgloom Admin permission set.
- Open the Salesforce user record and add Orgloom User under Permission Set Assignments.
- Click Save. Assign the permission set directly, not only through a Permission Set Group.
- Wait a few seconds, then choose the Org Loom continue action again.
Who can fix this Salesforce admin, or a user with Manage Users
Assign the required permission set“Salesforce couldn’t complete the connection”
What happened: Salesforce accepted the sign-in but did not let Org Loom exchange the one-time authorization code. The code may have expired, or the Org Loom External Client App may be enforcing an incompatible IP policy.
- Start a fresh connection and complete the Salesforce approval without using Back or reloading the approval page.
- If it repeats, ask a Salesforce admin to check Org Loom under External Client App Manager and confirm Relax IP restrictions.
Who can fix this You first, then a Salesforce admin
Check the OAuth IP policy“Org Loom couldn’t reach your org’s encryption setup”
What happened: Sign-in succeeded, but the managed package could not initialize the Salesforce-side key service required to save and open encrypted canvases.
- Retry once after about a minute in case Salesforce was temporarily unavailable.
- If it repeats, ask a Salesforce admin to update the Org Loom package and reassign the current Org Loom permission set so its Apex class access is current.
Who can fix this Salesforce admin
Understand the saved-canvas encryption boundary“Reconnect Salesforce” or “Salesforce session expired”
What happened: The Salesforce credential for the active connection expired or is no longer available. The canvas can remain open, but Salesforce reads and writes must pause.
- Choose the reconnect or sign-in-again action.
- Confirm the same Salesforce org and user before approving access.
- Return to the interrupted action and retry it once.
Who can fix this You
Reconnect an expired Salesforce session
Load the right data
Finding and importing records
I cannot find an object, field, or record I can see elsewhere in Salesforce
What happened: Org Loom reads Salesforce as the connected user. Object access, field-level security, record sharing, and the current filter determine what can appear.
- Confirm the connected Salesforce user and org.
- Remove narrow filters and retry the browse or schema view.
- If the item is still missing, ask a Salesforce admin to check that user’s object, field, and record access.
Who can fix this You or a Salesforce admin
Review how Salesforce permissions applyBrowse or import says the records were rolled back
What happened: A later part of the load failed, so Org Loom removed records already added by that attempt instead of leaving a half-finished import on the canvas.
- Keep the selected records or files in place.
- Reconnect Salesforce if the message mentions the session.
- Retry the load. If the same object fails repeatedly, reduce the selection and note the failing object for support.
Who can fix this You, or support if it repeats
Review Browse records limits and recovery“Malformed or unclosed quoted field” or “Duplicate header”
What happened: Org Loom could not parse the CSV consistently. A quoted value may be missing its closing quote, or two columns may use the same header.
- Open the file in a spreadsheet or text editor and repair the named row or header.
- Give every column a unique, nonblank header.
- Export a fresh CSV and add it again.
Who can fix this You
Prepare CSV files for importThe CSV is over the canvas limit
What happened: A canvas holds up to 500 record cards.
- For canvas work, split the dataset into smaller focused canvases.
- For linked or multi-file imports, keep related parent and child rows together.
- For very large jobs that do not need canvas review, use Salesforce Data Loader.
Who can fix this You
Review CSV import guidanceA CSV lookup value is not a Salesforce ID
What happened: A column mapped to a Salesforce lookup contains a name, email, or another value instead of a Salesforce ID.
- Use the related record's Salesforce ID in the lookup column, or leave the value blank.
- To connect drafts, keep matching-key columns unmapped, load the records, and create their connections on the canvas.
Who can fix this You
Connect imported records on the canvas
Resolve before retrying
Upload and validation
“Required field is empty”
What happened: A new record is missing a value Salesforce requires. For a required lookup, the record may need a related parent card or an existing Salesforce record rather than a generated text value.
- Open the named card and field.
- Enter an allowed value, or add and connect the required parent record for a lookup.
- Run the upload review again.
Who can fix this You, or a Salesforce admin if the field should not be required
Review and correct preflight findings“Invalid picklist value”
What happened: The staged value is not available for the field and selected record type. It may be inactive, excluded by a restricted picklist, or unavailable under a controlling-field combination.
- Open the card and choose one of the values Org Loom currently offers.
- For many cards, use Bulk edit to replace the invalid value.
- If the value should be valid, ask a Salesforce admin to review the picklist and record-type assignment.
Who can fix this You or a Salesforce admin
Replace a value across many recordsA Salesforce validation rule failed
What happened: The connected org rejected the record under one of its business rules. Org Loom can evaluate many rules in the editor, but Salesforce is authoritative during upload.
- Open the failed card and its Validation rules section.
- Correct the fields named by the Salesforce message.
- If the condition is unclear or depends on automation not shown in Org Loom, ask the rule’s Salesforce admin.
Who can fix this You or the Salesforce rule owner
Edit the failing record“DUPLICATES_DETECTED”
What happened: A Salesforce duplicate rule matched the record to an existing record.
- Review the matched record before retrying.
- Load and update the existing record when it represents the same entity, or change the new record when the match is accidental.
- Use Upload anyway only when the duplicate is intentional and Salesforce allows the override.
Who can fix this You, or a Salesforce admin for the rule
Work with an existing Salesforce record“These fields will be skipped”
What happened: The connected Salesforce user cannot create or update one or more fields included in the staged record.
- If the values are required, ask a Salesforce admin to grant the appropriate field access and reopen the upload review.
- Otherwise, continue without those fields. Omitting a field does not erase its existing Salesforce value.
- For a new record, confirm the omitted field is not required by Salesforce.
Who can fix this You or a Salesforce admin
Review the Salesforce permission boundaryA record is “part of a reference cycle”
What happened: New records depend on one another in a circle, so no record can be created first to provide the Salesforce ID needed by the next lookup.
- Review the links between the named cards.
- Remove or postpone one lookup so the records form a parent-first order.
- Upload the records, then add the postponed relationship in a later update if needed.
Who can fix this You
Review relationships between canvas recordsSome records uploaded and others failed
What happened: Salesforce accepted some records and rejected others. The successful records are already committed even though the overall job was not fully successful.
- Keep the result open and review the successful and failed groups separately.
- Correct only the failed records.
- Use the retry action for the failed work. Do not re-upload a complete insert file unless you have removed the rows that already succeeded.
Who can fix this You
Review the upload result“Connection dropped mid-upload”
What happened: The browser did not receive the complete result. Salesforce may still have saved some records, so blindly starting a new insert could duplicate them.
- Wait for Org Loom to reconcile the attempt.
- If the message says records were already saved, leave them marked as uploaded.
- Choose Retry to finish only the unresolved records. If Org Loom cannot determine the outcome, stop and contact support before creating a new upload.
Who can fix this You, or support for an unknown outcome
Review the upload flow
Org Loom controls
Workspace, permissions, and billing
A feature is visible but unavailable or says I do not have permission
What happened: Team permissions can restrict an Org Loom action even when Salesforce would allow it. Salesforce permissions can also block the action after the workspace permission is granted.
- Ask a workspace admin to check your member permission for the named feature.
- If the permission is already granted, confirm the workspace feature setting is enabled.
- If Org Loom allows the action but Salesforce rejects it, ask a Salesforce admin to check the connected user.
Who can fix this Workspace admin or Salesforce admin
Manage Team member permissions“Salesforce org is not allowed”
What happened: The Team workspace filters Salesforce orgs, and this org is not on the applicable workspace allowlist.
- Ask a workspace admin to find the org’s Current My Domain URL in Salesforce Setup.
- The admin opens the account and workspace menu, selects Settings, opens the Workspace tab, and adds that base URL under Salesforce org filtering.
- Open Salesforce connections and sign in through Production, Sandbox, or the org’s Current My Domain URL.
Who can fix this Workspace admin
Add an allowed Salesforce org“At seat cap”
What happened: Active members and outstanding invitations already use the Team workspace’s paid seats.
- Revoke an unused invitation or remove a member who no longer needs access.
- Otherwise, open Billing, increase the Team seat quantity, and confirm the change.
- Create the invitation again after the updated seat count appears.
Who can fix this Workspace admin or owner
Manage Team seatsThe workspace is inactive or the canvas actions are locked
What happened: The workspace does not currently have an active paid plan, or its subscription needs attention. Org Loom keeps the workspace visible but blocks paid canvas actions.
- Open Workspace and check the Billing tab for the current plan and subscription status.
- Choose a paid plan, update the payment method, or open the billing portal if prompted.
- Return to the canvas after Billing confirms the active plan.
Who can fix this Workspace owner
Review workspace billing
Guided and assisted work
Migration and AI
Migration says records cannot be uploaded yet
What happened: One or more records still need a destination action, a unique existing-record match, a required destination value, or a retry after a destination search failed.
- Open Review and apply.
- In the record step, choose Create new or complete the Update existing match for every unresolved record.
- Retry failed destination searches, then resolve every required field difference before returning to Upload.
Who can fix this You, or a Salesforce admin for destination access
Resolve migration record decisionsA migration field is “unavailable through this destination connection”
What happened: The destination connection did not return that field. The field may not exist in the destination, or it may be hidden from the connected user by field-level security. Org Loom does not guess which case applies.
- Ask a Salesforce admin whether the field exists and whether the destination user should see it.
- If the value belongs in another compatible field, map it there.
- Otherwise drop that source value from the migration. Dropping it does not delete data already in the destination.
Who can fix this You or a Salesforce admin
Resolve destination differences“This workspace has used its monthly AI allowance”
What happened: The workspace has no included AI tokens remaining for the current calendar month and no available AI-credit balance.
- Ask a workspace admin to review the AI usage area in Billing.
- Buy additional workspace AI credits or wait for the allowance to reset on the first day of the next month in UTC.
Who can fix this Workspace admin
Manage AI usage and creditsGenerate with AI is unavailable or stops before a proposal appears
What happened: The request was stopped by a workspace setting, member permission, expired Salesforce session, input limit, temporary service problem, or network failure.
- Follow the specific message shown. Reconnect Salesforce if it mentions the session.
- Ask a workspace admin to confirm Generate with AI is enabled and permitted for your member.
- Shorten prompts over 2,000 characters, select no more than 10 object types, and retry a temporary network failure once.
Who can fix this You, a workspace admin, or support if it repeats
Check Generate with AI prerequisitesNo matching issue
Try fewer words or search the exact Salesforce error code. If the issue continues, collect the details below and contact support.
Still blocked?
Send support a useful report
Include the action, exact message, approximate time, Salesforce org, affected object, record count, and any request ID. Leave out passwords, tokens, cookies, and sensitive record values.