We have a connected app that we will be selling to customers in the form of a managed package.
Once the customers have purchased the managed package, it will be installed into their org. They will then be able to assign our app's permission set to users who they want to have access to our app.
We maintain user records in our own database, and we need to provision users in this database. Is there any way to set up a HTTP callback that gets called when a permission set is assigned to or unassigned from a SFDC user?
If not, what's the best way to handle this? We have a permissions model that references objects not in SFDC, and these permissions must be configured from within our app, so waiting until a user logs in to provision their account isn't really feasible.