11.01.2015 Views

salesforce_security_impl_guide

salesforce_security_impl_guide

salesforce_security_impl_guide

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Security Overview<br />

Edit Custom Permissions<br />

Edit Custom Permissions<br />

Edit custom permissions that give users access to custom processes or apps.<br />

1. From Setup, click Develop > Custom Permissions.<br />

2. Click Edit next to the permission that you need to change.<br />

3. Edit the permission information as needed.<br />

• Label—the permission label that appears in permission sets<br />

• Name—the unique name that’s used by the API and managed packages<br />

• Description—optionally, a description that explains what functions the permission<br />

grants access to, such as “Approve time-off requests.”<br />

• Connected App—optionally, the connected app that’s associated with this permission<br />

4. Click Save.<br />

EDITIONS<br />

Available in:<br />

• Enterprise<br />

• Performance<br />

• Unlimited<br />

• Developer<br />

USER PERMISSIONS<br />

To edit custom permissions:<br />

• “Customize Application”<br />

My Domain<br />

Using My Domain, you can define a custom Salesforce domain name. A custom domain name helps you better manage login and<br />

authentication for your organization in several key ways.<br />

• Highlight your business identity with your unique domain URL.<br />

• Brand your login screen and customize right-frame content.<br />

• Block or redirect page requests that don’t use the new domain name.<br />

• Access increased support for single sign-on.<br />

• Set custom login policy and determine how users are authenticated.<br />

• Let users select an alternate identity provider from the login page.<br />

For more information, see “My Domain Overview” in the Salesforce online help.<br />

Identity Providers<br />

An identity provider is a trusted provider that enables you to use single sign-on to access other websites. A service provider is a website<br />

that hosts applications. You can enable Salesforce as an identity provider, then define one or more service providers, so your users can<br />

access other applications directly from Salesforce using single sign-on. This can be a great help to your users: instead of having to<br />

remember many passwords, they will only have to remember one. Plus, the applications can be added as tabs to your Salesforce<br />

organization, which means users won’t have to switch between programs.<br />

For more information, see “About Identity Providers and Service Providers” in the Salesforce online help.<br />

Network-Based Security<br />

User authentication determines who can log in, while network-based <strong>security</strong> limits where they can log in from and when. Use<br />

network-based <strong>security</strong> to limit the window of opportunity for an attacker by restricting the origin of user logins. Network-based <strong>security</strong><br />

can also make it more difficult for an attacker to use stolen credentials.<br />

6

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!