salesforce_security_impl_guide

More documents

Recommendations

Info

Contents Creating and Editing Permission Set List Views . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26 Editing Permission Sets from a List View . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27 Working in a Permission Set's Overview Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27 About App and System Settings in Permission Sets . . . . . . . . . . . . . . . . . . . . . . . . . . . 28 Permission Set Assigned Users Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28 Searching Permission Sets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 Viewing and Editing Assigned Apps in Permission Sets . . . . . . . . . . . . . . . . . . . . . . . . 30 Assigning Custom Record Types in Permission Sets . . . . . . . . . . . . . . . . . . . . . . . . . . 30 Enable Custom Permissions in Permission Sets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31 Manage Permission Set Assignments . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31 Object Permissions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33 “View All” and “Modify All” Permissions Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34 Comparing Security Models . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34 Field-Level Security Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36 Setting Field Permissions in Permission Sets and Profiles . . . . . . . . . . . . . . . . . . . . . . . 37 Setting Field-Level Security for a Single Field on All Profiles . . . . . . . . . . . . . . . . . . . . . . 37 Field Permissions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38 User Permissions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38 Desktop Client Access Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38 Working with Desktop Client Access in the Enhanced Profile User Interface . . . . . . . . . . . 39 Viewing and Editing Desktop Client Access in the Original Profile User Interface . . . . . . . 40 Setting Login Restrictions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40 Restricting Login IP Ranges in the Enhanced Profile User Interface . . . . . . . . . . . . . . . . . 42 Restricting Login IP Addresses in the Original Profile User Interface . . . . . . . . . . . . . . . . 43 Viewing and Editing Login Hours in the Enhanced Profile User Interface . . . . . . . . . . . . . 44 Viewing and Editing Login Hours in the Original Profile User Interface . . . . . . . . . . . . . . 44 Managing Salesforce Classic Permissions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45 Organization-Wide Sharing Defaults Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45 Setting Your Organization-Wide Sharing Defaults . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46 External Organization-Wide Defaults Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47 Setting the External Organization-Wide Defaults . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48 Disabling External Organization-Wide Defaults . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49 Sharing Rules Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49 Criteria-Based Sharing Rules Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50 Creating Lead Sharing Rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51 Creating Account Sharing Rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52 Creating Account Territory Sharing Rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53 Creating Contact Sharing Rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54 Creating Opportunity Sharing Rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55 Creating Case Sharing Rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56 Creating Campaign Sharing Rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57 Creating Custom Object Sharing Rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58 Creating User Sharing Rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59 Sharing Rule Categories . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60
Contents Editing Lead Sharing Rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61 Editing Account Sharing Rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62 Editing Account Territory Sharing Rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62 Editing Contact Sharing Rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63 Editing Opportunity Sharing Rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63 Editing Case Sharing Rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64 Editing Campaign Sharing Rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65 Editing Custom Object Sharing Rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65 Editing User Sharing Rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66 Sharing Rule Considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67 Recalculating Sharing Rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68 Asynchronous Parallel Recalculation of Sharing Rules . . . . . . . . . . . . . . . . . . . . . . . . . 68 User Sharing Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69 Understanding User Sharing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69 Setting the Organization-Wide Sharing Defaults for User Records . . . . . . . . . . . . . . . . . 70 Sharing User Recods . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71 Restoring User Visibility Defaults . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71 Roles Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72 About Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72 Creating and Editing Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73 Group Member Types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74 Viewing All Users in a Group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75 Granting Access to Records . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76 Chapter 3: Configuring Salesforce Security Features . . . . . . . . . . . . . . . . . . . . . . . . . 78 Setting Password Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78 Expiring Passwords . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81 Restricting Login To Trusted IP Ranges for Your Organization . . . . . . . . . . . . . . . . . . . . . . . . 81 Setting Session Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83 Setting Two-Factor Authentication Login Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87 Adding a Time-Based Token . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87 Removing or Resetting Time-Based Token Keys . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88 Chapter 4: Enabling Single Sign-On . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89 Chapter 5: Monitoring Your Organization's Security . . . . . . . . . . . . . . . . . . . . . . . . . . 92 Monitoring Login History . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92 Tracking Field History . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93 Tracking Field History for Standard Objects . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94 Tracking Field History for Custom Objects . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95 Methods for Archiving Field History . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95 Disabling Field History Tracking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96 Monitoring Setup Changes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96 Chapter 6: Security Tips for Apex and Visualforce Development . . . . . . . . . . . . . . . . 100
Page 1 and 2: Security Implementation Guide Versi
Page 3: CONTENTS Chapter 1: Security Overvi
Page 7 and 8: CHAPTER 1 Security Overview Salesfo
Page 9 and 10: Security Overview User Security Ove
Page 11 and 12: Security Overview Custom Permission
Page 13 and 14: Security Overview CAPTCHA Security
Page 15 and 16: Security Overview Auditing • Role
Page 17 and 18: Securing and Sharing Data Revoking
Page 19 and 20: Securing and Sharing Data Viewing P
Page 21 and 22: Securing and Sharing Data Cloning P
Page 23 and 24: Securing and Sharing Data App and S
Page 25 and 26: Securing and Sharing Data Working w
Page 27 and 28: Securing and Sharing Data Enable Cu
Page 29 and 30: Securing and Sharing Data Assigning
Page 31 and 32: Securing and Sharing Data Creating
Page 33 and 34: Securing and Sharing Data Editing P
Page 35 and 36: Securing and Sharing Data Searching
Page 37 and 38: Securing and Sharing Data Enable Cu
Page 39 and 40: Securing and Sharing Data Object Pe
Page 41 and 42: Securing and Sharing Data Comparing
Page 43 and 44: Securing and Sharing Data Setting F
Page 45 and 46: Securing and Sharing Data Working w
Page 47 and 48: Securing and Sharing Data Setting L
Page 49 and 50: Securing and Sharing Data Restricti
Page 51 and 52: Securing and Sharing Data Managing
Page 53 and 54: Securing and Sharing Data External
Page 55 and 56:
Securing and Sharing Data Disabling
Page 57 and 58:
Securing and Sharing Data Creating
Page 59 and 60:
Page 61 and 62:
Page 63 and 64:
Page 65 and 66:
Page 67 and 68:
Securing and Sharing Data Editing L
Page 69 and 70:
Securing and Sharing Data Editing C
Page 71 and 72:
Securing and Sharing Data Editing C
Page 73 and 74:
Securing and Sharing Data Sharing R
Page 75 and 76:
Securing and Sharing Data User Shar
Page 77 and 78:
Securing and Sharing Data Sharing U
Page 79 and 80:
Page 81 and 82:
Securing and Sharing Data Viewing A
Page 83 and 84:
Securing and Sharing Data Granting
Page 85 and 86:
Configuring Salesforce Security Fea
Page 87 and 88:
Page 89 and 90:
Page 91 and 92:
Page 93 and 94:
Page 95 and 96:
CHAPTER 4 Enabling Single Sign-On S
Page 97 and 98:
Enabling Single Sign-On • Before
Page 99 and 100:
Monitoring Your Organization's Secu
Page 101 and 102:
Page 103 and 104:
Page 105 and 106:
Page 107 and 108:
Security Tips for Apex and Visualfo
Page 109 and 110:
Page 111 and 112:
Page 113 and 114:
INDEX A Access about 10 revoking 11
Page 115 and 116:
Index Profiles (continued) object p
show all

salesforce_security_impl_guide

Create successful ePaper yourself

Delete template?

Save as template?