salesforce_security_impl_guide

CHAPTER 1
Security Overview
Salesforce is built with security as the foundation for the entire service. This foundation includes both protection for your data and
applications, and the ability to implement your own security scheme to reflect the structure and needs of your organization.
The security features of Salesforce provide both strength and flexibility. However, protecting your data is a joint responsibility between
you and salesforce.com. The security features in Salesforce enable you to empower your users to do their jobs efficiently, while also
limiting exposure of data to the users that need to act upon it. Implement security controls that you think are appropriate for the sensitivity
of your data. Your data is protected from unauthorized access from outside your company, and you should also safeguard it from
inappropriate usage by your users.
See the following topics to get more information about the various security components in Salesforce:
• Security Infrastructure
• Trust and Salesforce.com
• User Security Overview
• About Passwords
• User Authentication
• Connected Apps
• My Domain
• Identity Providers
• Network-Based Security
• CAPTCHA Security for Data Exports
• Session Security
• Securing Data Access
• Auditing
Security Infrastructure
One of the core features of a multi-tenant platform is the use of a single pool of computing resources to service the needs of many
different customers. Salesforce protects your organization's data from all other customer organizations by using a unique organization
identifier, which is associated with each user's session. Once you log in to your organization, your subsequent requests are associated
with your organization, using this identifier.
Salesforce utilizes some of the most advanced technology for Internet security available today. When you access the application using
a Salesforce-supported browser, Secure Socket Layer (SSL) technology protects your information using both server authentication and
data encryption, ensuring that your data is safe, secure, and available only to registered users in your organization.
In addition, Salesforce is hosted in a secure server environment that uses a firewall and other advanced technology to prevent interference
or access from outside intruders.
1