salesforce_security_impl_guide

Configuring Salesforce Security Features
Setting Password Policies
Field
Obscure secret answer for password resets
Description
This feature hides answers to security questions as you type. The
default is to show the answer in plain text when you answer a
security question, for example when resetting your password.
Note: If your organization uses the Microsoft Input
Method Editor (IME) with the input mode set to Hiragana,
when you type ASCII characters they’re converted into
Japanese characters in normal text fields. However, the
IME does not work properly in fields with obscured text.
If your organization’s users cannot properly enter their
passwords or other values after enabling this feature,
disable the feature.
Require a minimum 1 day password lifetime
When you select this option, passwords can’t be changed more
than once in a 24 hour period.
3. Customize the forgotten password and locked account assistance information.
Note: This setting is not available for Self-Service portals, Customer Portals, or partner portals.
Field
Message
Help link
Description
When set, this custom message appears in the Account Lockout
email and at the bottom of the Confirm Identity screen for users
resetting their passwords. You can customize it with the name
of your internal help desk or a system administrator. For the
lockout email, the message only appears for accounts that need
an administrator to reset them. Lockouts due to time restrictions
get a different system email message.
If set, this link displays with the text defined in the Message
field. In the Account Lockout email, the URL displays just as it is
typed into the Help link field, so the user can see where
the link takes them. This is a security feature because the user is
not within a Salesforce organization.
On the Confirm Identity password screen, the Help link
URL combines with the text in the Message field to make a
clickable link. Security isn’t an issue since the user is in a Salesforce
organization when changing passwords.
Valid protocols:
• http
• https
• mailto:
80