salesforce_security_impl_guide

Configuring Salesforce Security Features
Expiring Passwords
4. Specify an alternative home page for users with the “API Only User” permission. After completing user management tasks such as
resetting a password, API-only users are redirected to the URL specified here, rather than to the login page.
5. Click Save.
Expiring Passwords
To expire passwords for all users, except those with the “Password Never Expires” permission:
1. From Setup, click Security Controls > Expire All Passwords.
2. Select Expire all user passwords .
3. Click Save.
The next time each user logs in, he or she will be prompted to reset his or her password.
Tips on Expiring Passwords
Consider the following when expiring passwords:
• After you expire passwords, users might need to activate their computers to successfully log
in to Salesforce.
• You can expire passwords for all users any time you want to enforce extra security for your
organization.
• Expire all user passwords does not affect Self-Service portal users, because they
are not direct Salesforce users.
EDITIONS
Available in:
• Professional
• Enterprise
• Performance
• Unlimited
• Developer
• Database.com
USER PERMISSIONS
To expire all passwords:
• “Manage Internal Users”
Restricting Login To Trusted IP Ranges for Your Organization
Note:
Who Sees What: Organization Access
Watch how you can restrict login through IP ranges and login hours.
EDITIONS
Available in all editions
To help protect your organization’s data from unauthorized access, you can specify a list of IP
addresses from which users can log in without receiving a login challenge:
1. From Setup, click Security Controls > Network Access.
2. Click New.
3. Enter a valid IP address in the Start IP Address field and a higher IP address in the
End IP Address field.
The start and end addresses define the range of allowable IP addresses from which users can
log in. If you want to allow logins from a single IP address, enter the same address in both fields.
For example, to allow logins from only 125.12.3.0, enter 125.12.3.0 as both the start and end addresses.
USER PERMISSIONS
To view network access:
• “Login Challenge
Enabled”
To change network access:
• “Manage IP Addresses”
The start and end IP addresses in an IPv4 range must include no more than 33,554,432 addresses (2 25 , a /7 CIDR block). For example,
the following ranges are valid:
• 0.0.0.0 to 1.255.255.255
• 132.0.0.0 to 132.255.255.255
• 132.0.0.0 to 133.255.255.255
81