Articles tagged “security”

85 articles

• Agentforce GenAI and Models API Architecture

  Invoke foundation LLMs natively in Apex and REST via the Models API, protected by the Einstein Trust Layer with zero data retention and PII masking.

• ApexPage Metadata Type in SFDX & Metadata API

  Configure and deploy Visualforce pages using the ApexPage metadata type. Learn CSRF token settings, Lightning Experience compatibility, PDF rendering, and SOQL.

• AuthProvider Metadata Type Reference

  Configure and deploy AuthProvider (.authprovider-meta.xml) metadata for OpenID Connect SSO, PKCE, Apex or Flow Registration Handlers, and Named Credentials.

• BlacklistedConsumer Metadata Type in SFDX

  Configure and deploy BlacklistedConsumer metadata in SFDX to block unauthorized connected apps and OAuth consumers across enterprise orgs and pipelines.

• Certificate Metadata Type for SAML, JWT & Mutual TLS

  Manage self-signed and CA-signed X.509 certificates using the Certificate metadata type in SFDX. Learn .crt CSR workflows, keySize, and Tooling API queries.

• CommunitiesSettings Metadata Type in SFDX

  Deploy and manage CommunitiesSettings metadata in Salesforce SFDX to enable Experience Cloud sites, partner user visibility, and guest user security.

• ConnectedApp Metadata Type and OAuth Security Guide

  Configure, deploy, and audit Salesforce ConnectedApp metadata (.connectedApp-meta.xml), manage OAuth 2.0 PKCE and JWT flows, and plan for External Client Apps.

• ConnectedAppSettings Metadata Type in SFDX

  Configure and deploy ConnectedAppSettings metadata in SFDX to enforce org-wide OAuth token policies, API client access control, and security restrictions.

• ContentSettings Metadata Type in SFDX

  Deploy and manage ContentSettings metadata in SFDX to control Salesforce Files, Content Deliveries, public link sharing, and library workspace governance.

• CorsWhitelistOrigin Metadata Type Reference

  Configure and deploy CorsWhitelistOrigin (.corswhitelistorigin-meta.xml) metadata to allow cross-origin browser requests to Salesforce REST and OAuth APIs.

• CspTrustedSite Metadata Type Reference

  Configure and deploy CspTrustedSite (.cspTrustedSite-meta.xml) metadata for Trusted URLs, Content Security Policy (CSP) directives, and LWC fetch calls.

• CustomField Metadata Type and Schema Guide

  Create, deploy, and query Salesforce CustomField metadata across relationships, formulas, picklists, and Shield encryption with Tooling API SOQL.

• CustomPermission Metadata Type Reference

  Configure and deploy CustomPermission (.customPermission-meta.xml) metadata to build decoupled feature flags, validation bypasses, and LWC access checks.

• CustomSite Metadata Type Reference

  Configure and deploy CustomSite (.site-meta.xml) metadata for Salesforce Sites and Experience Cloud domains, clickjack protection, and error pages.

• DataCategoryGroup Metadata Type for Salesforce Knowledge

  Configure hierarchical Data Category Groups for Salesforce Knowledge and Questions using DataCategoryGroup metadata. Learn SOQL WITH DATA CATEGORY.

• DataMaskPolicy Metadata Type in SFDX

  Configure and deploy DataMaskPolicy metadata in Salesforce to automate sandbox data anonymization, obfuscation rules, and PII protection compliance.

• DelegateGroup Metadata Type in SFDX

  Configure DelegateGroup metadata in Salesforce DX to implement delegated administration for user management, permission sets, and custom object maintenance.

• EmailAuthorizationSettings in SFDX & Metadata

  Configure EmailAuthorizationSettings in SFDX and Metadata API to manage external email provider authorization, sender authentication, and DKIM security.

• EncryptionKeySettings Metadata Architecture

  Configure EncryptionKeySettings metadata in Salesforce to govern Shield Platform Encryption key management, BYOK policies, and KMS key rotation lifecycles.

• ExternalAuthIdentityProvider Metadata Guide

  Configure ExternalAuthIdentityProvider metadata in Salesforce to govern external authentication providers, token exchanges, and External Client App security.

• ExternalClientApplication Metadata Type Reference

  Configure, package, and deploy ExternalClientApplication (.eca-meta.xml) metadata in Salesforce with separated global and local OAuth policy settings.

• ExternalClientAppSettings in Salesforce Metadata API

  Configure ExternalClientAppSettings in Salesforce to enable External Client Apps, manage canvas integration, and control enterprise security policies.

• ExternalCredential Metadata Type and Auth Guide

  Configure, deploy, and query Salesforce ExternalCredential metadata (.externalCredential-meta.xml) for OAuth 2.0, AWS SigV4, and Custom Header callouts.

• ExternalDataConnector in Salesforce Metadata API

  Configure ExternalDataConnector metadata to establish secure federated data connections between external cloud stores and Salesforce Data Cloud.

• ExtlClntAppCanvasSettings in External Client Apps

  Configure ExtlClntAppCanvasSettings metadata to embed third-party web apps into Salesforce layouts and feeds using External Client App Canvas.

• ExtlClntAppConfigurablePolicies Metadata Guide

  Configure ExtlClntAppConfigurablePolicies metadata to enforce administrative security policies and user access controls for External Client Apps.

• ExtlClntAppGlobalOauthSettings Metadata Reference

  Deploy ExtlClntAppGlobalOauthSettings metadata to manage global OAuth consumer identities and secure second-generation packaging distributions.

• ExtlClntAppMobileConfigurablePolicies Metadata

  Govern mobile security for External Client Apps using ExtlClntAppMobileConfigurablePolicies metadata, enforcing PIN locks and OS requirements.

• ExtlClntAppOauthConfigurablePolicies in SFDX

  Manage ExtlClntAppOauthConfigurablePolicies metadata in Salesforce to enforce OAuth IP restrictions, token lifespans, and session security policies.

• ExtlClntAppOauthSettings Metadata Reference

  Configure ExtlClntAppOauthSettings metadata in Salesforce to define OAuth scopes, callback URLs, PKCE enforcement, and secure integration endpoints.

• ExtlClntAppSamlConfigurablePolicies Guide

  Enforce SAML 2.0 single sign-on security using ExtlClntAppSamlConfigurablePolicies metadata, managing certificates and assertion encryption in Salesforce.

• FieldRestrictionRule Metadata Type for PII Field Visibility

  Configure FieldRestrictionRule metadata to dynamically hide PII and Employee fields using Enhanced Personal Information Management and Field Sets in SFDX.

• FileUploadAndDownloadSecuritySettings in SFDX

  Configure FileUploadAndDownloadSecuritySettings metadata to prevent malware execution, enforce file download policies, and restrict dangerous MIME types.

• FolderShare Metadata Type in SFDX

  Configure FolderShare metadata in Salesforce DX to control access permissions for report, dashboard, and document folders across roles and public groups.

• Group Metadata Type Reference

  Configure and deploy Group (.group-meta.xml) metadata for Salesforce Public Groups, role hierarchy inheritance (doesIncludeBosses), and SOQL auditing.

• Hosted MCP Servers Setup and Authentication

  Configure Hosted MCP Servers with an External Client App, OAuth 2.0 PKCE, My Domain server URLs, and client connections for Claude, Cursor, and Postman.

• IframeWhiteListUrlSettings in SFDX

  Configure IframeWhiteListUrlSettings metadata in Salesforce to manage clickjack protection, CSP frame-ancestors, and trusted iframe domains.

• InboundCertificate Metadata Type in SFDX

  Configure InboundCertificate metadata in Salesforce to manage public X.509 keys, mutual TLS (mTLS), and inbound API authentication.

• IPAddressRange Metadata Type in SFDX

  Deploy IPAddressRange metadata in Salesforce to manage corporate IP login ranges, network security perimeters, and API gateway whitelisting in CI/CD.

• LiveChatDeployment Metadata in SFDX

  Configure LiveChatDeployment metadata to specify domain whitelists, branding windows, pre-chat rules, and chat session timeouts.

• MobileSecurityAssignment in Enhanced Mobile Security

  Configure MobileSecurityAssignment metadata in Salesforce to map Enhanced Mobile Security policies to targeted profiles, users, and mobile connected apps.

• MobileSecurityPolicy in Enhanced Mobile Security

  Configure MobileSecurityPolicy metadata in Salesforce to enforce jailbreak detection, biometric locks, clipboard restrictions, and mobile compliance rules.

• MobSecurityCertPinConfig in Mobile Security

  Configure MobSecurityCertPinConfig metadata in Salesforce to manage TLS certificate pinning and prevent man-in-the-middle attacks on mobile endpoints.

• ModerationRule Metadata in Experience Cloud

  Configure ModerationRule metadata in Experience Cloud to automate content moderation, rate limiting, and member security governance across community portals.

• MutingPermissionSet Metadata Type in SFDX & Metadata API

  Use MutingPermissionSet inside PermissionSetGroups to selectively disable Delete, Modify All, and field permissions while keeping reusable building blocks.

• MyDomainSettings Metadata Type Guide

  Configure and deploy MyDomainSettings metadata in Salesforce to manage Enhanced Domains, login policies, URL routing, and authentication domain security.

• Named Credentials and Secure Callout Architecture

  Configure modern External Credentials, Principals, and Named Credentials to eliminate hardcoded secrets and manage OAuth 2.0 and AWS SigV4 callouts.

• NamedCredential Metadata Type and Endpoint Guide

  Configure, deploy, and query modern Salesforce NamedCredential metadata (.namedCredential-meta.xml), link ExternalCredentials, and manage callout parameters.

• Network Metadata Type for Experience Cloud Sites

  Configure Experience Cloud site administration, member profiles, permission sets, self-registration, and security settings using the Network metadata type.

• OauthCustomScope Metadata Type in SFDX

  Configure and deploy OauthCustomScope metadata in Salesforce to create fine-grained OAuth authorization scopes for connected apps and external clients.

• OauthOidcSettings Metadata Type Guide

  Configure and deploy OauthOidcSettings metadata in Salesforce to govern OAuth 2.0 token policies, OpenID Connect signing, and token exchange security.

• OauthTokenExchangeHandler Metadata Guide

  Configure and deploy OauthTokenExchangeHandler metadata in Salesforce to implement custom RFC 8693 token exchange handlers powered by Apex logic.

• OutboundNetworkConnection Metadata in SFDX

  Deploy OutboundNetworkConnection metadata in Salesforce DX to manage AWS PrivateLink and Azure private network interconnects from Hyperforce.

• ParticipantRole Metadata Type in SFDX

  Deploy ParticipantRole metadata in Salesforce DX to define collaborative participant roles, record-level access rights, and industry cloud sharing models.

• PermissionSet Metadata Type and Access Guide

  Configure, deploy, and query Salesforce PermissionSet metadata (.permissionset-meta.xml), manage CRUD/FLS and Principal access, and audit via SOQL.

• PermissionSetGroup Metadata Type Guide

  Configure, deploy, and query Salesforce PermissionSetGroup metadata (.permissionsetgroup-meta.xml), apply MutingPermissionSet rules, and check status via SOQL.

• PermissionSetLicenseDefinition in SFDX

  Understand PermissionSetLicenseDefinition in Salesforce DX, inspecting PSL entitlements, permission dependencies, and license-restricted permission sets.

• PlatformEncryptionSettings in SFDX

  Configure PlatformEncryptionSettings metadata in Salesforce DX to manage Shield encryption policies, deterministic keys, search index, and event encryption.

• PortalDelegablePermissionSet in SFDX

  Configure PortalDelegablePermissionSet metadata in Salesforce DX to enable delegated external administrators to manage community permission sets securely.

• Profile Metadata Type and Deployment Best Practices

  Retrieve and deploy Salesforce Profile metadata (.profile-meta.xml), manage layoutAssignments and loginIpRanges, and query profile permissions via SOQL.

• ProfilePasswordPolicy Metadata in SFDX

  Configure ProfilePasswordPolicy metadata in Salesforce DX to define granular password expiration, complexity, and lockout rules tailored by user profile.

• ProfileSessionSetting Metadata in SFDX

  Configure ProfileSessionSetting metadata in Salesforce DX to enforce profile-level session timeout limits, warning modals, and high assurance security levels.

• Pub/Sub API and Event Bus Architecture

  Stream Salesforce Platform Events and Change Data Capture at scale using gRPC, Apache Avro binary serialization, and Pub/Sub API event replay.

• PublicKeyCertificate Metadata in SFDX

  Configure PublicKeyCertificate metadata in Salesforce DX to manage X.509 certificates for mutual TLS, JWT bearer auth, and outbound API integrations.

• PublicKeyCertificateSet in SFDX

  Configure PublicKeyCertificateSet metadata in Salesforce DX to bundle public certificates for zero-downtime key rotation and mutual TLS trust stores.

• RedirectWhitelistUrl Metadata in SFDX

  Configure RedirectWhitelistUrl metadata to secure user navigation, prevent untrusted redirect warnings, and manage trusted external web endpoints in SFDX.

• RemoteSiteSetting Metadata Type Reference

  Configure and deploy RemoteSiteSetting (.remoteSite-meta.xml) metadata to allowlist external HTTP callout endpoints and understand NamedCredential trade-offs.

• RestrictionRule Metadata Type (Restriction & Scoping Rules)

  Configure Restriction Rules and Scoping Rules using the RestrictionRule metadata type. Learn recordFilter syntax, enforcementType, and Tooling API queries.

• Role Metadata Type Reference

  Configure and deploy Role (.role-meta.xml) metadata to manage the Salesforce Role Hierarchy, parentRole inheritance, and implicit Account child access.

• RoleOrTerritory Metadata Type in SFDX

  Understand RoleOrTerritory metadata in Salesforce, governing hierarchical sharing models, role trees, and territory access permissions across orgs.

• Salesforce Code Analyzer and Static Analysis

  Scan Apex, LWC, JavaScript, and Flow code for security vulnerabilities, quality issues, and AppExchange compliance with Salesforce Code Analyzer.

• SamlSsoConfig Metadata Type for Single Sign-On (SSO)

  Configure SAML 2.0 Single Sign-On with Okta, Microsoft Entra ID, and PingFederate using the SamlSsoConfig metadata type. Learn JIT provisioning and SOQL.

• SecuritySettings Metadata Type in SFDX

  Configure SecuritySettings in Salesforce DX to govern trusted IP ranges, session policies, password parameters, and single sign-on security.

• SharedTo Metadata Structure in SFDX

  Master the SharedTo metadata structure in Salesforce to define recipients for report folders, dashboard folders, list views, and sharing rules.

• SharingBaseRule Architecture in SFDX

  Understand SharingBaseRule metadata architecture in Salesforce to construct criteria-based and owner-based sharing rules across standard objects.

• SharingReason Metadata Type for Apex Managed Sharing

  Create and deploy Apex Sharing Reasons on custom and standard objects (API v68.0+) using the SharingReason metadata type. Learn RowCause and __Share SOQL.

• SharingRecalculation Metadata in SFDX

  Deploy SharingRecalculation metadata in Salesforce to register Apex batch classes that recalculate custom object shares when ownership changes.

• SharingRules Metadata Type and Record Access Guide

  Configure, deploy, and audit Salesforce SharingRules metadata (.sharingRules-meta.xml) for Owner, Criteria, Territory, and Guest rules plus Share table SOQL.

• SharingSet Metadata Type for Experience Cloud Portals

  Configure Customer Community record sharing with the SharingSet metadata type. Learn accessMappings, userField to objectField matching, and deployment tips.

• SharingSettings Metadata Type in SFDX

  Configure SharingSettings in Salesforce DX to govern org-wide defaults, deferred sharing calculation, secure guest access, and manager groups.

• SiteSettings Metadata Type in SFDX

  Manage SiteSettings metadata in Salesforce DX to enforce HTTPS policies, custom domain redirects, and global security across public Sites.

• SObject, Headless 360, and Platform MCP Servers

  Use standard SObject, Headless 360, Archive Connect, Metadata Grounding, CMS, and Insurance Design Advisor MCP servers with exact tool schemas and limits.

• TransactionSecurityPolicy Metadata Type for Shield Security

  Configure Real-Time Event Monitoring TransactionSecurityPolicy metadata for ReportEvent, ApiEvent, ListViewEvent, and LoginEvent with Apex or Condition Builder.

• UserAccessPolicy Metadata Type for Automated Provisioning

  Automate Permission Set, Permission Set Group, Queue, Group, and Package License assignments using the UserAccessPolicy metadata type in Salesforce.

• UserAuthCertificate Metadata Type in SFDX

  Configure and deploy UserAuthCertificate in Salesforce to govern certificate-based user authentication, CAC and PIV smart cards, and mTLS security.