#Security Settings0 diskutieren mit

Hi All,

I wanted to know that if I enable the session setting "Lock sessions to the domain in which they were first used" what could be the impact of it ?

I am able to access SF(Client domain) data using standard API via POSTMAN(locally setup).

Kindly suggest, Any scenarios where in we have to keep this setting disabled ?

#Security #Security Specialist #TrailblazerCommunity #Security Settings #AwesomeAdmins

How to resolve deployment of Security Settings metadata throwing error: canUsersGrantLoginAccess

I was trying to figure out what was causing the non-explanatory error on deploying the security settings metadata file. 

The issue surfaced, when I switched the deploying user from having the standard System Admin profile to a custom Minimum Access profile with added permissions on top. 

The solution was to grant the deploying user the system permission of Manage Login Access Policies. Once this permission was granted, then the deploying user was no longer facing the problem. 

#Deployment Error  #Metadata  #Security Settings

I'm working on the Security Superbadge so that I can get the security settings straight in my head. Does anyone else have trouble finding things when you have the Enhanced Profile User Interface on (or off)?

For IP ranges, I could not find that setting at all with the Enhanced Profile User Interface disabled.

Conversely, when the Enhanced Profile User Interface was enabled, I could not figure out how to enable the mobile settings.

Some of this seems like it's designed to confuse! Settings seem to disappear depending on what setting this is on. 

Hello everyone, 

I understand settings like Enable clickjack protection for setup pages / non setup pages are default enabled and can't be modified by Admin.

But Is there any valid scenario exists when we have to uncheck these settings ?

Kindly suggest.

Thanks   #Security Settings #Security #Salesforce Admin #TrailblazerCommunity

What happened to the Enable HSTS for all Sites and Communities with the default force.com subdomain that require a secure connection (HTTPS) setting?  Is not in Session Setting.

this link talks about HSTS but where is the setting??

#Security Settings

https://help.salesforce.com/s/articleView?id=sf.browser_security.htm&type=5

I want to have a profile for certain users to be able to have access to edit User records and literally nothing else. Whats the easiest way to do this ? View setup + Manage Internal Users permissions?

 Ideally wouldn't be able to view the rest of setup but don't think thats possible?

Thansk

#Security Settings

Why there are so many settings

Sharing settings

Permission Sets

Permission Set groups

User Management Settings

Field level Settings, Object Level Settings, Role wise Profile wise,recordwise(owd,manual sharing) etc

Why all these are segregated here and there . why there is no one stop for all ?

#Data Security #Security Settings #Data Security Module #Salesforce Administrator #Salesforce Update

If a record owned by a specific user ,Is it always possible to edit a record ,user above  that specific user in Role hierarchy by default?

#Security #Security Predicates #Security Settings #Security Key #Security Specialist #Security Controls #Salesforce #Salesforce Admin #Sales Cloud

The password reset policy states the password would expire in 60 days. But my users have not changed or don't receive any password reset for more than 60 days. Any pointers on how to see if this 60days policy is followed #Reports & Dashboards #Salesforce Administrator #Security Settings

Hi All @* Salesforce Administrators * 

Can anyone tell me which security settings override all the security settings based on Profiles, permissions sets, OWD, Field Accessibility?

Thanks in Advance

Rakshita