Skip to main content
Temas#Security

#Security179 debatiendo

Formular una pregunta...
Nguyen Traihead Long (saleforcedeveloper en glo) preguntó en #Salesforce Developer
Ayer, 08:27
How to reset password?

Hello everyone, 

 

I need help recovering access to my Salesforce Developer Edition org. 

 

I forgot the password for my Salesforce account and currently cannot log in to my Developer Edition org. 

 

Org URL: 

https://long204-dev-ed.develop.my.salesforce.com/

 

 

 

I have already tried the "Forgot Your Password?" option, but I still cannot regain access to the org. 

 

Since this is a Developer Edition org, I understand that I cannot create a Support Case through the Help Portal. 

 

I am currently in Vietnam, so I would like to know if there is any official online way to contact Salesforce Technical Support for account recovery without making an international phone call. 

 

Could anyone please advise me on the correct process to recover access to my Developer Edition org? 

 

Thank you for your help. 

 

#Salesforce Developer  #Salesforce Admin  #Security

2 respuestas
  1. Himanshu Shekhar (AQBEE Innovations Pvt. Ltd.)
    Ayer, 08:44

    Short version: for a free Developer Edition org there is no Support case or phone channel - Salesforce does not provide login recovery for free orgs, so it is self-service only. A few things to try before giving up on it: 

     

    1. On the login page use Forgot Your Password and enter your username (the email-format string you log in with - it is often not the same as your actual email). The reset link is sent to the email address on your User record, not to the username. 

     

    2. Check that inbox carefully, including Spam/Junk, for a message from

    support@salesforce.com

    , and add it to safe senders. A missing reset mail is almost always deliverability or the wrong inbox. 

     

    3. If anyone else has admin access to that org, they can reset it for you from Setup > Users > Reset Password (or run System.setPassword in the Developer Console). 

     

    If the reset email simply never arrives, it means the email on the account is one you can no longer access - and since Support will not recover a free DE org, the practical move is to spin up a fresh Developer Edition org from the developer signup page (they are free and unlimited). Any data or metadata in the old org is only recoverable if you can log back in. 

     

    If this helps, please mark it as the Best Answer so it helps the next person - thanks 🙂

Escribir una respuesta...
0/9000
Deepak Sharma (Salesforce Vlocity Developer en 360 Cloud Solution Pvt Ltd)
22 jul, 04:36
Best Approach to Restrict Finance Users to Their Own Region's Records

Hi Everyone,   

I'm working on a Salesforce security requirement and would appreciate your guidance on the best approach.   

Scenario:

  • North Finance users should be able to access only North region invoices.
  • South Finance users should be able to access only South region invoices.
  • Finance users should not be able to view or edit invoices belonging to other regions.

I'm trying to determine the most scalable and maintainable solution.   

My questions are:

  1. Which Salesforce security features would you recommend for this scenario (OWD, Roles, Sharing Rules, Permission Sets, Criteria-Based Sharing, Apex Sharing, etc.)?
  2. Is it possible to achieve this requirement using only declarative features, or would Apex Sharing be required?
1 respuesta
  1. Bryan Land (ForeFront)
    22 jul, 05:08

    Hey Deepak,  

     

    I would recommend keeping Invoice OWD as Private, then creating roles for each region (with sub-roles if needed) and using sharing rules based on ownership if the users with in those regional nodes own the records, or criteria based sharing rules if users outside of these regions own the invoices. This is declarative and a very straightforward use case for sharing rules. 

     

    Be sure you only grant read unless by "access" you mean they can edit the records as well within their own region. Also, if you prefer not to create the roles, you can use public groups, but it may be more difficult to manage long term. Let me know if you have any questions. Good luck!

Escribir una respuesta...
0/9000
Scott Ward (CSM en Mulesoft)
6 may 2025, 18:15
We can’t find the ‘Account Access’ permission set included in the ‘Sales User’ permission set group.

I keep getting an error:

We can’t find the ‘Account Access’ permission set included in the ‘Sales User’ permission set group. When I go into Permission Set Groups and add Account Access I get the error: Can't save permission set Account Access, which is assigned via permission set group to a user with user license Analytics Cloud Integration User. The user license doesn't allow the permission: Create Accounts. Thanks for the help!    

4 respuestas
  1. Mykhailo Vdovychenko (EverREST)
    9 may 2025, 15:09

    @Scott Ward On the Challenge page, at the bottom near the "Check Challenge" button, there is the name of the Playground and a "Launch" button. 

    The Challenge is checked against the Playground selected in that list. By clicking the "Launch" button, you will open the Playground where the Challenge is being verified.  

     

    Sincerely, 

    Mykhailo Vdovychenko 

    Bringing Cloud Excellence with IBVCLOUD OÜ 

Escribir una respuesta...
0/9000
Deepak Sharma (Salesforce Vlocity Developer en 360 Cloud Solution Pvt Ltd)
24 jul, 10:20
Unable to View Report – "You can't view report" Error

Hi Everyone,

I'm facing an issue while trying to access a Salesforce report.

When I open the report, I receive the following error message: 

 

Unable to View Report –

 

 

 

#Security

2 respuestas
  1. Nikhil Kawale (Infosys)
    24 jul, 10:37

    Most likely an access issue. Check the report folder sharing, object permissions, and whether the user has the Run Reports permission.

Escribir una respuesta...
0/9000
Erik Laramee
19 ago, 12:47
Phishing Resistant MFA for Mac and Virtual Machines

Hey Folks, 

 

We have a couple of contractors that are having issues creating passkeys for the upcoming phishing resistant mfa for privileged users update. Thus far, all the regular employees using company issues devices are having having any problems. For these two, one uses a mac and the other uses a virtual windows machine. Because of this, we believe this may be the problem. Does anyone have any experience creating passkeys with these cases? 

 

#Security  #MFA  #PhishingResistantMFA

1 respuesta
Escribir una respuesta...
0/9000
Mohamad Ajarudeen (Salesforce certified professional, Expertise in Sales Cloud, Marketing Cloud en Leading IT Service and consultancy)
24 mar, 16:27
Reset email and password for invalid user account

I have been encountering a dead lock situation, need assistance from community.    Created a sandbox out of Prod, all emails address got appended with .invalid except the one who created the sandbox.    now the issue is, I edited a user's email address let say xyz@gmail.com.invalid to xyz@gmail.com then system popped up a confirmation request, upon gave proceed the email address changed back to xyz@gmail.com.invalid and triggered an email change verification email to xyz@gmail.com.    here is the catch, on clicking the link to verify email it ask both username and password, were I don't know the password hence trying to reset the password but not receiving the password reset email as the email address is xyz@gmail.com.invalid.     I don't think this is a ideal behavior.      

6 respuestas
  1. Lithin Teeg
    18 ago, 15:25

    @Mohamad Ajarudeen Have the Primary Contact or the person who created the sandbox run the following script for the user you’re trying to grant access to: System.setPassword('005xxxxxxxxxxxxXXX', 'YourNewPassword123!'); Once the password is set, share it with the user, remove the .invalid from their email address, and ask them to log in using the set password(YourNewPassword123!). After they successfully log in, they can reset the password themselves.

Escribir una respuesta...
0/9000
Victor Wang (Consultant en Linde) preguntó en #Salesforce Developer
18 ago, 07:54
Is USING SCOPE allPrivate a security issue for Private Reports?

Hi everyone, 

 

I found some unexpected behavior when querying the Report object using SOQL.

For example:

SELECT Id, Name, DeveloperName, FolderName,
       OwnerId, CreatedById, CreatedBy.Name,
       CreatedDate, LastModifiedById, LastModifiedBy.Name,
       LastModifiedDate
FROM Report
USING SCOPE allPrivate
WHERE Owner.Name = 'User B'

The user executing this query does not have access to User B's Private Reports. In the Salesforce Reports UI, User B's Private Reports are not visible to this user.

However, the SOQL query above is still able to return User B's Private Reports. 

 

Without USING SCOPE allPrivate, the following query does not return those records:

SELECT Id, Name, OwnerId
FROM Report
WHERE Owner.Name = 'User B'

My questions are:

  1. Is this the expected behavior of USING SCOPE allPrivate?
  2. Does allPrivate intentionally allow users to query metadata of other users' Private Reports?
  3. Is this considered a permissions/sharing bypass, or is Report designed to behave differently from normal sObjects in this regard?

  

This seems particularly concerning because a user who cannot see another user's Private Reports in the UI can still discover their Report Id, Name, Owner, DeveloperName, etc. through SOQL.  

 

I'd appreciate any clarification or experience with this behavior. 

 

Thanks! 

 

 

#Salesforce Developer  #Salesforce Admin  #Security

2 respuestas
Escribir una respuesta...
0/9000
Hitesh Sharma (Salesforce Developer en 360 Cloud Solution)
23 jul, 04:28
I have 10 Managers, bu t i can only create 2 restriction rule. Is there any way that 1 restriction rule be applied to all the managers (users) ?

Restriction Rules  Business Requirement    HR users can access all Employee records.    Managers should only see Employees in their own Location.      

4 respuestas
  1. Eric Burté (DEVOTEAM) Forum Ambassador
    24 jul, 07:30

    Hello @Hitesh Sharma

    indeed, with your business requirements, it is more a "sharing" use case to open up access on records (totally for HR role users ; partially for managers based on the user information / record information). Indeed I guess that colleagues on the same level do not see these records neither, so you should be in a private OWD mode... Restriction rules should be considered more on a "on top approach" as hiding records because they are VIP, on top of all other sharing rules. 

    Eric

Escribir una respuesta...
0/9000
Sourabh Dondekar (Jr. Developer en digiCloud Solutions Private Limited)
13 jul, 12:33
How should organizations handle Salesforce MFA Passkeys when multiple admins share a single login account?

Hi everyone,   

I have a question regarding the upcoming MFA enforcement for all employee users.   

Let's consider this scenario:

If organization has five administrators who all use the same System Administrator username and password (shared login). The email address associated with that Salesforce user belongs to me.

When Salesforce prompts us to register a Passkey, I complete the registration using my device because the email is mine. After that, when another administrator tries to log in using the same shared credentials, Salesforce requires the registered passkey, which only I have. As a result, the other admins are unable to log in.    How should organizations handle this situation?

  • Is sharing one System Administrator account no longer supported with passkeys?
  • Does Salesforce expect every administrator to have their own individual user account?
  • If a shared admin account must be used (for legacy reasons), what is the recommended approach to satisfy the new MFA/passkey requirement?

I'd appreciate any guidance or best practices from the community. Thanks!    

4 respuestas
  1. Manoj Rajendran (Aintiram Web Tech Private Limited)
    14 ago, 11:15

    Hi Sourabh, 

     

    Though sharing one admin account not supported using passkey, Salesforce also have ways to bypass this validation. 

     

    Method 1: Temporary Verification Code

    Steps to Generate a Temporary Verification Code

    Step 1 : Go to the User record and click the Generate link next to Temporary Verification Code (expires in 1 to 24 hours).

    Step 2 : Specify the number of hours for which the verification code should remain valid.

    This is one method of bypassing passkeys.

     

    Method 2: Salesforce CLI Authentication (VS Code needed) 

     

    https://www.aintiram.com/blog-bypass-pass-key-salesforce-authentication

     

     

    Both methods are explained in this blog, do check.

Escribir una respuesta...
0/9000
Iqbal Ansari (Associate Technology L2 en Publicis Sapient)
6 oct 2024, 02:04
SKU Price Book Visibility Logic(SFCC)

Hi Team,

I have a requirement to hide those SKUs from the PDP if they have not been assigned a price book.

If it is a master, show only those SKUs with a price book.

If it is an SKU, we will show the 404 page as required.

 

#Security  #SFCC  #SFCC-SFMC Integration  #SFCC Administrator  #Sfcc-introductions  #Sfcc-ask-salesforce

3 respuestas
  1. Mohammad Ahmad (Self)
    17 ago, 05:12

    Hi @iqbal,

    Which architecture in SFCC js controller or pipeline So based on that I can suggest it.

Escribir una respuesta...
0/9000