Group
Org Check by Salesforce Labs
I added custom label, but i get the error
Field $Label.orgcheck__OrgCheck_ProfilePermSets_Title_CL does not exist. Check spelling6 answers
You had the issue because you installed the package for System Admin profile and your user is not under this profile. Also you had the previous URI to access the app in your favorite.
You fixed the issue by:
- assign yourself to the "Org Check Users" permission set
- access the app from the app launcher or directly go to https://<mydomain>.my.salesforce.com/lightning/n/orgcheck__OrgCheck_App_TAB
- update you favorite URL to the new one
Hi,
After running the report for 'Security and Access', the 'Active Internal Users' tab has a user flagged with a score of '1' for this reason:
{
The component Service_Account_ABC (005OQ0000064PCT) has a score of 1 because of the following reasons:User is logging directly without MFA: This user is logging in directly to Salesforce without using MFA (Multi-Factor Authentication). And this user has not the MFA bypass enabled. Please work with your user to make them use MFA for better security.
}
This is a service account, and there was a change of Username and Email fields to new owner on 29 April 2026. The new owner login for the first time using the 'Username' and 'Password'. As this is a service account, there is no SSO or MFA and the reason highlighted is understandable.
May I know for how long will this user to highlighted? I'm asking because today is 18 May 2026 already and it is still highlighted whenever I run 'Refresh'. Any comments or explanation is appreciated! =)
Thanks in advance!
Regards,
Teck Lung
1 answer
Hi Teck Lung!
The important point here is that Org Check is evaluating the user's current authentication/security configuration, not simply the date when the username or email was changed.
If the service account is still logging directly into Salesforce without MFA and there is no MFA bypass configuration, the finding can continue to appear each time you refresh the report. The 29 April login would not normally cause the finding to disappear after a fixed period.
Since this is intentionally a service account, I’d verify whether the account can use an appropriate non-interactive authentication method instead of relying on username/password, or review the applicable MFA/bypass configuration based on your organization’s security requirements.
If you expect Org Check to exclude this specific service account, I’d also check the current Org Check rules/configuration for the Active Internal Users check, as the scoring is driven by that rule.
Hello,
I was wondering if you could shed some on light on the following error message when I try to see the related "Object Documentation" for one of our managed package objects.
I'm a system admin, and I've assigned the Org Check permssion set. I don't usually get this type of error message using SOQL queries for this object. Thanks in advance
Error #0: 'KaptioTravel__Itinerary__c' AND EntityDefinition.NamespacePrefix ^ ERROR at Row:1:Column:99 Didn't understand relationship 'EntityDefinition' in field path. If you are attempting to use a custom relationship, be sure to append the '__r' after the custom relationship name. Please reference your WSDL or the describe call for the appropriate names.
Hi all,
The Org Check's Object Permissions tab allows us to export a report of object access with the acronym "CRUDvm". Anybody has the official documentation what each letter means?
I understand that "CRUDvm" is translated to be "Create/Read/Update/Delete/view all/modify all". I would like to get a Salesforce official Help article if this even exists. A main stakeholder asked for this and I was like stunned. Ha!
Thanks!
Teck Lung
2 answers
OK I found out that I can refer to the Org Check app itself, I should have drink the coffee first thing in the morning. There is a Legend: C means Create, R means Read, U means Update/Modify, D means Delete, v means View All and m means Modify All.
Update on our latest version "Oxygen" and achievements:
- Org Check version 8.7 (Oxygen) is available on the AppExchange: https://sfdc.co/OrgCheck-InstallToday-AppExchange
- This version has been reviewed by Salesforce Security and we passed the test successfully
- The Listing received so far 22 votes and an average score of 4.68
- Most of the orgs using currently Org Check have been successfully migrated to this new version which represents almost 32k orgs world wide !!
- Documentation has been updated accordingly: https://sfdc.co/OrgCheck
- Presentation has been updated accordingly: https://sfdc.co/OrgCheck-Presentation
- Release Note is available here: https://github.com/SalesforceLabs/OrgCheck/releases/tag/Oxygen
- Org Check is now the second most rated repository on Salesforce Labs github account
- LinkedIn page has nearly 1500 followers : https://www.linkedin.com/company/orgchecksfdc
- Org Check is now also available as a sf CLI plugin which means you can scan multiple orgs from terminal/devOps
1 comment
The presentation is available as a PDF in case you don't have access to Google Slides:
Yet Another Way For You To Reduce Your Technical Debt In Salesforce - 20260529.pdf
Hello! I've had this product in my org for quite a while. However, it's in production. I went to use it today and it recommended using it in a sandbox so it doesn't hit API limits.
However, when I go to the app store and try to install it into sandbox, it only gives me the option to install in production. Anyone know how I can get it into my sandbox and use it?
Thanks!
10 answers
If the Get It Now button doesn’t offer a sandbox installation option, look for a Try It Free button instead.
Clicking Try It Free may provide the choice to install in a sandbox environment.
Be aware that accessing AppExchange directly from within a sandbox org may not support installations.
It’s recommended to initiate the installation from the browser-based AppExchange Marketplace.
Newest Org Check app does not have the 'Profile Password Policies' sub-tab under 'Security and Access' tab.
I have an Org having Org Check (Nitrogen [N,7]) and it is still there. Is there a reason it is missing in newer app?
Regards,
Teck Lung
6 answers
Very good catch!! it's going to be corrected end of my day. Can we can contact each other in DM?
Finally, this is happening… org check is also a sf plugin.
You can analyse multiple orgs from your CLI without installing the app in these orgs.
This is fantastic!!
Install it via:
sf plugins install @orgcheck/sfdx-plugin
More commands will follow soon.
#SFDX CLI #Sfdx Plugins #Org Health Check #Audit TableHello, We’re exploring ways to track and divvy up OrgCheck findings across team members. As far as we can tell, OrgCheck doesn’t provide a native way to assign and track tasks, so we’re interested in learning what others have done. Have you created or adopted a tracker, whether in Salesforce, Excel, Asana, or another tool, to help operationalize OrgCheck output and manage technical‑debt cleanup? We’d love to hear what approaches have worked well!
2 answers
Thank you @Eric Burté ! We’ve attempted to use Excel, but because our org is so large and OrgCheck generates an enormous number of tasks, we’re looking for more efficient alternatives. OrgCheck’s limited export options also make it difficult to manage everything at scale