Take the 2-minute tour ×
Salesforce Stack Exchange is a question and answer site for Salesforce administrators, implementation experts, developers and anybody in-between. It's 100% free, no registration required.

Will I be breaking any TOS by giving contacts a username (email) and password (generated) to sign into a visualforce page to access an app I build. I want to do this without buying any customer portal licenses. I read a year or so ago that doing this would break salesforce TOS, and cause a violation that could end in being shutoff. I just need some clarification on what I can and cannot do regarding this use case.

Thanks

share|improve this question
add comment

1 Answer 1

up vote 12 down vote accepted

It's my understanding that custom authentication schemes invalidate the confidentiality clause of the Salesforce.com Master Subscription Agreement and thus would violate your TOS.

If you are building an app for the AppExchange, you would not pass security review.

share|improve this answer
1  
TY. What about if I build an external site and authenticate via api? –  fourq Jan 2 at 16:15
1  
Are you an ISV partner? This is typically a good question for your ISV rep. –  greenstork Jan 2 at 16:18
    
You can use a standard login authentication mechanism, such as the Customer Portal licenses if you require a login for the site usage. Additional fees will apply. –  sfdcfox Jan 2 at 16:20
1  
No we're not. I had plans to write my acct manager about this, but I thought I'd SE it first. Thanks you've been helpful. –  fourq Jan 2 at 16:21
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.