1

I have created a managed package where I used a protected Custom Setting of hierarchy type to store some user credentials.

I am concerned about security review of the app. Is there any chances of getting security review failed when sales force do the review?

I used apex to manage this custom setting data.

Improve this question
2
  • 4
    Incidentally, I recently went through a security review in which they themselves actually advised to store credentials in protected custom settings, so you should be good.
    – user254875486
    Commented Sep 18, 2020 at 19:41
  • Thanks for the update
    – Sushant Srivastava
    Commented Sep 19, 2020 at 0:44

1 Answer 1

Reset to default
3

From the past experience, user credentials like password need to be stored either in a protected custom setting or custom metadata for a Managed Package Application.

With protected custom setting subscriber orgs have no way to see them. Only your Managed package apex code can see the data and hence it is safe.

Improve this answer
1

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .