7

I recently got the standard warning email from SF saying that the prod instances will turn off TLS 1.0 next year, and they've detected some of our connections are still using it. Is there any way I can discover clues as to which users and/or client applications might be connecting using TLS 1.0 ?

2
  • 1
    You can download the login records.
    – martin
    Oct 31, 2016 at 13:33
  • 1
    Setup > Users > Login History > Download
    – martin
    Oct 31, 2016 at 13:39

2 Answers 2

5

I like to query the LoginHistory object to get this information.

SELECT Id, TlsProtocol, UserId, Format(LoginTIme), SourceIp, ApiType, ApiVersion, Application, Browser, CipherSuite, ClientVersion, LoginType, LoginUrl, Platform 
FROM LoginHistory 
WHERE LoginTIme = THIS_YEAR AND TlsProtocol = 'TLS 1.0'

Note that I have specified LoginTime to be This Year in order to reduce the amount of records that are returned. Also you can't use relationships to get the User's name. You'll have to make a separate query for that.


Per @SimonLawrence's comment: Note: THIS_YEAR is calendar driven though, so right now that would need a user to have logged in over just the last 5 days.. I would maybe broaden that incase you have integrations etc. that only log in monthly or so on. LAST_180_DAYS might be a reasonable one (depending on how many result rows you get I suppose!)

2
  • 2
    That is a bad ass solution. Note: THIS_YEAR is calendar driven though, so right now that would need a user to have logged in over just the last 5 days.. I would maybe broaden that incase you have integrations etc. that only log in monthly or so on. LAST_180_DAYS might be a reasonable one (depending on how many result rows you get I suppose!) Jan 5, 2017 at 17:32
  • 1
    @SimonLawrence I was hoping that was implicit, but I've now made it explicit. Thanks for the comment.
    – dBeltowski
    Jan 5, 2017 at 17:58
3

You can easily report on users who are still using TLS 1.0 from login history.

enter image description here

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .