We are using .Net to make web service calls the Salesforce API. Is there a way to know for sure that the calls are using TLS 1.2? Are there any API logs or records of the protocol is use in Salesforce we can review to be confident the change is working?

1 Answer 1


Check your Login History (under Setup). It now includes a TLS version column. There is also an equivalent field on LoginHistory called TlsProtocol.

Another option is to change the API endpoint for a short period to one that only supports TLS 1.1 or 1.2.

E.g. change https://login.salesforce.com/services/Soap/u/32.0 to https://tls1test.salesforce.com/services/Soap/u/32.0. Seeing "INVALID_LOGIN: Invalid username, password, security token; or user locked out." or “Content is not allowed in prolog.” in the response indicates the connection was successful with TLS 1.1 or 1.2.

See Salesforce disabling TLS 1.0 - How do I test the compatibility of an API (inbound) integration to Salesforce?

See also:

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .