We are facing an issue with some of our users where whenever they login they are getting IE Security warning mixed content prompt. We have added salesforce in the trusted sites and have also enabled mixed-contents under IE settings but still the prompt is coming. Weird thing is when we login to sandbox and access same page we don't get this warning.

Has anyone came across such issue?

  • If you click "no" - which part of the page doesn't load? (I understand IE might be poor tool to debug it - what about Chrome? Should tell you which content source it didn't like). Maybe somebody added say sidebar component with some content loaded over plain HTTP? After logging in the users end up in standard application (home tab) or Service Cloud Console for example?
    – eyescream
    Jan 23, 2014 at 21:50
  • weird thing is it still loads the content even if i say 'no'
    – Sahil
    Jan 23, 2014 at 21:54
  • 2
    It should suppress pages & external scripts loaded insecurely, for example http://maps.google.com might fail to show the map nicely because SF is over HTTPs. Anything "http" in the network traffic tool or Javascript Console? F12 in IE, Ctrl+Shift+J in chrome & FF.
    – eyescream
    Jan 23, 2014 at 21:56
  • It probably isn't your site that is causing the issue, but another site that you reference. Maybe a CCS,Javascript, or image that your site references. So while your site might be trusted in IE the third party resource isn't. Jan 23, 2014 at 21:57
  • but in that case behavior of sandbox and production should not be same, as its the same code in both the environment.
    – Sahil
    Jan 23, 2014 at 21:58


You must log in to answer this question.

Browse other questions tagged .