1

I have created a managed package where I used a protected Custom Setting of hierarchy type to store some user credentials.

I am concerned about security review of the app. Is there any chances of getting security review failed when sales force do the review?

I used apex to manage this custom setting data.

2
  • 4
    Incidentally, I recently went through a security review in which they themselves actually advised to store credentials in protected custom settings, so you should be good. Sep 18, 2020 at 19:41
  • Thanks for the update Sep 19, 2020 at 0:44

1 Answer 1

3

From the past experience, user credentials like password need to be stored either in a protected custom setting or custom metadata for a Managed Package Application.

With protected custom setting subscriber orgs have no way to see them. Only your Managed package apex code can see the data and hence it is safe.

1

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .