I'm getting mixed messages online regarding SSL support for a Force.com site that is branded with a custom URL domain:

Assuming SF cannot support HTTPS yet, what can be done to brand the URL, if at all possible?


You can't do anything to brand the URL for an SSL site - there was a pilot last year allowing this, but that has stopped and as far as I'm aware, none of the functionality has been opened up as generally available. It may be possible if you are a large marquee customer - Activision have this for https://support.activision.com/ (if you inspect the source you'll see a Visualforce viewstate in there). Joe Morse of Salesforce had the following to say on the success site:

"This was true for a very limited pilot that ran until late last year (2013), but the product team is evaluating ways to make this work in production for (Safe Harbor) later this year. "

The best I've been able to do is have a thin page or pages hosted by another server that supports the domain name, and then iframe in the https site. That way the force.com URL that is serving the actual content is masked by the thin page wrapper. It can get unwieldy if you are relying on deep linking and bookmarks though, as you then need to be refreshing the outer page each time you navigate to another site page, so you need to orchestrate some navigation using JavaScript.

If you are interested in some of the technical details as to why custom domain names over SSL might be tricky for Salesforce, check out this question and answers:

Sites/Portals and SSL

| improve this answer | |

A few weeks ago I had the same discussion with the salesforce support team. I tried to associate a domain and custom (CA) certificate.

This seems to be a documented feature:

To associate certificates with a domain: Contact salesforce.com - Salesforce docu - domains

Therefore I created a domain and contacted salesforce. But they told me that there is no way to associate domains and certificates in Salesforce.com. In my business case I implemented shop system based on force.com sites. SSL was a key feature for me.

But anyway long story short: They told me that the activision case was a very limited pilot. (And from my point of view it was limited to activition.. ;-) )

In the end the support told me that this feature would be or could be part of the roadmap and I should wait...

But from my point of view there is a workaround:

Cloudflare allows you (paid version) to implement "SSL Proxies". Using this feature you can use the custom or branded domain e.g. yourCompany.secure.force.com and in the background you can use cloudflare to send all the traffic via ssl to cloudflare and they will forward it for you to salesforce.

Cloudflare wrote an article about this topic some years ago (in particular they are talking about google app engine but basically it is the same issue). Blog Article

| improve this answer | |
  • 1
    See the links in Michael's post above. This has changed in the past two weeks. – Thomas Taylor Aug 15 '14 at 21:05
  • @ThomasTaylor Today I talked to the salesforce support and they told me that custom domains and certificates are still not available. Therefore SSL for custom domains seems to be impossible. – Christian Deckert Aug 18 '14 at 14:19
  • 1
    Frustrating! It's definitely available, but very new. Refer the support folks to these release notes: docs.releasenotes.salesforce.com/en-us/api/release-notes/… I know it's possible, because I implemented it for a client last week: secured.surfrider.org/… – Thomas Taylor Aug 18 '14 at 14:46
  • @ThomasTaylor thanks for your answer. I contacted the principal sales engineer and he confirmed that the feature is available. Now I have to convince the salesforce support team that the feature is available. :-/ – Christian Deckert Aug 18 '14 at 15:57

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.