Questions tagged [shield]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
28 views

With Field Audit Trail, can you remove the Custom HistoryRetentionPolicy after it has been added to an object?

I'm working with a client to re-implement Field Audit after the previous consultant failed. They added Custom Retention Policies to several object that aren't needed, and the client wants to return ...
user avatar
  • 304
2 votes
0 answers
47 views

How can you build detokenization of data coming into Salesforce via a custom API integration?

Background: We are building an API integration fully custom between Salesforce and an internal resource to return PII data onto our Case record on page load. The internal resource will return ...
user avatar
1 vote
0 answers
185 views

Unable to activate matching rule

In our org, deactivation of Matching Rules and Duplicate Rules was required by the encryption process in order to encrypt a field (Contact Email). When we try to re-activate these rules, we are ...
user avatar
  • 257
0 votes
1 answer
98 views

Salesforce Encryption Enabled With Errors

I am trying to encrypt field Lead.Name but it fails due to: Encryption can't be enabled for fields referenced in the custom formula fields: Lead.Data Quality Description. I checked this formula field ...
user avatar
  • 1,582
1 vote
0 answers
87 views

Ability to track Notes & Attachments downloads on Shield Event Monitoring

The Shield event monitoring app provides us a dashboard to view downloads of Files in Salesforce. Our company also wants to track downloads of 'Notes & Attachments'. Is it possible to create a ...
user avatar
0 votes
1 answer
164 views

Transaction Security Policy - Block "ReportRunFromLightning" Operation Based Object By RecordType Counts

I'm reaching out to my fellow StackExchange community members for help to determine if Shield Event Monitoring or some other solution can solve my business problem.  Here we go. Company ABC wants to ...
user avatar
  • 77
0 votes
1 answer
228 views

Transaction Security Policy - Send email notification when a user tries too many wrong passwords

I am trying to create a Transaction Security Policy with apex that aims to notify by email a technical lead when a user tries to log in with a wrong password too many times (like a brute force ...
user avatar
3 votes
0 answers
167 views

Deploying Shield Platform Encryption using the CLI (force:madpi:deploy)

Can I enable encryption on custom object fields declaratively in an org, and then make successive deployments to that org from a codebase where encryptionScheme metadata is NOT part of the custom ...
user avatar
  • 183
0 votes
1 answer
121 views

Scope of Salesforce Shield

When you license Salesforce Shield is it at the org level? I’m having trouble determining this answer. Based on what I can see via TrailHead, this should apply to any data within the org including any ...
user avatar
  • 103
4 votes
2 answers
214 views

Is there an API call to check if streaming is enabled for a Real Time Event Monitoring Event (Setup > Platform Tools > Event Manager > Event)?

So as part of the Salesforce Shield release there is a new Salesforce Settings page at "Platform Tools" > "Events" > "Event Manager". As seen in the image above, the Settings page contains a Grid ...
user avatar
2 votes
1 answer
112 views

SNEEZY Error on Encryption - Email Message Relation Object

Similar to another question I posted regarding a SLEEPY error, now we have encountered a SNEEZY error. We are trying to enable the Encryption Policy for the Email Message Relation field to "...
user avatar
1 vote
0 answers
24 views

can we auotomate the BYOK in salesforce using salesforce shield

WE are trying to do encryption for the salesforce data. our requirement is to use salesforce shield and also automate for B.Y.O.K. is it possible to automate the encryption key instead of doing it ...
user avatar
  • 11
0 votes
1 answer
342 views

On encrypting "Account name" standard field will it impact the first name and last name in shield encryption

I Have a requirement where i need to encrypt the "Account name" Standard Field. But my question is will it also encrypt the FirstName & LastName
user avatar
0 votes
1 answer
65 views

What populated "History" tab in encryption statistics?

When I navigate to Platform Encryption Statistics --> then toggle over to the History tab, I see a table with 4 columns. They are: Encrypted Field History Unencrypted Field History Encrypted Feed ...
user avatar
2 votes
1 answer
480 views

Deploying Shield Platform Encryption using Metadata API

I'm planning to deploy the encrypted field from our dev org to production? Both environment has shield platform encryption enabled. The api version of the source organization is 44 and the target is ...
user avatar
  • 757
2 votes
0 answers
30 views

How to encrypt certain fields in managed packages

are there alternatives to encrypting personally identifiable data in fields that are not encrypt able through Shield?
user avatar
  • 5,176
0 votes
1 answer
94 views

Enable Shield in Org

Looking at getting shield up and running. To get the option to enable Shield, Field Audit Trail, and event monitoring, is that something I need to reach out to our success manager and have enabled ...
user avatar
0 votes
1 answer
316 views

Equivalent to LIKE operator (in SOQL) in string method

Due to shield encryption, I have to get rid of any SOQL queries filtered with encrypted fields. Thought is to remove the filter from soql and validate the retrieved soql results against the searchKey ...
user avatar
  • 187
5 votes
2 answers
2k views

Has anyone enabled Transparent Data Encryption (TDE) in Marketing Cloud?

I've submitted a support ticket to enable Transparent Data Encryption (TDE) on a Marketing Cloud instance. Since all of the encryption happens on the backend as opposed to Field Level Encryption (FLE) ...
user avatar
  • 4,358
0 votes
1 answer
332 views

Shield Encryption Timeline/Process

I was curious, I have been reading the Shield Encryption Implementation Guide. I am wondering if there was a strategy you took when implementing Shield Platform Encryption? Did you encrypt straight ...
user avatar
3 votes
1 answer
724 views

Does Case-Insensitive Deterministic Encryption support SOQL LIKE and STARTS WITH statements?

The current Salesforce documentation states that deterministic encryption only supports exact, case-sensitive matches. This is why comparison operators that return partial matches aren't supported. ...
user avatar
  • 303
2 votes
1 answer
1k views

What does "at rest" mean involving data encryption?

I've been reading the Salesforce Security Guide and it mentions involving Salesforce Shield and Platform Encryption that it allows you to natively encrypt your most sensitive data at rest across ...
user avatar
  • 2,708
0 votes
1 answer
268 views

Why can I still see encrypted File and Attachment?

I have enabled Salesforce Shield in a developer org of mine, checked File and Attachment to make encrypted. After that, I created another user with a different profile who have not permission to see ...
user avatar
  • 35
0 votes
0 answers
273 views

Can you deploy transaction security policies

Is it possible to deploy Transaction Security Policies using change sets? These policies are part of the Salesforce Shield Event Monitoring product. Each policy is required to have a user in the "...
user avatar
2 votes
1 answer
454 views

Deploy Salesforce Shield components in production sandbox

I have developed and tested transaction security policies in the sandbox environment. Can someone provide guidance around how to deploy these policies in production environment? For Platform ...
user avatar
2 votes
1 answer
183 views

Transaction security policy for multiple logins

I need to modify the existing transaction security policy to trigger if user logs in from multiple IP addresses in past 8 hours. I'm using the below SFDC example policy. Can someone give a hand on how ...
user avatar
1 vote
1 answer
186 views

How to check if a field is encryptable

i want something like a report for all my fields in the org if they are encrytable or not and i want to know if they are encrypted currently. By the getDescribe method i can detect if a field is ...
user avatar
  • 11
0 votes
2 answers
2k views

What is the impact of encrypting all fields using Salesforce Shield / Platform Encryption

Why wouldn't someone decide to encrypt all the fields using Salesforce Shield?
user avatar
  • 8,360
5 votes
1 answer
168 views

Impact of Shield Platform Encryption on describe calls?

Some old code was obtaining information about record types by querying the RecordType object. But now that the RecordTypeInfo describe API includes the record type developer name, we have changed the ...
user avatar
  • 131k
2 votes
1 answer
2k views

Why can I still see encrypted data?

I have enabled Salesforce Shield in a developer org of mine, checked "Encrypted" in the custom field definition detail, and proceeded to update a record with a new value in the encrypted field. I ...
user avatar
0 votes
1 answer
1k views

Does Salesforce Shield Field Audit trail allow field history tracking on detail objects in master details [closed]

Need to know about field audit trail, Salesforce shield.
user avatar
3 votes
1 answer
142 views

How to Generate/Read BYOK-Compatible Certificate from Apex code

How can we read BYOK Compatible certificates present in Salesfoce using Apex (or SF REST APIs). Also is there any way to generate BYOK Compatible certificate using Apex code or SF REST APIs. I ...
user avatar
1 vote
1 answer
458 views

Shield: Encrypted Fields not encrypted

I have enabled platform encryption in a sandbox, and chosen to encrypt a few fields in the Contact object. However, when a user without the "View Encrypted Data" permission views a contact record, ...
user avatar
1 vote
1 answer
142 views

Shield Encryption

I have a general doubt on using encryption nature. Suppose I use shield to encrypt data and send some data as merge fields in an email template to other system, how is the encrypted data transferred / ...
user avatar
1 vote
3 answers
744 views

Encrypted data not in the encrypted format

I have enabled shield encryption for contact name in dev org. when I try to create a new record on contact the record is still visible to the users and is not in encrypted format I'm missing out ...
user avatar
  • 1,095
1 vote
0 answers
56 views

Get the string value of numbers in EventLogFile

I'm working on a parser for Shield events (EventLogFile). I want to get the string value for APP_TYPE in Logout event: Type:Number Description: The application type that was in use upon ...
user avatar
  • 119
1 vote
1 answer
123 views

Working around platform encrypted managed custom fields in customer orgs

We are an ISV partner and have managed packages in customer orgs. We want to be able to know the encryption status of a field in the code before working with it so our package does not break in ...
user avatar
  • 2,162
1 vote
1 answer
82 views

Shield encryption partial search

I was wondering as to whether how Shield encryption supports partial search. Any ideas as to what kind of encryption scheme is used by Shield to support this ?
user avatar
1 vote
1 answer
333 views

Platform Shield: Can we encrypt/decrypt the data explicitly using tenant secret in apex?

Is there way to ensure clear text? If it is encrypted can we use the tenant secret to decrypt OR vice versa? I am trying to explore the apex side offerings of shield if any. Any help is appreciated....
user avatar
1 vote
1 answer
1k views

How do I change my SOQL below so that Shield Platform Encryption is supported on SSN and the query supports large amounts of data

Our company has several packages and we've recently been asked to do some analysis on how to make them compatible with Salesforce Shield field encryption. In the Shield encryption considerations doc, ...
user avatar
7 votes
3 answers
736 views

Platform Encryption vs. FLS

What would I get from Platform Encryption that I cannot get from Field Level Security? We are investigating whether or not to invest in Salesforce Shield, so I want to better understand the ...
user avatar
  • 144k
2 votes
0 answers
46 views

Is it possible to use transaction policies to control API access granularity?

I know that the new Salesforce Shield / Apex transaction policies functionality allows monitoring of the events and automatically reacting to them (like automatically suspending accounts with '...
user avatar
  • 4,528