Questions tagged [shield]
The shield tag has no usage guidance.
42
questions
0
votes
0
answers
28
views
With Field Audit Trail, can you remove the Custom HistoryRetentionPolicy after it has been added to an object?
I'm working with a client to re-implement Field Audit after the previous consultant failed. They added Custom Retention Policies to several object that aren't needed, and the client wants to return ...
2
votes
0
answers
47
views
How can you build detokenization of data coming into Salesforce via a custom API integration?
Background:
We are building an API integration fully custom between Salesforce and an internal resource to return PII data onto our Case record on page load. The internal resource will return ...
1
vote
0
answers
185
views
Unable to activate matching rule
In our org, deactivation of Matching Rules and Duplicate Rules was required by the encryption process in order to encrypt a field (Contact Email). When we try to re-activate these rules, we are ...
0
votes
1
answer
98
views
Salesforce Encryption Enabled With Errors
I am trying to encrypt field Lead.Name but it fails due to:
Encryption can't be enabled for fields referenced in the custom formula fields: Lead.Data Quality Description.
I checked this formula field ...
1
vote
0
answers
87
views
Ability to track Notes & Attachments downloads on Shield Event Monitoring
The Shield event monitoring app provides us a dashboard to view downloads of Files in Salesforce. Our company also wants to track downloads of 'Notes & Attachments'. Is it possible to create a ...
0
votes
1
answer
164
views
Transaction Security Policy - Block "ReportRunFromLightning" Operation Based Object By RecordType Counts
I'm reaching out to my fellow StackExchange community members for help to determine if Shield Event Monitoring or some other solution can solve my business problem.
Here we go.
Company ABC wants to ...
0
votes
1
answer
228
views
Transaction Security Policy - Send email notification when a user tries too many wrong passwords
I am trying to create a Transaction Security Policy with apex that aims to notify by email a technical lead when a user tries to log in with a wrong password too many times (like a brute force ...
3
votes
0
answers
167
views
Deploying Shield Platform Encryption using the CLI (force:madpi:deploy)
Can I enable encryption on custom object fields declaratively in an org, and then make successive deployments to that org from a codebase where encryptionScheme metadata is NOT part of the custom ...
0
votes
1
answer
121
views
Scope of Salesforce Shield
When you license Salesforce Shield is it at the org level? I’m having trouble determining this answer. Based on what I can see via TrailHead, this should apply to any data within the org including any ...
4
votes
2
answers
214
views
Is there an API call to check if streaming is enabled for a Real Time Event Monitoring Event (Setup > Platform Tools > Event Manager > Event)?
So as part of the Salesforce Shield release there is a new Salesforce Settings page at "Platform Tools" > "Events" > "Event Manager".
As seen in the image above, the Settings page contains a Grid ...
2
votes
1
answer
112
views
SNEEZY Error on Encryption - Email Message Relation Object
Similar to another question I posted regarding a SLEEPY error, now we have encountered a SNEEZY error. We are trying to enable the Encryption Policy for the Email Message Relation field to "...
1
vote
0
answers
24
views
can we auotomate the BYOK in salesforce using salesforce shield
WE are trying to do encryption for the salesforce data. our requirement is to use salesforce shield and also automate for B.Y.O.K. is it possible to automate the encryption key instead of doing it ...
0
votes
1
answer
342
views
On encrypting "Account name" standard field will it impact the first name and last name in shield encryption
I Have a requirement where i need to encrypt the "Account name" Standard Field.
But my question is will it also encrypt the FirstName & LastName
0
votes
1
answer
65
views
What populated "History" tab in encryption statistics?
When I navigate to Platform Encryption Statistics --> then toggle over to the History tab, I see a table with 4 columns. They are:
Encrypted Field History
Unencrypted Field History
Encrypted Feed
...
2
votes
1
answer
480
views
Deploying Shield Platform Encryption using Metadata API
I'm planning to deploy the encrypted field from our dev org to production?
Both environment has shield platform encryption enabled. The api version of the source organization is 44 and the target is ...
2
votes
0
answers
30
views
How to encrypt certain fields in managed packages
are there alternatives to encrypting personally identifiable data in fields that are not encrypt able through Shield?
0
votes
1
answer
94
views
Enable Shield in Org
Looking at getting shield up and running. To get the option to enable Shield, Field Audit Trail, and event monitoring, is that something I need to reach out to our success manager and have enabled ...
0
votes
1
answer
316
views
Equivalent to LIKE operator (in SOQL) in string method
Due to shield encryption, I have to get rid of any SOQL queries filtered with encrypted fields. Thought is to remove the filter from soql and validate the retrieved soql results against the searchKey ...
5
votes
2
answers
2k
views
Has anyone enabled Transparent Data Encryption (TDE) in Marketing Cloud?
I've submitted a support ticket to enable Transparent Data Encryption (TDE) on a Marketing Cloud instance. Since all of the encryption happens on the backend as opposed to Field Level Encryption (FLE) ...
0
votes
1
answer
332
views
Shield Encryption Timeline/Process
I was curious, I have been reading the Shield Encryption Implementation Guide. I am wondering if there was a strategy you took when implementing Shield Platform Encryption? Did you encrypt straight ...
3
votes
1
answer
724
views
Does Case-Insensitive Deterministic Encryption support SOQL LIKE and STARTS WITH statements?
The current Salesforce documentation states that deterministic encryption only supports exact, case-sensitive matches. This is why comparison operators that return partial matches aren't supported.
...
2
votes
1
answer
1k
views
What does "at rest" mean involving data encryption?
I've been reading the Salesforce Security Guide and it mentions involving Salesforce Shield and Platform Encryption that it
allows you to natively encrypt your most sensitive data at rest across
...
0
votes
1
answer
268
views
Why can I still see encrypted File and Attachment?
I have enabled Salesforce Shield in a developer org of mine, checked File and Attachment to make encrypted. After that, I created another user with a different profile who have not permission to see ...
0
votes
0
answers
273
views
Can you deploy transaction security policies
Is it possible to deploy Transaction Security Policies using change sets? These policies are part of the Salesforce Shield Event Monitoring product. Each policy is required to have a user in the "...
2
votes
1
answer
454
views
Deploy Salesforce Shield components in production sandbox
I have developed and tested transaction security policies in the sandbox environment. Can someone provide guidance around how to deploy these policies in production environment?
For Platform ...
2
votes
1
answer
183
views
Transaction security policy for multiple logins
I need to modify the existing transaction security policy to trigger if user logs in from multiple IP addresses in past 8 hours. I'm using the below SFDC example policy. Can someone give a hand on how ...
1
vote
1
answer
186
views
How to check if a field is encryptable
i want something like a report for all my fields in the org if they are encrytable or not and i want to know if they are encrypted currently.
By the getDescribe method i can detect if a field is ...
0
votes
2
answers
2k
views
What is the impact of encrypting all fields using Salesforce Shield / Platform Encryption
Why wouldn't someone decide to encrypt all the fields using Salesforce Shield?
5
votes
1
answer
168
views
Impact of Shield Platform Encryption on describe calls?
Some old code was obtaining information about record types by querying the RecordType object. But now that the RecordTypeInfo describe API includes the record type developer name, we have changed the ...
2
votes
1
answer
2k
views
Why can I still see encrypted data?
I have enabled Salesforce Shield in a developer org of mine, checked "Encrypted" in the custom field definition detail, and proceeded to update a record with a new value in the encrypted field.
I ...
0
votes
1
answer
1k
views
Does Salesforce Shield Field Audit trail allow field history tracking on detail objects in master details [closed]
Need to know about field audit trail, Salesforce shield.
3
votes
1
answer
142
views
How to Generate/Read BYOK-Compatible Certificate from Apex code
How can we read BYOK Compatible certificates present in Salesfoce using Apex (or SF REST APIs). Also is there any way to generate BYOK Compatible certificate using Apex code or SF REST APIs.
I ...
1
vote
1
answer
458
views
Shield: Encrypted Fields not encrypted
I have enabled platform encryption in a sandbox, and chosen to encrypt a few fields in the Contact object. However, when a user without the "View Encrypted Data" permission views a contact record, ...
1
vote
1
answer
142
views
Shield Encryption
I have a general doubt on using encryption nature. Suppose I use shield to encrypt data and send some data as merge fields in an email template to other system, how is the encrypted data transferred / ...
1
vote
3
answers
744
views
Encrypted data not in the encrypted format
I have enabled shield encryption for contact name in dev org.
when I try to create a new record on contact the record is still visible to the users and is not in encrypted format
I'm missing out ...
1
vote
0
answers
56
views
Get the string value of numbers in EventLogFile
I'm working on a parser for Shield events (EventLogFile).
I want to get the string value for APP_TYPE in Logout event:
Type:Number
Description: The application type that was in use upon ...
1
vote
1
answer
123
views
Working around platform encrypted managed custom fields in customer orgs
We are an ISV partner and have managed packages in customer orgs. We want to be able to know the encryption status of a field in the code before working with it so our package does not break in ...
1
vote
1
answer
82
views
Shield encryption partial search
I was wondering as to whether how Shield encryption supports partial search. Any ideas as to what kind of encryption scheme is used by Shield to support this ?
1
vote
1
answer
333
views
Platform Shield: Can we encrypt/decrypt the data explicitly using tenant secret in apex?
Is there way to ensure clear text? If it is encrypted can we use the tenant secret to decrypt OR vice versa?
I am trying to explore the apex side offerings of shield if any.
Any help is appreciated....
1
vote
1
answer
1k
views
How do I change my SOQL below so that Shield Platform Encryption is supported on SSN and the query supports large amounts of data
Our company has several packages and we've recently been asked to do some analysis on how to make them compatible with Salesforce Shield field encryption.
In the Shield encryption considerations doc, ...
7
votes
3
answers
736
views
Platform Encryption vs. FLS
What would I get from Platform Encryption that I cannot get from Field Level Security?
We are investigating whether or not to invest in Salesforce Shield, so I want to better understand the ...
2
votes
0
answers
46
views
Is it possible to use transaction policies to control API access granularity?
I know that the new Salesforce Shield / Apex transaction policies functionality allows monitoring of the events and automatically reacting to them (like automatically suspending accounts with '...