Questions tagged [shield-encryption]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
68 views

Is it possible to (Unlocked) Package field encryption settings?

I'm having issues proving whether it is or isn't possible to have field encryption settings packaged as part of an Unlocked Package (with a Namespace) and this encryption be enabled automatically upon ...
alesremta's user avatar
  • 443
0 votes
1 answer
202 views

Shield encryption : Affecting formula field as where clause in a Like query

We have Name field on account which is encrypted. (PersonAccount) Now as this field is encrypted we cannot fire a Like query as a partial match. So we created a formula field and copy the FirstName ...
Nagendra Singh's user avatar
0 votes
1 answer
247 views

Salesforce Shield Encryption - official video showing invalid information

I was looking into Salesforce Shield Encryption. Apparently Salesforce Shield Encryption does not mask any data, but encrypts the data at rest, which means only at the database level. Anyone who has ...
DevelBase2's user avatar
6 votes
1 answer
777 views

How to find the encrypted fields from inside an LWC?

I have Shield Platform Encryption turned on for Account.Name and a server-side field describe call: System.debug(JSON.serializePretty(Account.Name.getDescribe())); returns as expected these ...
Keith C's user avatar
  • 136k
1 vote
0 answers
759 views

Unable to activate matching rule

In our org, deactivation of Matching Rules and Duplicate Rules was required by the encryption process in order to encrypt a field (Contact Email). When we try to re-activate these rules, we are ...
Strong Like Bull's user avatar
0 votes
1 answer
595 views

Why are Custom object Name Field and date fields (Deterministic Encryption) not allowed to be encrypted?

I read a lot of documentation regarding Shield Platform Encryption and I can't find any statement in regards to why some of these custom Object Name Field and date fields (Deterministic Encryption) ...
Tejesh P's user avatar
2 votes
1 answer
268 views

Shield encrypted field, unencrypted results?

If a field is encrypted with Shield, can we get the unencrypted value with Apex classes/SOQL statements?
hoviwan's user avatar
  • 23
0 votes
1 answer
184 views

Salesforce Encryption Enabled With Errors

I am trying to encrypt field Lead.Name but it fails due to: Encryption can't be enabled for fields referenced in the custom formula fields: Lead.Data Quality Description. I checked this formula field ...
Damecek's user avatar
  • 1,918
2 votes
1 answer
309 views

FIELD_INTEGRITY_EXCEPTION, Last Name: You must enter a valid value: [LastName]

One of our integrations attempted to insert a Contact record with a value for LastName = ????? (yes - five question marks). SFDC failed the insert (before any trigger executed) with: ...
cropredy's user avatar
  • 70.9k
0 votes
1 answer
1k views

Report row level formula does not work

I have a simple row level formula on an Activity Report CASE(Subject, 'Foo','1', 'Bar','2', 'n/a' ) But, given these Task records Id Subject -- ------- ... ...
cropredy's user avatar
  • 70.9k
3 votes
1 answer
1k views

New Spring 21 sandbox SOQL query fails on encrypted Account Name

Spun up a new Spring 21 sandbox from our Shield Platform-encrypted PROD org. PROD has Account.Name deterministic, case-insensitive encryption. Created a new Account with name = foo Went to ...
cropredy's user avatar
  • 70.9k
0 votes
1 answer
189 views

How can I verify encryption for Platform Events?

Does Salesforce provide a way to check Shield Platform Encryption for Platform Events? I wanted to verify what type encryption is applied to Platform Events when encryption is enabled from Setup -> ...
SunnyG's user avatar
  • 421
1 vote
1 answer
616 views

Is there a way to programmatically encrypt custom fields?

For standard fields, we can do it via Setup (Setup > Encryption Policy > Encrypt Fields), then we get a list of all available fields and we can tick the box for each one. But for custom fields, ...
Json's user avatar
  • 1,587
1 vote
2 answers
215 views

Scratch Org - Generate Keys automatically

I would like to know if anyone has a way of generating platform encryption keys when building a scratch org? Currently, the way I know is to Create a Permission set with: MANAGE ENCRYPTION KEYS ...
Moazzam Khan's user avatar
1 vote
1 answer
391 views

How to support shield encryption in managed package?

I have read documentation regarding Platform Encryption on managed package and everywhere its written that If a managed package supports Shield encryption then we can encrypt fields. So if I am ...
Nagendra Singh's user avatar
0 votes
2 answers
319 views

HTML email template renders formula field as null. Formula references encrypted field(s)

Given Cross-object formula field My_Identifier__c on Case: Asset__r.My_Identifier__c where Asset.My_Identifier__c is a text field, Shield-encrypted HTML email template that looks like: Here is the ...
cropredy's user avatar
  • 70.9k
0 votes
2 answers
625 views

purpose of Salesforce Shield Encryption [closed]

What is purpose of using salesforce shield encryption, when the encrypted fields are not being masked in Rest Calls, data load export files etc, what benefits we get it from doing so. 3)How would we ...
Shiva N's user avatar
0 votes
2 answers
1k views

Government Cloud and Encryption for data at-rest

If I walk out of a Salesforce Government Cloud data center with a disk or tape that contains customer data, I assume the disk or tape is encrypted. I won't be able to just mount the drive and browse ...
krigi's user avatar
  • 2,201
1 vote
1 answer
511 views

Marketing Cloud Connect - extracting data from Sales Cloud with Shield Encryption

We would like to implement shield platform on the Sales Cloud and use the Marketing Cloud Connect to have the Sales Cloud data in the synchronized data extensions. Will the data in the synchronized ...
Ben's user avatar
  • 11
0 votes
1 answer
185 views

Scope of Salesforce Shield

When you license Salesforce Shield is it at the org level? I’m having trouble determining this answer. Based on what I can see via TrailHead, this should apply to any data within the org including any ...
Ta01's user avatar
  • 103
1 vote
2 answers
1k views

Change a formula field and get Data Uniqueness Violation - The proposed data changes would violate a uniqueness constraint

Given Existing custom field Asset.SerialNumber (OOTB - Text) New custom field Asset.SerialNumber_bis__c (Text255, External Id non-unique, deterministic encrypted case insensitive) Existing custom ...
cropredy's user avatar
  • 70.9k
2 votes
1 answer
206 views

Non-selective query error Email-to-case Contact.Email Deterministically Encrypted when dup emails

Given: Over 200,000 Contacts with emails Contact.Email is deterministically encrypted - case insensitive All Contacts encrypted Two contacts have the same email address [email protected] E2C executes ...
cropredy's user avatar
  • 70.9k
1 vote
1 answer
2k views

Shield Encryption(Deterministic vs Probabilistic) and Where Clause

I was going through salesforce documentation for shield encryption and got to know below. Deterministic encryption comes in two types: case-sensitive and case-insensitive. With case-sensitive ...
MandyKool's user avatar
  • 461
3 votes
1 answer
205 views

Use Salesforce KMS for Encryption- Order of Operations

This is a Multi-part question.... If I wanted to utilize the Salesforce KMS. Do I just need to hit the Generate Tenant Secret button on both the Data In Salesforce and Data in Salesforce (...
testtesttest's user avatar
2 votes
2 answers
603 views

Encrypting PII data with our own keys

I'm new to Salesforce and working on a problem being raised by my team. They have a requirement to encrypt all PII passing between our systems and Salesforce . Our company only allows for this data to ...
RockyMountainHigh's user avatar
0 votes
1 answer
70 views

Momentarily Disable Encryption

This is an odd problem, but nonetheless, I am stumped. Has anyone ever had to disable encryption in order to get bulk data loads to succeed? Right now, we are encrypting fields on the account object....
TestMcTesterson's user avatar
0 votes
1 answer
703 views

On encrypting "Account name" standard field will it impact the first name and last name in shield encryption

I Have a requirement where i need to encrypt the "Account name" Standard Field. But my question is will it also encrypt the FirstName & LastName
Dinesh Prasad's user avatar
0 votes
1 answer
101 views

What populated "History" tab in encryption statistics?

When I navigate to Platform Encryption Statistics --> then toggle over to the History tab, I see a table with 4 columns. They are: Encrypted Field History Unencrypted Field History Encrypted Feed ...
TestMcTesterson's user avatar
2 votes
1 answer
769 views

Deploying Shield Platform Encryption using Metadata API

I'm planning to deploy the encrypted field from our dev org to production? Both environment has shield platform encryption enabled. The api version of the source organization is 44 and the target is ...
imajmdf's user avatar
  • 837
2 votes
1 answer
1k views

Why are certain custom fields not allowed in Shield Platform Encryption?

Hi I was wondering why Formula, Checkbox, Number and Picklist data types are not allowed to be encrypted? If so are there any workarounds for this one? I read a lot of documentation regarding Shield ...
imajmdf's user avatar
  • 837
6 votes
2 answers
4k views

Way to see all encrypted fields in Salesforce?

I was looking for a way to see what fields in an org are encrypted. I am aware of the encryption statistics, however I was hoping there was a way where I could do a SOQL query and return all the ...
TestMcTesterson's user avatar
0 votes
1 answer
262 views

CampaignMember and Platform Encryption - Unable to encrypt fields

There are multiple fields within the CampaignMember object that I would like to, and should be, encrypted. For example, FirstName, LastName, Email, etc. Is there a reason I can't encrypt these? My ...
TestMcTesterson's user avatar
1 vote
1 answer
223 views

nameField encrypted metadata not deploying correctly

We have enabled platform encryption and are deploying the <encrypted> tags for standard and custom fields on objects. However we are seeing an issue when trying to deploy for <nameField>. ...
Bryan Anderson's user avatar
0 votes
1 answer
429 views

Equivalent to LIKE operator (in SOQL) in string method

Due to shield encryption, I have to get rid of any SOQL queries filtered with encrypted fields. Thought is to remove the filter from soql and validate the retrieved soql results against the searchKey ...
Kanikala's user avatar
  • 197
3 votes
2 answers
404 views

Custom Journey Builder Flow Control Activity

I would like to build a custom journey builder flow control activity to read directly into Salesforce org with field encryption. This is to bypass the need to bring entry data into marketing cloud. ...
Daniel Chen's user avatar
1 vote
1 answer
1k views

Any way out of "Encryption can't be enabled for fields referenced in the custom formula fields"?

I have a formula field based on a date field, and I want to have the date field encrypted using Shield Platform Encryption. But when I try to turn the encryption on I get: Error on fields update ...
Keith C's user avatar
  • 136k
1 vote
2 answers
117 views

Case Insensitive - GA Summer 19?

I have been doing some digging on case Insensitive encryption. I am reading this: Get Exact Matching with Case-Insensitive Deterministic Encryption (Generally Available) And it looks like this ...
TestMcTesterson's user avatar
4 votes
1 answer
307 views

Platform encryption scratch org errors "common.exception.SfdcSqlException: ORA-00932: inconsistent datatypes: expected CHAR got DATE"

For the past couple of weeks our Continuous Integration (CI) build that uses SFDX and scratch orgs has had most of its queries failing for the Platform Encryption org with this error: common....
Keith C's user avatar
  • 136k
5 votes
1 answer
1k views

Reading into Shield Encrypted Fields from Salesforce Marketing Cloud

We are currently integrated with the core platform through marketing cloud connect and we are using salesforce data as an entry source in most of our journeys. My question is, if we were to go with ...
Daniel Chen's user avatar
1 vote
1 answer
133 views

See reason why records failed to encrypt

I am going through an encryption effort in a SF sandbox. While encrypting, I noticed a few inconsistencies. For example, I got an email mentioning: Sandbox: Unable to Complete Encryption Task. I am ...
TestMcTesterson's user avatar
0 votes
1 answer
95 views

Loading Encrypted Records

I have been looking to see what other people have experienced regarding loading records into an environment with encryption enabled. If I were to use a tool such as DBamp, to load records into an an ...
TestMcTesterson's user avatar
0 votes
1 answer
2k views

Encrypt Formula Fields with Platform Encryptiion

Are any types formula fields able to be encrypted via platform encryption? I have been looking for options, and so far, I have been unsuccessful in locating any documentation. If not, what have you ...
TestMcTesterson's user avatar
0 votes
2 answers
164 views

Encryption Impact - Enabling Encryption vs Encrypting Data

This is more of a curiosity question. I have went through and encrypted ~50 fields in a sandbox with existing data. There are more fields I would like to encrypt, but they will take some more work ...
TestMcTesterson's user avatar
0 votes
1 answer
98 views

Encryption Question regarding SF generating Tenant Secret

From a testing perspective for platform encryptuion, if I follow this article, and hit the "generate tenant secret" button, am I good to start encrypting? In the BYOK documentation, it mentions ...
TestMcTesterson's user avatar
1 vote
1 answer
306 views

Salesforce BYOK Strategy

So - I have been doing research regarding Salesforce platform encryption, and am struggling to find the actual "button pushing" steps to accomplish the BYOK plan. Please correct these following steps ...
TestMcTesterson's user avatar
0 votes
1 answer
278 views

Supported Encryption Operators/Functions

I have been looking into supported operators and functions within Salesforce, and found this list: Supported Operators, Functions, and Actions Supported operators and functions: & and + (...
TestMcTesterson's user avatar
0 votes
1 answer
411 views

Shield Encryption Timeline/Process

I was curious, I have been reading the Shield Encryption Implementation Guide. I am wondering if there was a strategy you took when implementing Shield Platform Encryption? Did you encrypt straight ...
TestMcTesterson's user avatar
2 votes
0 answers
28 views

Make package field referred in formula editor encryptable

We are working on making a managed package Salesforce Shield compatible. In one of the package object, we have a formula field which uses another package field and compare it with a string using CASE ...
Praveen's user avatar
  • 10.1k
3 votes
1 answer
1k views

Does Case-Insensitive Deterministic Encryption support SOQL LIKE and STARTS WITH statements?

The current Salesforce documentation states that deterministic encryption only supports exact, case-sensitive matches. This is why comparison operators that return partial matches aren't supported. ...
kabdelr00's user avatar
  • 303
0 votes
1 answer
457 views

Why can I still see encrypted File and Attachment?

I have enabled Salesforce Shield in a developer org of mine, checked File and Attachment to make encrypted. After that, I created another user with a different profile who have not permission to see ...
Hennry's user avatar
  • 35