Hot answers tagged

15

If you have SSO then I assume you have My Domain enabled. In the My Domain setup you can set the right frame URL, if it's blank it loads the ad from Salesforce. I would point it to some internal page for your users. Or, you can create a force.com site page with any image/value you want and it would be 100% on the platform. Or, I found there are blank ...


10

This is a question many Salesforce consultants will face - we will need to open many Salesforce instances and many of them are under the same domain. I would recommend using some multi-session plugins for this purpose: multi-fox for firefox: https://addons.mozilla.org/EN-us/firefox/addon/multifox-toolbar-button/?src=search Sessionbox for chrome: https://...


8

There's two main ways to use 2FA. The first is where you enter a code each time you log in, and the second is where you authenticate the login through a mobile app. If you install the Salesforce Authenticator, and connect it to your login for 2FA, you can then log in simply by pressing a button on your phone after entering your password. Additionally, during ...


6

Yes, the logs go back just six months. Even salesforce's Data Recovery option only goes back three months. If you're concerned that you need a longer audit trail, there are ways of doing this. Two thoughts that come to mind are delegated authentication and regular exports of the login history. The former works because delegated authentication moves ...


6

I think this is still supported if you drop the login.jsp and put the query string after the slash: https://login.salesforce.com/?un=daniel@example.com&pw=hunter12 Note to other readers wrapping the login process in this way, be VERY particular to use HTTPS!


6

Have a look at the SandboxPostCopy Interface. It should be possible to have Apex run after the Sandbox is created and then modify the specific User records email address fields.


5

That should be possible, indeed. You can recompose the URL and forward a user to it when clicking on a custom button. If you hover over the 'Log in to...' option and right-click, there will be an option to copy the URL or link. Copy it and paste it to a text editor. It will look similar to this: javascript:navigateToUrl(%27/servlet/servlet.su?oid=...


5

No documentation can be found in Salesforce but it just works. The other issue I found is that for some reason test classes don't work well with them. Hence I include code like if(!Test.isRunningTest()) { aura.redirect(lgn); } so that I doesn't affect the test class and code coverage.


4

You can use the relatively new UserLogin sobject to get this, select id, username from user where id in (select userId from userLogin where isPasswordLocked=true)


4

This is a known issue still unfixed but in review and we are not alone (it affects at least 59 others). If you haven't already you should state there that it affects you, too. https://success.salesforce.com/issues_view?id=a1p30000000T4hLAAS Summary After a sandbox has been activated, it may take up to 5 hours for login attempts via the test....


4

No, the user should not have to login that frequently. I use S1 on cellular data all the time without having to re-login. What should happen is, when they login, S1 is given an access token (with session lifetime) and a refresh token (indefinite lifetime). S1 should save the refresh token to the iOS keychain. After their session times out, S1 should send the ...


4

Honestly, it's easier to just create a new account (unless, of course, you were hoping to use that precise username, which will remain locked for future use indefinitely). It's true that salesforce.com technical support could technically fix your problem in about one minute flat if they'd take the time, but their support process is unnecessarily complex (...


4

It uses your default browser settings to set the language Here I have set my language to german And the resulting login page Once you are logged in, it will use your locale settings in your profile.


4

I believe this is related to Knowledge Article 000229717 - www.salesforce.com API Endpoint Retirement. Essentially, you need to use https://login.salesforce.com for production and developer edition orgs. https://login.salesforce.com/login.jsp?pw={password}&un={username} Since this will likely come up in the near future, I'm also liking to Knowledge ...


4

This is similar to the question I answered here. The Connected app - client id and client secret can be from any org and it does not matter if you're not seeing that connected app in your org. This thread may also help understand this better. As for the other part of your question The problem I'm having is that my iOS app requires a re-login on every ...


4

You can't have assign IP restrictions through Permission sets (or) Workflows or any other ways. For your problem you have to assign a separate profile for the user is only the way.


4

Storing the username and password - Ultimately something has to be stored, and an access token can be used to access resources just as easily as a username and password. That's one point of view, but the other is that it allows you to use the "id" scope to log in to other systems that don't even care about your salesforce.com data, but use the information ...


4

If you are using chrome, you can make a chrome extension to do this. Firefox and I think Safari also allow you to make extensions. My extension widens the login inputs, but making the advertising div invisible should be pretty easy also. Make a manifest: { "manifest_version": 1, "name": "Modify CSS and HTML", "version": "0.1.0", "description": "...


4

When I recently turned on communities this example controller (and a login form Lightning Component front) end was automatically added to the Developer Edition org: global class LightningLoginFormController { ... @AuraEnabled public static String login(String username, String password, String startUrl) { try{ ApexPages....


4

You should be able to query AuthSession.SourceIp. An AuthSession record with a SessionType of SubstituteUser is created when you log in as another user.


4

You may be in luck. There's something call the ExperienceID or expid that potentially could be used to do what you want to achieve. Its primary purpose is to be able to customize the "branding experience" for customers depending on where they are sent to your community from. You can learn more about it by reading this link to the Salesforce External ...


4

You cannot run a process builder/trigger/workflow without logging in. The best you do is with invalid password then lockout the user. Set the lockout effective period to forever, then show a locked user a page asking them to email the admin/security team. By this way, the security team will always know whats going on with users. Another Approach will be ...


3

Not sure why your welcome email link didn't work; you might try copy-pasting the entire URL in case there's a render problem in your email client with the link. What you should have seen was a screen asking you to set a password (and confirm it), and to choose a secret question & answer for password recovery. If there's any chance you did that and ...


3

Double check against that you are sending the Content-Type header as application/x-www-form-urlencoded and that you are encoding the parameters correctly. I.e. Note that the @ in the email becomes %40. Here is a working example I did using Postman in Chrome. Raw POST body: grant_type=password&client_id=3MVG9iTxZANh12345678901234567890X9eYLSx....


3

You can query the AuthSession object to get the active sessions, which will include any that haven't ended due to timeout or the user explicitly logging out. There will generally be multiple AuthSession records per user because a Visualforce session is created in addition to a normal UI session. There will also be non-interactive sessions for users ...


3

You can see currently logged in users in Setup > Security Controls > Session Management. For more information, have a look here: https://help.salesforce.com/htviewhelpdoc?id=security_user_session_info.htm&siteLang=en_US You can also use the AuthSession object to use this information in your code: https://www.salesforce.com/developer/docs/api/Content/...


3

I believe you could use it for example to gather further information from the user to decide what Data categories you want to give them access too if logging in via communities, or you have a different way to authenticate the user via some other authentication process.


3

Not sure if this is used everywhere BUT, Since it is a web tab, if you have control over it and can access cookie information you can check for the cookie matching the salesforce instance i.e: na1.salesforce.com and look for the RRetURL and if it is set to a user ID then you can assume they are logged in as another user. Here is an example of that value ...


3

Is your email going through a virus scanner that checks links within emails for malware etc. ? The password reset link you are being sent expires as soon as the link is visited. Having an admin send you a password reset link will most likely work as it uses a different format for the token and the link does not expire until the password is actually reset ...


3

In the ideal world you would create a connected app, and then use OAuth and a refresh token to establish the session. This is a good approach, because your extension never needs to have the Salesforce users raw credentials. The security token won't be required. Alternatively, you can use a stored username and password against the Partner API to perform the ...


Only top voted, non community-wiki answers of a minimum length are eligible