12
votes
Salesforce password reset link expires immediately upon request
There's a Salesforce Knowledge article about this. It is caused, as other posters have said, by the email server protection software. Salesforce lists Mimecast, McAfee's 'Link Protect' feature, ...
- 121
10
votes
Accepted
How do I reset an API user's password?
To some degree it will depend on the security requirements for your organization. If you absolutely must change the password, then you can use the current session to call SetPassword(). Of course, ...
- 102k
9
votes
Setting Password via APEX
The first parameter of that function call is the actual id of the user object. User Ids start with 005 and are 15 or 18 Characters long. for example:
System.setPassword('005300000123aBc','A$tr0ngPW');...
- 335
8
votes
Salesforce password reset link expires immediately upon request
For those who are experiencing this issue on Outlook, if the URL as presented by Outlook begins with something like https://nam02.safelinks.protection.outlook.com/?url=<escaped_sfdc_url>, then ...
- 181
6
votes
Salesforce password reset link expires immediately upon request
Is your email going through a virus scanner that checks links within emails for malware etc. ? The password reset link you are being sent expires as soon as the link is visited.
Having an admin send ...
- 832
5
votes
Accepted
Any Api to check if password meets policy requirements?
You can query the following via Metadata API:
For the Organization's default security, retrieve Settings then look at SecuritySettings > passwordPolicies > complexity
User's Profile's overridden ...
- 7,484
4
votes
How do I prevent Apex-created users from having to change password on first login?
This is "Working as Designed" in terms of Salesforce functionality. Any time a new user is created or their password is reset, it's expected they'll be prompted to create a new password of their own ...
- 40.9k
4
votes
Accepted
Protect a generated PDF
You can create a Username - Password step before allowing anyone to download your PDF. If you inform the user that he can download a PDF after inserting a Username and Password you can do something ...
- 3,909
4
votes
Is it possible to reactivate a deactivated user through apex?
yes it is possible. You can use following code to activate user.
User u = new User(id='GET_USER_ID');
u.isActive=true;
update u;
//To set password
System.setpassword('GET_USER_ID','NEW_PASSWORD');
/...
- 10.5k
4
votes
Accepted
Salesforce password policy
Yes, you can set a variety of parameters for your org’s password policy. In Classic or Lightning Setup, search for “Password Policies” in the quick find. The page is pretty self-explanatory - set ...
- 5,730
4
votes
Accepted
How Does salesforce stores passwords ? which algorithm / mechanism uses saelsforce to store password?
I suppose one of these https://trust.salesforce.com/en/compliance/ would cover your requirement at least from business perspective (i.e. without disclosing technical details)
- 3,074
4
votes
Best way to save a API integration password
Yes, you should use NamedCredential to store authentication details. It is significantly more secure than Custom Settings. No one in the system can view a password once saved to this object; this ...
- 149k
4
votes
Accepted
Difference between "Reset Password" & "Generate New Password"
"Generate new password and notify user immediately" can also be used to force a new email address on the existing user profile without sending the User a confirmation email to their existing email on ...
- 3,514
4
votes
Is there any way to preserve Sandbox User passwords and tokens when Sandboxes are refreshed?
No, you can't preserve anything from the pre-refresh Sandbox. Refreshing a sandbox is semantically equivalent to deleting the old sandbox, then creating a new sandbox with the same name. The only ...
- 481k
4
votes
Salesforce Password Expired
You're looking at the password policies for the org, but you most likely have Profile Password Policies defined which override it.
To ensure that the appropriate level of password security is used ...
- 21.8k
3
votes
Accepted
How to hide username and password in log file when using CLI DataLoader?
As per documentation sfdc.debugMessages will log SOAP message debugging. As login is one of the message that need to be exchanged it also log that with all input(user/pass) and output (session id,...
- 9,110
3
votes
Salesforce password policy
As already mentioned by Thomas, you can specify various password expiration policies that apply to the entire org, but you can also exempt certain users from this policy by setting the Password Never ...
- 481k
3
votes
Salesforce password reset link expires immediately upon request
Recently I've faced the same issue. Every time I clicked on the password reset link in my email from Outlook office, I saw
"Your reset link expired after 24 hours or has already been used.".
Once ...
- 7,454
3
votes
How to restrict saving password for visualforce page?
After digging into this situation, the major browsers have all agreed to ignore the autocomplete attribute for input type="password" fields. It's considered a security enhancement. You might consider ...
- 481k
3
votes
Accepted
Remove password policies from profiles and have only one central password policy?
Yes you can do it via metadata.
Thing your looking for is called ProfilePasswordPolicy
<types>
<members>*</members>
<name>ProfilePasswordPolicy</name>
</...
- 2,275
3
votes
Named Credentials using password authentication
Salesforce as a provider does not support Password Authentication. Hence Named Credential with Password authentication on the same org will not work and it will throw an error as below:
[{"...
- 106
2
votes
Setting Password via APEX
You can't hard code the UserId and password. You can try like this System.setPassword(u.id,passwordString);
- 112
2
votes
Setting Password via APEX
I hope you're not hard coding passwords, here's a few lines to generate a random alphanumeric char. Use as you will.
final String selectionString = '...
- 241
2
votes
Users required to reset their password even after System admin has set the password
This is by design in Salesforce - the System Administrator is not meant to know user passwords so even if you set the password for the user using the Developer Console it will still prompt them to ...
- 5,093
2
votes
Accepted
System.UnexpectedException: INACTIVE_OWNER_OR_USER: owner or user is inactive
Its because you are trying to reset the password in before update context when the user is still Inactive.
Try to reset the password in after update. That should work I guess.
EDIT
Have not tested ...
- 2,079
2
votes
Is there a way to find who did a password reset
Anyone that is not a Delegated Authentication user can request a password reset here: Forgot Your Password (or on Sandbox, etc). All it requires is that someone knows your username. Even if the user ...
- 481k
2
votes
Is there a way to find who did a password reset
The Setup Audit Trail should have that information.
The setup audit trail history helps you track the recent setup changes
that you and other administrators have made to your organization.
Audit ...
- 4,217
2
votes
Accepted
Retrieving the password of a user with php api
Pretty much all password based APIs will not return the value of the password that the user entered. Instead they store an encrypted version of the password such as a salted hash and when a login ...
- 135k
2
votes
How Does salesforce stores passwords ? which algorithm / mechanism uses saelsforce to store password?
I don't believe any organization that follows data security standards is storing or should be storing user passwords in any form - plain text or encrypted. Password validation can be done by using ...
- 3,094
2
votes
Accepted
Check the username and the password of a community user
The response is the APEX method Site.changePassword().
https://developer.salesforce.com/docs/atlas.en-us.apexcode.meta/apexcode/apex_classes_sites.htm
- 723
Only top scored, non community-wiki answers of a minimum length are eligible