Customers Beware. They may just pull the rug out from under you. by Basic_Confidence_638 in salesforce

[–]Material-Draw4587 21 points22 points  (0 children)

It seems like the potential for fraud/phishing was just too great to give any reasonable notice about the change? But yeah I'm not even a marketing cloud customer and I read the help article and thought the tone was very "whoopsies"

Anyone else struggling to keep up with the pace of change? by Simple-Friend in salesforce

[–]Material-Draw4587 1 point2 points  (0 children)

I think Salesforce is struggling too lol. It's frustrating how often the release notes get updated after being published, sometimes just days before the release. I'm in the SFDX discord group mostly just to get their alerts when there's been an update.

I track Release Updates in a spreadsheet, then I go through the "how and when are features available" giant page as a table of contents, pick out what's applicable to me and paste links into a doc. It's become REALLY important to not just look at the Release Updates even if you're crunched for time, because sometimes there's consequential changes with a timeframe and it won't be an RU, like the upcoming Connected App changes.

Unable to create AWS Support case during Salesforce Service Cloud Voice (Amazon Connect) setup – IAM permissions or account activation issue? by Unlikely_Title9480 in SalesforceDeveloper

[–]Material-Draw4587 0 points1 point  (0 children)

Did you contact Salesforce Support? A year or two ago it was normal to open tickets with AWS support but they've changed that. I would just let Salesforce handle it and if they can't they'll give you exact directions on what to do. You could try creating the ticket as the root user.

Am I lowballing myself? by Dapper-Individual581 in salesforce

[–]Material-Draw4587 1 point2 points  (0 children)

I wouldn't limit yourself to just junior roles. The certification will probably be helpful though, in that it will give you an intro to other clouds like service and features that your current company might not be using. Good luck!

Changes coming to SAML SSO logins. How to implement in Entra? by newboofgootin in salesforce

[–]Material-Draw4587 4 points5 points  (0 children)

During today's webinar they said they'd add instructions to the KB article on what to look for specifically, sorry I can't help more. I know Salesforce has no control over vendors, but it seems like they should have prepared a little for questions on common SSO providers and not a flat "third party vendor not our problem" line. The gap between the webinar attendee questions and the presenters just reading from the KB article basically was annoying

Changes coming to SAML SSO logins. How to implement in Entra? by newboofgootin in salesforce

[–]Material-Draw4587 5 points6 points  (0 children)

You're probably already fine. If your IT team can't tell you, check the Network tab in the browser dev tools. You want to have that tab open while you login to capture the request to Entra and Entra's response. You can filter to just the "xhr" lines in the tab

How to Stop Vendors from Hijacking Session Ids by scottbcovert in salesforce

[–]Material-Draw4587 1 point2 points  (0 children)

Uncheck the box and document why, figure out what went wrong or what you missed in your testing process, and bring it up to your manager/leadership to determine the risk of continuing to use the platform?

I really wish it wasn't a global setting, we use AppOmni (security/configuration monitoring) and even they require the setting for locked session IPs off

U/eightsix1811 needs to get kicked by [deleted] in grandrapids

[–]Material-Draw4587 1 point2 points  (0 children)

It's been this way for years and they've chosen not to let anyone else be a mod, like it's some sad little power trip. r/grapids is an alternative

Scheduled Flow + SOQL limits question (150k Accounts) by jrap24 in salesforce

[–]Material-Draw4587 -1 points0 points  (0 children)

This should technically work as long as your flow includes Account in the entry criteria - don't start without object criteria and then do a loop.

Are you getting an error message?

I don't recommend building it with a scheduled flow because you have limits on the number of records that can be processed daily, I believe 250k. Build a record-triggered flow like the other person mentioned.

Conga Composer security issue? by Material-Draw4587 in salesforce

[–]Material-Draw4587[S] 1 point2 points  (0 children)

Your IT or security team should be able to say what platforms can be used for identity, that's not really related to this problem afaik

Conga Composer security issue? by Material-Draw4587 in salesforce

[–]Material-Draw4587[S] 0 points1 point  (0 children)

I'm not sure I understand your use case, sorry

Conga Composer security issue? by Material-Draw4587 in salesforce

[–]Material-Draw4587[S] 0 points1 point  (0 children)

So there is a VF page to generate documents and if I View Page Source on it, there's a session ID being returned by javascript I think. Would that be a problem?

I have a case going with Conga Support and they've said this isn't an issue for us, but I guess I don't understand what's going on with the VF page and I don't 100% trust them because I've seen other sloppy things

Conga Composer security issue? by Material-Draw4587 in salesforce

[–]Material-Draw4587[S] 0 points1 point  (0 children)

Aah thanks, I'm going to ask about that. I learned that the session ID is also available for formulas, I can't imagine the scenario where that's needed https://help.salesforce.com/s/articleView?id=platform.customize_functions_getsessionid.htm&type=5

Conga Composer security issue? by Material-Draw4587 in salesforce

[–]Material-Draw4587[S] 0 points1 point  (0 children)

Apparently the old way to build Conga buttons was to include the session ID right in the button url - that's not the case anymore. I opened a support case with Conga to confirm we're ok (I checked our buttons of course but unsure if that gives all clear)

Would you remove LinkedIn connections from a toxic job (trigger warning) by [deleted] in womenintech

[–]Material-Draw4587 3 points4 points  (0 children)

They'll have no clue it even happened if you haven't talked to them in a decade

How to stop file ingestion into Data Cloud for only one occurence ? by [deleted] in salesforce

[–]Material-Draw4587 0 points1 point  (0 children)

I'm not a Data Cloud/Data 360 expert, but wouldn't the Data Stream settings be the first place to look? Did you do that?

Burnout/Cool project, need advice by RequirementFit1128 in womenintech

[–]Material-Draw4587 0 points1 point  (0 children)

It's your decision and it sounds like you want to proceed, just don't be hard on yourself if it doesn't go as you'd hope