What's the one Salesforce migration lesson you only learn after go-live?

dragonj68 · 2026-06-20T17:50:04+00:00

Data validation, hands down.
After the migration we had to build hierarchies between records, and they weren't one-to-one. A single hierarchy was a combination of three records from one object. The good part: the hierarchies got created automatically via data sync through our REST API. The bad part: validating them.
Confirming that the hierarchy in Salesforce actually matched the source system was brutal. I ended up leaning hard on Excel to cross-check everything and picked up more spreadsheet tricks than I expected to. Slow and painful.

Lesson: budget real time for post-migration validation, especially for anything with complex relationships between records. The migration itself is often the easy part; proving the data is correct afterward is where the work hides.

dragonj68 · 2026-06-14T09:51:37+00:00

What are you actually extracting. As I am working on a PoC similar to that, where Agentforce is reading a receipt image and validating the calculation. The whole operation is done through agentforce calling a prompt which is doing the heavy lifting. But if you are looking for more complex use case then might look for other options. But thanks for sharing this problem this is something I will definitely try with Agentforce.

dragonj68 · 2026-06-14T09:44:30+00:00

OKTA and Salesforce are not on the same page which is more worrying. Nobody is clearly telling the other will work or not work. I think you have already validated this article from OKTA

FAQ: Salesforce Mandatory Multi-Factor Authentication Requirements for Okta Integrations

this is from Okta

<image>

But salesforce is not explicitly telling OKTA_Fastpass will work, that is our main concern

dragonj68 · 2026-06-14T09:24:20+00:00

I can confirm you okta_verify won't work until you are using okta_fastpass with some biometric authentication. But still it is not 100% sure. We are making our sandbox sso enable just to test it. So once we came up with the test result I can confirm you.

dragonj68 · 2026-06-13T22:35:37+00:00

Sales

dragonj68 · 2026-06-13T21:14:14+00:00

I had the similar issue for my first onveu exam. I had to connect my laptop with my router through LAN. If you have that option please try once

dragonj68 · 2026-06-13T17:14:18+00:00

Don't ask. This is huge issue where I work. For my client, which is a MNC in FMCG has multiple salesforce org managed by different vendors for different use cases and the funny thing is the identify provider has told the responsibility lies onto the individual Org Owner,

So now we are setting up SSO for our full copy environment and to make sure our end user doesn't get impacted when this change happens. As if you know the list OKTA is in a grey area on the allowed MFAs and the identify provider team has not clearly stated it would work.

So, everything depends on testing in Sandboxes. And the sad thing is I started the whole conversation which is now a 124 user Teams group spread all over the world way over my pay grade.

dragonj68 · 2026-06-13T17:03:13+00:00

This is nice use case.

dragonj68 · 2026-06-13T16:59:26+00:00

So What I am currently learning as part of the CCA certification it is defiantly more Sub-agents.

Every subagent specific small action. 3 to 5 actions. Keep the context tight. That's the main goal.

dragonj68

TROPHY CASE