Security Model

                                                                           

• System Level Security
• Application Level Security

                                                                                 

   SECURITY FEATURES – SYSTEM LEVEL SECURITY

Salesforce primarily has two types of Security Features

1. System Level Security – Before Login
2. Application Level Security – After Login

1. System Level Security

 a. Authentication (Single Sign-On : Federated Authentication):

• SAML – Standard for Federated Single Signon
• Security Assertion Markup Language
• Identity Store is the Master of “User Identity” : Example : LDAP (Lightweight Directory Access Protocal)
• Identity Provider (IDP) is the Identity Assertion Provider
• Service Provider (SP) is the provider of Enterprise Service
• Identity Provider – AXIOM
• Service Provider – Salesforce

 b. Authorization

• An open Protocol to authorize secure API access for desktop/mobile client application.
• OAuth client makes an Authorization Request
• The Authorization server authenticates the user
• The user authorizes the application
• The application is issued an OAuth token

c. Social Signon

• SSO & OAuth based API access from public Source . Ex: Facebook, Twitter
• Automatically create & update user and contacts.
• Single Signon makes it easy and keeps them coming back.

When to Use What?

• Just the Basics – Username/Password
• Single signon for the web application with commercial Support – SAML
• Building an API client or mobile application.

 

SECURITY FEATURES – APPLICATION LEVEL SECURITY

1. Creating & Managing Profil
2. Field Level Security
3. Permission Sets
4. Control Record Level Visibility using OWD
5. Control Record Level Visibility using Roles Hierarchy
6. Control Record Level Visibility using Roles Sharing Rules
7. Configure Record Types