Newer Version Available

This content describes an older version of this product. View Latest

Set Up the Environment Hub

Available in: Salesforce Classic
Available in: Enterprise, Performance, and Unlimited Editions

User Permissions Needed
To set up and configure the Environment Hub: “Manage Environment Hub”
Follow these steps to set up the Environment Hub for the first time.
  1. Choose which organization you want to use as your hub organization. Use the organization that most employees log in to regularly.
  2. Optionally, set up and deploy My Domain for your hub organization.

    You can enable the Environment Hub and use it to create organizations without using My Domain. However, My Domain deployment is required to enable single sign-on or connect existing organizations to the hub.

    Note

  3. Contact Salesforce support to get the Environment Hub enabled for your hub organization.
  4. After the feature is enabled, log in to your hub organization via the new My Domain URL.
  5. Edit profiles or permission sets to assign users access to specific features of the Environment Hub.
    1. From Setup, enter Profiles in the Quick Find box, then select Profiles.
    2. Click Edit next to the appropriate profile.
    3. Select the settings you want to enable on the profile editing page.
    4. Click Save.
    This table summarizes the settings for the Environment Hub in the profile editing page.
    Section of Profile Settings for Environment Hub
    Custom App Settings Enable the Environment Hub custom app, so it’s available in the Force.com App menu.
    Connected App Access The Environment Hub connected app is for internal use only and doesn’t need to be enabled for any profiles. Unless advised by Salesforce, don’t delete the connected app or adjust its settings.
    Service Provider Access A new entry appears here when single sign-on is enabled in a member organization. Enabling access to a service provider allows single sign-on login access to the corresponding member organization.  The service provider is named [OrganizationID] Service Provider, where [OrganizationID] is the organization ID of the member organization. Users who don’t have access to the service provider sometimes see this message when attempting to log in via single sign-on: “User [UserID] does not have access to sp [ServiceProviderID].”
    Administrative Permissions The “Manage Environment Hub” permission controls which profiles can enable, create, and edit single sign-on configuration for member organizations. It also controls which profiles can create organizations from the hub (via the Create Organization button).
    General User Permissions The “Connect Organization to Environment Hub” permission controls which profiles can connect existing organizations to Environment Hub.
    Standard Object Permissions The Hub Members settings control access to the Environment Hub Member entities as follows:
    • Read: The ability to view existing Hub Member records.
    • Create: This setting has no impact on the ability to create Hub Member records. That’s because record creation is handled either by connecting an existing organization or creating an organization from Environment Hub.
    • Edit: The ability to edit various fields on existing Hub Member records (Organization, Description, and so on). All fields are editable, because most are managed internally.
    • Delete: The ability to disconnect an organization from the Hub and delete its corresponding Environment Hub Member record and Service Provider record (if SSO was enabled on the Member).
    • View All: The administrative ability to read all Hub Member records, regardless of who created them.
    • Modify All: The administrative ability to read, edit, and delete all Hub Member records, regardless of who created them.
    Also, the Hub Invitations settings are used to manage connecting organizations to Environment Hub. When enabling the “Connect Organization to Environment Hub” permission, also enable Create, Read, Update, and Delete for the Hub Invitations object. Otherwise, it can safely be disabled.
  6. Define user mappings to configure which users have single sign-on access to specific member organizations. For more information, see Enabling Single Sign-On and Defining a SSO User Mapping.

After you’ve completed these steps, any user with the appropriate profile can access the Environment Hub by clicking Environment Hub in the App menu. The types of actions a user can perform in the Environment Hub depend on the settings in that user’s profile.