Scratch Org Users

Scratch Org User Limits, Defaults, and Considerations

• You can run the org create user command only for scratch orgs. If you try to create a user for a non-scratch org, the command fails.
• Your scratch org edition determines the number of available user licenses. The number of licenses determines the number of users you can create. For example, a Developer Edition org includes a maximum of two Salesforce user licenses. Therefore, in addition to the default administrator user, you can create one standard user.
• The new user’s username must be unique across all Salesforce orgs and in the form of an email address. The org create user command provides the --set-unique-username flag to ensure uniqueness. The username is active only within the bounds of the associated scratch org.
• You can’t delete a user using Salesforce CLI, just like you can’t delete a Salesforce user using Setup. The user is deactivated when you delete the scratch org with which the user is associated. Deactivating a user frees up the user license. But you can’t reuse usernames, even if the associated user has been deactivated.
• The simplest way to create a user is to let the org create user command assign default or generated characteristics to the new user. If you want to customize your new user, create a definition file and specify it with the --definition-file (-f) flag. In the file, you can include all the User sObject fields and a set of Salesforce DX-specific options, described in User Definition File for Customizing a Scratch Org User. You can also specify these options on the command line.
• If you don’t customize your new user, the org create user command creates a user with these default characteristics.
  • The username is the existing administrator’s username prepended with a timestamp. For example, if the administrator username is test-wvkpnfm5z113@example.com, the new username is something like 1505759162830_test-wvkpnfm5z113@example.com.
  • The user’s profile is Standard User.
  • The values of the required fields of the User sObject are the corresponding values of the administrator user. For example, if the administrator’s locale (specifically the LocaleSidKey field of User sObject) is en_US, the new user’s locale is also en_US.
• After the new user has been created, Salesforce CLI automatically authenticates it to the scratch org so the new user can immediately start using the scratch org. Salesforce CLI uses the same authentication method that was used on the associated Dev Hub org. Due to Hyperforce limitations, if the Dev Hub authentication used the JWT flow and the scratch org is on Hyperforce, then the scratch org user creation fails. For this reason, if you plan to create scratch org users, authenticate to the Dev Hub org with either the org login web or org login sfdx-url command, and not org login jwt.

How Scratch Org Users Can Log In to the Scratch Org

How you log in to a scratch org can depend on if you’re the default admin user, or on which infrastructure the scratch org was created. To determine the infrastructure, find the Instance on the Company Information Setup page, then go to Find My Instance.

• Regardless of the instance, default admin users can log in using test.salesforce.com or the My Domain URL, such as https://MyDomainName.scratch.my.salesforce.com.
• If the scratch org is on a Salesforce first-party instance, other users can log in using test.salesforce.com or the My Domain URL.
• If the scratch org is on a Hyperforce instance, other users must log in using the My Domain URL.