Identity Implementation Guide

What Is Salesforce Identity?
How to Use Identity
My Domain
Brand Your Salesforce Org’s Domains
What Is My Domain?
Set Up My Domain
Salesforce Edge Network
What Is Salesforce Edge Network?
Route My Domain Through Salesforce Edge Network
Considerations for Salesforce Edge Network
Enhanced Domains
Configure My Domain Settings
My Domain URL Formats
Get System Performance and Maintenance Information with My Domain
Connected Apps
Configure and Use the App Launcher
Single Sign-On from an External Identity Provider
Multi-Factor Authentication
Synchronize Your Salesforce and Active Directory Users with Identity Connect
Customer 360 Identity
Monitor Apps and Run Reports
Get More Information About Salesforce Identity, Single Sign-On, and Security
PDF

Considerations for Salesforce Edge Network

Find out how to prepare your org to use Salesforce Edge Network. In particular, know which URLs can’t be routed through Salesforce Edge Network.
Available in: both Salesforce Classic (not available in all orgs) and Lightning Experience
Available in: Group, Essentials, Professional, Enterprise, Performance, Unlimited, and Developer Editions

Prerequisites

Prepare your org before activating Salesforce Edge Network.

  • To route your org through Salesforce Edge Network, you must have a deployed My Domain.
  • If you allowlist Salesforce IP addresses by region, Salesforce recommends that you include our current IP address ranges for regions where you have end users.
  • If you use client-side certificate pinning to validate the server’s certificate, Salesforce doesn’t recommend pinning leaf certificates. Because Salesforce Edge Network uses data center specific certificates, Salesforce recommends that you pin the intermediate certificate instead for a better experience.

There are limitations when enabling Salesforce Edge Network.

  • Public Cloud, Government Cloud, Customer 360 Data Manager, and some individual orgs are currently excluded from Salesforce Edge Network.
  • Moving to Salesforce Edge Network can only be undone by Salesforce Customer Support.

Note

URL Routing

To maximize the number of URLs that are routed through Salesforce Edge Network, enable enhanced domains after your org is on Salesforce Edge Network. With enhanced domains, all URLs across your org include your company-specific My Domain name, and instance names are removed from your org’s URLs.

When you enable Salesforce Edge Network, most of your My Domain URLs are routed through it. However, note these exceptions.
  • URLs that contain your Salesforce instance name. See which My Domain URLs contain your instance name in My Domain URL Formats.
  • URLs associated with custom domains, such as https://www.example.com, that serve your org’s Salesforce Sites and Experience Cloud sites
  • Salesforce Sites and Experience Cloud sites with domains ending in .force.com
  • URLs associated with Customer 360 Data Manager that end with .admin.salesforce-hub.com and .my.salesforce-hub.com
  • URLs associated with Live Agent Chat that end with .my.salesforcescrt.com or .my.salesforce-scrt.com
  • URLs associated with untrusted content domains
  • URLs associated with orgs in Government Isolated Architecture (GIA) data centers