Two features of Salesforce that allows Admins to enable another level of security to their environments are: Login IP Ranges and Trusted IP Ranges. Login IP Ranges allow you to specify a set of IP Ranges where a login is allowed. This can be leveraged to make sure that specific profiles are allowed to log in on your internal network only. You are able to set these ranges by profile. As a result, internal users will have more flexibility to log in wherever. Additionally, external users will only be able to log in when they’re on your internal network.
Steps to Enable Login IP Ranges
To enable Login IP Ranges, navigate to the Profile where you’d like to make the changes. Locate and click the Login IP Ranges hyperlink.
Once you click on the Login IP Ranges hyperlink, you will see a new page. The new page allows you to input the bottom and top end of the range that are trusted for your org.
If a user who is assigned the profile that you have updated the IP Address range attempts to access Salesforce from outside of the specified range, they will be presented with an error message and not be allowed to log in.
Global Access – Trusted IP Ranges
If you want to set Trusted IP Ranges for the entire organization in Salesforce, navigate to Setup. Search Network Access and click on New under Trusted IP Ranges.
Clicking the New button will prompt you to input the globally trusted IP range for your Salesforce organization.
As the help text says, if a user logs in from the trusted range then they will not be prompted to “activate their computers.” Additionally, they “may use their password instead of a security token” to log in.
The range you specify here will likely be your internal network IP range. If a user attempts to log in from outside this range, such as at home or while traveling for work, they will need to verify their identity before being granted access.
Additional Resources
- Trailhead by Salesforce: Restrict Login Hours and IP Ranges
- Salesforce Help: Restrict Login IP Ranges in the Enhanced Profile User Interface
Cover Photo by Dan Nelson on Unsplash