LOGIN RESTRICTIONS (CONFIGURATION & SETUP)

What are login restrictions in Salesforce?

Controls when and where users can log in

What are the two types of login restrictions?

Login IP ranges and login hours

What do login IP ranges control?

The locations from which users are allowed to log in

What do login hours control?

The times during which users are allowed to log in

Where can login IP ranges be configured?

Profiles and permission sets

Where can login hours be configured?

Profiles and permission sets

Can login restrictions be set at the user level?

No they are set on profiles or permission sets

Which login rule applies if multiple restrictions exist?

The most restrictive rule always applies

What happens if a user tries to log in outside allowed login hours?

The login is blocked

What happens if a user logs in from an unauthorized IP address?

The login is blocked

Can permission sets override profile login restrictions?

Yes if the permission set is less restrictive

Can permission sets make login access more restrictive?

Yes the most restrictive setting applies

What is the exam rule for login restrictions?

The strictest combination of login hours and IP ranges wins

When would login IP ranges commonly be used?

To restrict access to a company network or country

When would login hours commonly be used?

To restrict access to business operating hours

Do login restrictions affect API access?

Yes unless specifically exempted

Are login restrictions used for record-level security?

No they only control login access

Exam scenario a user cannot log in at night what should you check?

Login hours

Exam scenario a user cannot log in from home what should you check?

Login IP ranges

Best practice for login restrictions?

Apply them at the profile level and use permission sets carefully