Tuesday, 10 August 2021

How can I tell which release my Salesforce Org is running?

 There are different ways can figure out ,The below one works always.

 1.Login Salesforce Org --> Set Up --> Company Information -->Instance 



2.Open " trust.salesforce.com" -->Scroll down to see status.salesforce.com --> Click on status button click --> search with company instance --> Shows the instance result --> click on the green check link --> Right side it show the Instance Details.






Monday, 2 August 2021

Salesforce Admin - FAQ

 1. How do you onboard the users with SSO  to Salesforce?

 2. How do you generate and share JWT signed certificate to external system ?

 3. How frequently you monitor audit trail ?What are the important things you focus from that ?

 4. How do you back up important object data ? 

 5. How do you monitor health of project in production ?

 6. Reports & Dashboards ? Explain very useful reports and dashboards?

 7. Event Monitoring use ? Explain the real time experience use case?

8. Org Limits Monitoring ? How do you notify before reaching the limits ?

9. Flows used ?Explain the business use case ?

10. Error handling ?

11.Data exports / Data Migrations ?

12.Custom permissions ?

13.Lightning standard page performance analysis ?




 




Tuesday, 27 July 2021

Salesforce Devops Engineer - FAQ

1. What is the deployment cycle in your current project?

2. Agile VS Waterfall which methodology is best ?Why ?

3.  What strategy you follow if you have in parallel development with different teams to go same production org ? 

4. CICD means ? Explain the architecture & Pipeline implementation ?

5.Full deployment / Delta deployment which one is preferred? Why ?

6.How the code repository is useful in Salesforce projects ?

7.What is the best practice to have only code files into repository / To have complete metadata  changes also to the repository ?

8.If you have both config and code changes in repository ,Any issues you receive while validating /deploying to the sandbox ?

9.What are the frequent issues you see as Devops Engineer & How do you handle it ?

10.In salesforce how do you take care of Profile changes ?

11.Is there any split deployment like Mini(Schema Change),Master(Code & Config Changes) ?Ex: If you have huge number of fields in the objects while deploying you may get indexing /locking issues (Account and Opportunity object fields around 800) so better to split the deployment as mini and master. 

12.Source API VS Metadata API (DX vs NON-DX)?

13.What are the different CICD tools available ?Which is the best tool in your experience & Why ? Ex: Bamboo, Jenkins, Git Hub Actions, Auto rabbit, Capado

14.Which authentication flow is been used for automating the continues integration?

15.Explain the branching strategy in your current project ,What is the best branching strategy design?

16.Explain the sandbox mapping to the branch ?

17.Provide few which can't be deployed through CICD automation ? Ex: Connected Apps

18.Build CICD pipeline using GUI editor or Using yaml script ,Which is better ? Why ?

19.What is the steps to promoting and back promoting of the code ?

20.Which scenario's sandbox refresh is preferred than back promoting the code?

21.What are the code review tool added in CICD automation?

22.How you run the regression test suit from CICD automation ?

23.How do you resolve merge conflicts ?Is there any tool auto resolve ?

24.What are the best practices of release management ?Ex: Keep a SF case open during the deployment window.

25.SFDX experience ?

Thursday, 10 June 2021

Internal Salesforce Error - Debugging

Internal Salesforce Error we face some times in our work, This is called as Gack error which means the error thrown is not handled by the application.

Understanding the root cause for these kind of errors is difficult, Can try below options to figure it out. Along with the raising of case with Salesforce Support team.

1. Perform the action when this error occurring and see the Execution Log (Developer Console --> Logs),This will show the apex trigger order execution failing at which place.

Ex: Loading/Validations/Before Triggers/Saving The Record/After Trigger/WF/PB/etc

2.Based on the above can identify where its failing and try disabling that part and try to execute that flow.

Ex: Validation rules / Triggers/WF/PB /Flows etc.as per order execution.

3.Identify from when the error is occurring.(or) rom when you noticed.

4. Verify is there any recent release and change in api versions is triggering this error.

5. Verify the  audit log to see just before the issue is getting triggered what are the activities performed and what could be the potential possibility.

One of the experience : All the test classes are failing in development org.

Below are the tried steps to identify the root cause :

1.First create new test class and Take any one of the failing test class and add the part of code to new test class and try executing ,You will be able to figure out due to which object data set up its failing.

2.In our case its failing for Account object, And then further verify Is it failing for specific field entry / any field its failing, Identified failing only when first name /last name entered this is person account.  

3.See the execution log and based on that tried disabling all the triggers and validations, PB w.r.t that object, Still face the same issue. This confirms its not occurring due to any custom code /config change of project. 

4.Compare the Salesforce API version in this org w.r.t other org where its working fine, That also looks same no change in versions.

5.Verify Audit log & See is there any new release of Salesforce / Any 3rd part packages deployed or updated just before the issue is noticed. There was one Salesforce Release but nothing will affect because of that features.

6.In the audit log found there is a Started data sync for Account - Platform Encryption ,Which causing this issue ,Whenever you do (Setup --> Encryption Statistics --> Data Sync) be mindful and if it is very much required then only play around with this.

7.From our end to progress refresh sandbox to get going, Its dev org so its easy to get refreshed but same issue if you face in other org then definitely difficult perform refresh. 

8. Salesforce has to figure out why this is causing the issue & Fix from their end.

Sunday, 2 May 2021

Salesforce Single Sign On

Salesforce can work as Identity Provider and also Service provider. Based on the use case we need to configure the settings accordingly. Below are the important configuration settings for Salesforce as Identity Provider and Salesforce as Service Provider.

If the User present in IDP and not present in SP ,What happens ?
With the unique identifier it will set up user account in SP, In Salesforce have option of "Enable Just-in-Time user provisioning" .For more details refer.

Ex: User Name / Email / Federation Id (Employee Id /Unique User Name) /User Id

Note : Except the unique identifier, It will not share any other information from IDP to SP due to security reasons.

Explain Just-in-time User Provisioning  in Salesforce Single Sign-On Settings?
Use Cases : With out creating the users in advance ,Create on the fly when SSO triggered.
  •  Salesforce Community user creation on the fly 
  •  In Enterprise Org the user is part AD(Active Directory) group and SSO enabled for Org then in Salesforce Application can add JIT user provisioning standard & Share the user record expected attribute details to IDP.
  • Okta is set up in any org to manage access across any application

Steps :
1.From IDP send the required user attributes in SAML & SP reads the SAML and create the user with the received information.
Ex: Federation Id, User Name, User Profile Id.


Single Sign On VS Social Sign On ?
  • We can say, Social Sign On is one use case of Single Sign On.
  • Now a days in many apps/website we can see option to login with Social network (Facebook/LinkedIn/Gmail/GitHub).
  • Few of them not required to have the service provider registered earlier based on the request details it will respond, Few of them are much required to connect with IDP in advance before sending the request.
  • If you are building the new mobile app and Would like to have Social Sign On, Please verify few of them available for free and few of them are paid.
  • This feature is much useful to avoid the password fatigue
  • To have additional security use this with combination of multifactor authentication
OpenID Connect VS SAML ?

OpenID Connect

SAML

[Security Assertion Markup Language]

OpenId Connect is built on the process flows of OAuth 2.0 and typically uses JWT (JSON Web token) format for the id-token

SAML flow is independent of OAuth 2.0, and relies on the exchange of messages for authentication in XML SAML format (instead of JWT format).

Lightweight,Easy to implement(REST+JSON)

Heavy weight(SOAP+ XML)

OpenId connect protocol is the latest one compared to SAML

SAML is older than OpenId connect and its been already successfully setted up in companies, So generally working functionality companies don't like to change, So for any new implementation think of OpenId connect adaptability.

Use Case :

  • Mobile Apps

  • Single Page Applications

  • API access

  • User Consent

Use Case : Single sign on

  • Interop

  • Multi-Idp Federations

Federation : Not required to login again and again in multiple orgs it takes from identity based on the provided attributes identifies the user.





 

Wednesday, 10 February 2021

Salesforce Deployment Issues & Fixes

 1. Assignment Rules Deployment Issues : 

Queue 'XXX' is not valid for objects of type case : 

Verify the mentioned queue is available or not in the target org.

https://help.salesforce.com/articleView?id=000354652&language=en_US&mode=1&type=1