salesforce_security_impl_guide

Securing and Sharing Data
Viewing and Editing Desktop Client Access in the Original
Profile User Interface
Viewing and Editing Desktop Client Access in the Original Profile User
Interface
Connect for Outlook, Connect Offline, Connect for Office, and Connect for Lotus Notes are desktop
clients that integrate Salesforce with your PC. As an administrator, you can control which desktop
clients your users can access as well as whether users are automatically notified when updates are
available.
Note: To access desktop clients, users must also have the “API Enabled” permission.
1. From Setup, click Manage Users > Profiles.
2. Click Edit next to a profile name, and scroll to the Desktop Integration Clients section at the
bottom of the page.
EDITIONS
Available in:
• Enterprise
• Performance
• Unlimited
• Developer
USER PERMISSIONS
To view desktop client
access settings:
• “View Setup and
Configuration”
To edit desktop client access
settings:
• “Manage Profiles and
Permission Sets”
Setting Login Restrictions
To help protect your organization’s data against unauthorized access, you have several options for
setting login restrictions.
Login Hours
For each profile, you can set the hours when users can log in. See:
• Viewing and Editing Login Hours in the Enhanced Profile User Interface
• Viewing and Editing Login Hours in the Original Profile User Interface
EDITIONS
Available in all editions
Two-Factor Authentication for User Interface Logins
For each profile, you can require users to enter a time-based token as a second form of authentication when they log in via the user
interface. See Setting Two-Factor Authentication Login Requirements on page 87.
Two-Factor Authentication for API Logins
For each profile, you can allow the use of a time-based token to access the service instead of the standard security token. If users
add a time-based token to their account and this permission is enabled, they must use this token instead of the standard security
token whenever it’s requested, such as when resetting the account’s password. See “Using Time-Based Tokens to Access the API”
in the Salesforce Help.
Login IP Address Ranges
For each profile, you can set the IP addresses from which users can log in. See:
• Restricting Login IP Ranges in the Enhanced Profile User Interface
• Restricting Login IP Addresses in the Original Profile User Interface
40