Every article
470 articles across 10 topics
Custom Metadata for Agentforce: One Policy, Every Layer
Keep a business policy in one Custom Metadata Type so formulas, validation rules, before-save Flow, Apex and an...
Connected Apps End of Support: What to Migrate and When
Connected apps end of support lands in Summer '27 for every app in your org, and device-flow apps face an earlier...
Salesforce Flex Credits Agentic API: Plan for Metered Calls
Salesforce will count every successful call a registered external agent makes, over MCP or the API, as a Headless...
Standard-Volume Platform Events Retirement: Migration Plan
The Platform Events Developer Guide says Salesforce will retire standard-volume custom platform events in Summer '27....
Apex Sharing to Role: Group Ids and Async Recalculation
UserOrGroupId rejects a UserRole Id, so Apex sharing to a role starts with the right Group row and a bulk-safe __Share...
Salesforce SOAP Login Retirement: Two Deadlines, One Audit
Salesforce SOAP login retirement starts in Winter '27, when login() requires the Use Any API Auth permission, and...
Agentforce Prompt Injection: Hardening After SalesBleed
SalesBleed turned a Web-to-Lead form into a zero-click leak of Account data through Agentforce prompt injection. The...
Salesforce OAuth Device Flow Ends for Connected Apps Nov 30
From 30 November 2026 the OAuth 2.0 device flow only works from local External Client Apps with a localhost callback,...
Salesforce Sharing Model: AI Agents Ignore Page Layouts
Page layouts hid fields from view without restricting access, and an agent querying for a user reads everything that...
Salesforce Koa: What a CRM Reasoning Model Changes in Your Org
Koa is Salesforce's first CRM reasoning model, post-trained on NVIDIA Nemotron 3 Super and announced at Dreamforce '26....
Salesforce Life Sciences Cloud Architecture: HCP vs Patient
Merging HCP and patient records into one Account and Contact hierarchy is cheap on day one and expensive at the first...
Salesforce Webhook Integration With JWT Bearer Flow
Salesforce has no inbound webhook listener, so third-party callbacks need a small service in front of the org. Building...