---
schema_version: "1"
id: 506a8b41488887361c47cf4ff1da4e24e8045a5128a4e49c057ea45c88f5b605
title: Recommended Security Settings for FedRAMP
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/platform/264-0-0/platform_o_fedramp_security_settings.md
canonical_url: https://help.salesforce.com/s/articleView?id=platform.platform_o_fedramp_security_settings.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 4fed05b9af5053baff0c50399b93a421f51797ea021ce1bd784278ba2b68059f
description: This guidance outlines recommended security settings that can be set by the top-level Master Administrator and other privileged users. These settings help ensure that customers configure their Own organization securely and in compliance with customer-defined or industry-specific requirements.
products:
  - Security
  - Salesforce Platform
release: "264"
---
# Recommended Security Settings for FedRAMP

This guidance outlines recommended security settings that can be set by the top-level Master Administrator and other privileged users. These settings help ensure that customers configure their Own organization securely and in compliance with customer-defined or industry-specific requirements.

- **[Enable Single Sign-on for FedRAMP](https://help.salesforce.com/s/articleView?id=platform.platform_o_fedramp_enable_single_sign_on.htm&release=264.0.0&type=5)**  
    Within the Own Government Cloud platform, single sign-on (SSO) is the only authentication method available for user login. Own from Salesforce supports single sign-on using SAML 2.0. Instead of relying on local authentication for password and security policies, you can set your own authentication using your managed identity provider (IdP).
- **[Platform Settings for FedRAMP](https://help.salesforce.com/s/articleView?id=platform.platform_o_fedramp_platform_settings.htm&release=264.0.0&type=5)**  
    Set a session timeout to log out users after an interval of inactivity. Establish IP address restrictions to help ensure that only trusted sources can access the platform. See what URLs to allowlist so that the Own Government Platform can securely communicate with the Salesforce environment.