--- schema_version: "1" id: 0d3f3c4e1b2f2697a618112848850bea6e8cac045719033c959c52ede7df468b title: Secure Settings FAQs collection: admin version: current locale: en-us portal_url: https://docs.salesforce.com/admin/current/en-us/platform/264-0-0/secure_faq_settings.md canonical_url: https://help.salesforce.com/s/articleView?id=platform.secure_faq_settings.htm&release=264.0.0&type=5 source_site: help.salesforce.com content_type: documentation content_hash: 328b833a879d5035ce0a14d9bb26be2983d6e6add2a675a4d1bf0a7d3f4b70cf description: If you encounter issues related to Secure Settings, the answers to frequently-asked questions can sometimes help you. products: - Security - Salesforce Platform release: "264" --- # Secure Settings FAQs If you encounter issues related to Secure Settings, the answers to frequently-asked questions can sometimes help you. ## Salesforce Domain and IP Address Allowlist Information This information can be used for allowlisting if an org requires additional network security. - Salesforce Domains - Salesforce IP Addresses Hyperforce requires domains instead of IP addresses for connections and allowlists. To learn more about Hyperforce, visit the [Salesforce support documentation](https://help.salesforce.com). ## Secure Tab Loading Issues Feature tabs may experience loading issues. A modal describes five different reasons as to why this may have occurred. - RSS settings are no longer required in Secure. Upgrade Secure to the current version to resolve this issue. - The Modify Metadata Through Metadata API System permission must be assigned to the user by an Admin. - Salesforce IP addresses and/or domains must be whitelisted if using IP restrictions. - Deselect the IP address session lock to resolve this issue. - An API callout limit has been reached and access has been locked temporarily. Access is restored after 24 hours. ## Use Salesforce Files Option in Secure Settings Users may face issues when using an application that takes created attachments, converts them to files, and deletes the original attachments. By default, Secure writes all results from jobs to attachments. Secure has a way to write all results to files instead of attachments. Go to the Settings tab in Secure and under the General section, turn on the option to use Salesforce files. ## Which Fields Are Not Supported for Secure’s Sync to Salesforce Users may encounter errors when syncing between Secure’s Data Classification and Salesforce. The Data Classification tab allows users to classify more fields than Salesforce. Unfortunately, this can lead to failures when attempting to sync from Secure to the Salesforce metadata. To view which fields and field types may encounter sync errors, navigate to the field detail page. If a field isn't visible, then it can't be synced. Fields, field types, and objects that don't sync: - CreatedBy - LastModifiedBy - MasterRecord - \_\_hd fields - Historical Data fields - Managed package fields - ListEmail object - ConversationEntry object To gain more insight as to why a specific field did not sync, the “Sync\_Message\_c” field can be queried on the “Data\_Classification\_Field\_Level\_c” object. This field takes in the results of each field’s sync attempt. If the sync was successful, the field contains “Success”. If the sync was not successful, the field contains the error message returned from Salesforce. ## High Assurance Sessions for Users Causes REST API Calls to Fail during Jobs Unfortunately, there's no workaround for this issue. Jobs run in asynchronous apex and need to request a session ID to make API callouts for data retrieval. When requesting the session ID, there is no way to elevate the authentication into a high assurance session. Asynchronous apex sessions have a 60 seconds timeout and the request is immediately rejected. ## Not Seeing Specific External Users on Any Tab If the Org has many external users, more than 1000 in a given profile, only some external users are included in calculations and are displayed. Secure includes the most recently logged in users from that profile. Some clients have millions of community users. There are performance constraints and crunching the numbers for a million community users is not feasible. ## Disable Scheduled Jobs in Expired Secure Packages to Avoid Exception Errors Users may face issues when scheduled jobs attempt to execute in an expired Org. The user must disable these scheduled jobs until the expired license is renewed, or remove the package entirely. If neither option is used, the scheduled jobs attempt to execute and encounter an emailed exception error. To disable the automated jobs, navigate to the Settings tab, select Schedules from the menu and disable all currently enabled scheduled jobs. ## Decrease Storage by Deleting Secure Job Reports and Files If an org's file storage reaches 100%, then users need to delete records before using Secure. When jobs are run in Secure, attachments are used to document the results. If a record is deleted, all associated attachments are deleted as well. You can delete ‌reports that are no longer needed: In the Developer Console and run one or all of the following queries: - Security Insights: `select id, revcult__Run_Date__c from evcult__Security_Insights_Refresh__c` - Platform Encryption Analysis: `select id, revcult__Run_Date__c from revcult__Shield_Accelerator_Job__c` - Fill Rates: `select id, revcult__Run_Date__c from revcult__Fill_Rates_Job__c` - History Retention Policy Manager: `select id, revcult__Run_Date__c from revcult__HRP_Snapshot__c` - Data Classification: Users must run both queries and only delete entries with matching dates.`select id, LastModifiedById from revcult__Data_Classification_Level_Snapshot__c select id, revcult__Run_Date__c from revcult__Data_Classification_Snapshot__c` Select the rows to delete and then click “Delete Row”. When deleting a job record, if the option to use Salesforce Files is enabled, the files aren't automatically deleted with the removal of the record. The files must be removed manually by executing anonymous Apex code. Use the following code: `delete [SELECT Id FROM ContentDocument WHERE Title LIKE '%rawResults%' OR Title IN('linkMap.txt', 'monitoring.txt', 'monitoringScore.txt', 'authentication.txt', 'authenticationScore.txt', 'authorization.txt', 'authorizationScore.txt', 'dataLossPrevention.txt', 'dataLossPreventionScore.txt', 'dataProtection.txt', 'dataProtectionScore.txt', 'dismissedComponents.txt', 'integration.txt', 'integrationScore.txt')];` For more information on executing anonymous Apex code, review the [Salesforce documentation](https://developer.salesforce.com/docs/atlas.en-us.apexcode.meta/apexcode/apex_anonymous_block.htm). ## Resolve Issues Relating to Secure Tab Loading with Hyperforce For a Hyperforce Org that is experiencing issues loading feature tabs, a record needs to be created for the Domain Override Custom Setting. Hyperforce has forced some clients to use custom triggers to resolve callout issues. These triggers may conflict with Secure callouts. If a conflict occurs, deactivating the trigger might be required for Secure jobs to run properly. 1. From Setup, in the Quick Find box, enter Custom Settings, and then select Custom Settings. 2. Locate the “Domain Override” setting on the list and click the “Manage” link next to it. 3. Click the “New” button above the Records list. 4. Provide a name for the new entry and select “Enabled”. 5. Enter the current My Domain URL in the URL field. The URL must start with “https://”. Ensure there are no trailing slashes at the end of the URL. ![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-own_from_salesforce-264-0-0-production-enus/8ac98673-ede2-4046-a41e-2d5c846f24ff/images/icon_note.png) Note Ensure there are no trailing slashes at the end of the URL. 6. Select Save.