Protect your external users' data by concealing personal information fields from other external users. To meet your business's security needs, modify which user fields are classified as personal information and hidden from view on Experience Cloud sites.
Required Editions
| Available in: Salesforce Classic and Lightning Experience |
| Available in: Enterprise, Performance, Unlimited, and Developer Editions |
| Applies to: LWR, Aura, and Visualforce sites |
When you enable Enhanced Personal Information Management, external users who search or view user records don't see other users' personal information fields on Experience Cloud sites. Authenticated external users can still view and update their own personal information fields. Unauthenticated guest users can't view or update personally identifiable information (PII) fields, including their own.
You can configure which fields are concealed from authenticated external users (portal users) and guest users separately. The PersonalInfo_EPIM field set governs portal user visibility, and the Guest_PersonalInfo_EPIM field set governs guest user visibility. If you haven't enabled Independent Guest Field Masking, the PersonalInfo_EPIM field set applies to all external users, including guest users.
How you configure field masking depends on when you enabled Enhanced Personal Information Management and which users you want to manage.
- If you enabled Enhanced Personal Information Management in Spring '22 or later, use the Configure Enhanced Personal Information Management Using Field Sets to manage visibility for authenticated external users.
- If you enabled Enhanced Personal Information Management before Spring '22, use Configure Enhanced Personal Information Management Using Compliance Categorization to manage visibility for authenticated external users.
- To control which fields are concealed from guest users separately from portal users, use Configure Independent Guest Field Masking.
- Configure Enhanced Personal Information Management Using Field Sets
Enhanced Personal Information Management conceals personal information fields from authenticated external users on Experience Cloud sites. If your org enabled this feature in Spring '22 or later, use the PersonalInfo_EPIM field set to control which user fields are hidden. - Configure Independent Guest Field Masking
Use field sets to control which user fields guest users can see separately from other external users, such as portal users. With Independent Guest Field Masking, guest users can't see the fields listed in the Guest_PersonalInfo_EPIM field set. - Configure Enhanced Personal Information Management Using Compliance Categorization
Enhanced Personal Information Management conceals personal information fields from authenticated external users on Experience Cloud sites. If your org enabled this feature before Spring '22, add PII as the Compliance Categorization value on user fields to control which fields are hidden. - Personal User Information Policies and Timelines
To protect your external users’ data, Salesforce introduced security settings that let you control personal user information visibility. Use this topic as a starting point to understand all the security improvements and updates, including timelines for enforcement and how to prepare for the changes. - Personal User Information Considerations
Keep these considerations in mind as you configure personal user information settings for external users by using Enhanced Personal Information Management. - Show Nicknames Instead of Full Names in an Experience Cloud Site
Enabling nickname display in your Experience Cloud site allows more privacy and protects member identities. This protection is especially helpful in a public site where unregistered visitors can access member profiles. - Share Personal Contact Information Within Experience Cloud Sites
Users can specify which information from their profile is visible to external users, such as customers and partners, and guests viewing publicly accessible pages that don’t require login.