We’re releasing several new signals for Security Health Check, which can impact your current score. Make sure that you’ve updated your custom baselines with these new signals and addressed any non-compliant settings to maintain your org's security.
Where: This change applies to Lightning Experience in Enterprise, Performance, Unlimited, and Developer editions. GovCloud isn’t currently supported.
When: We are adding new signals over the next two months. The seven new signals for this update are:
- MFA Enabled
- SAML Enabled
- Allow access to External Client App consumer secrets via Metadata API
- Terminate all of a user's sessions when an admin resets that user's password
- Lock sessions to the IP address from which they originated
- Percentage of active internal users with System Administrator profile
- Number of trusted IP ranges