---
schema_version: "1"
id: 95a46d008f95c00e6bcb8bfe8350a2f1af64e94de4d277fbbb2801c21306c7e5
title: MobSecurityCertPinConfig
collection: legacydeveloper
version: current
locale: en-us
portal_url: https://docs.salesforce.com/legacydeveloper/current/en-us/api_meta/meta_mobsecuritycertpinconfig.md
canonical_url: https://developer.salesforce.com/docs/atlas.en-us.api_meta.meta/api_meta/meta_mobsecuritycertpinconfig.htm
source_site: developer.salesforce.com
content_type: documentation
content_hash: 1cc45d4ba818f028c6c77f2b9f4542db47a4f11db28371163f577d1aceb0be52
description: Represents the authentication server certificate pin configuration on the Salesforce mobile app with Enhanced Mobile Security.
---
# MobSecurityCertPinConfig

Represents the authentication server certificate pin configuration on the Salesforce mobile app with Enhanced Mobile Security.

![Important](https://developer.salesforce.com/docs/atlas.en-us.api_meta.meta/api_meta/images/icon_note_important.png)

#### Important

Where possible, we changed noninclusive terms to align with our company value of Equality. We maintained certain terms to avoid any effect on customer implementations.

## Parent Type

This type extends the [Metadata](https://developer.salesforce.com/docs/atlas.en-us.api_meta.meta/api_meta/metadata.htm "The base class for all metadata types. You can’t edit this object. A component is an instance of a metadata type.") metadata type and inherits its fullName field.

## File Suffix and Directory Location

MobSecurityCertPinConfig components have the suffix .mobSecurityCertPinConfig and are stored in the mobSecurityCertPinConfigs folder.

## Version

MobSecurityCertPinConfig components are available in API version 53.0 and later.

## Special Access Rules

The Enhanced Mobile App Security add-on subscription and the Enforce Enhanced Mobile App Security user permission are required to use this metadata type.

## Fields

| Field Name | Description |
| --- | --- |
| certificateHash | 
Field Type

string

Description

Required. The unique identifier for the certificate.





 |
| domainName | 

Field Type

string

Description

Required.

The name of the domain for the server that you want to pin the certificate to. For example, https://MyDomainName.my.salesforce.com.



 |
| isEnabled | 

Field Type

boolean

Description

Required. Indicates whether authentication server certificate pinning is enabled. The default value is false, which means that certificate pinning is disabled.





 |
| isProtected | 

Field Type

boolean

Description

An auto-generated value that doesn’t impact the behavior of the metadata type. The default value is false.



 |
| isSubdomainIncluded | 

Field Type

boolean

Description

Required. Indicates whether subdomains use the same certificate pinning configuration as the specified domainName. The default value is false.





 |
| masterLabel | 

Field Type

string

Description

Required. ​A user-friendly name for MobSecurityCertPinConfig, which is defined when the MobSecurityCertPinConfig component is created.





 |
| mobilePlatform | 

Field Type

MobileSecurityMobilePlatform (enumeration of type string)

Description

The mobile operating system.

Values are:

- Android
- iOS





 |
| mobileSecurityAssignment | 

Field Type

string

Description

The name of the mobile security assignment associated with the mobile security policy. See [MobileSecurityAssignment](https://developer.salesforce.com/docs/atlas.en-us.api_meta.meta/api_meta/meta_mobilesecurityassignment.htm "Represents the assignment of mobile app security policies to a profile. The policies apply to the Salesforce mobile app with Enhanced Mobile App Security enabled.").



 |
| severityLevel | 

Field Type

MobileSecurityPolicySeverityLevel (enumeration of type string)

Description

Required. The severity level of the mobile security policy.

Values are:

- Critical— Wipes app data and logs user out
- Error—Blocks access to the app until the issue is resolved, but doesn’t log user out
- Info— Blocks prohibited action or logs user action and informs user
- Warn—Notifies the user of the violation and recommends how to resolve, but user is able to continue using the app





 |
| type | 

Field Type

MobileSecurityCertPinType (enumeration of type string)

Description

Required. The type of pin.

Values are:

- AuthServer
- Resource





 |

## Declarative Metadata Sample Definition

The following is an example of a MobSecurityCertPinConfig component.

<?xml version="1.0" encoding="UTF-8"?>
<MobileSecurityCertPinConfig xmlns="http://soap.sforce.com/2006/04/metadata">
    <certificateHash\>AaBbCcDdEeFfGg</certificateHash\>
    <domainName\>login.salesforce.com</domainName\>
    <isEnabled\>true</isEnabled\>
    <isProtected\>false</isProtected\>
    <masterLabel\>AuthenticationServerCertificatePinning</masterLabel\>
    <mobilePlatform\>Android</mobilePlatform\>
    <mobileSecurityAssignment\>MyMobileSecurityAssignment</mobileSecurityAssignment\>
    <severityLevel\>info</severityLevel\>
    <type\>AuthServer</type\>
</MobileSecurityCertPinConfig\>

The following is an example package.xml that references the previous definition.

<?xml version="1.0" encoding="UTF-8"?>
<Package xmlns="http://soap.sforce.com/2006/04/metadata">
    <types\>
        <members\>\*</members\>
        <name\>MobileSecurityCertPinConfig</name\>
    </types\>
    <version\>61.0</version\>
</Package\>

## Wildcard Support in the Manifest File

This metadata type supports the wildcard character \* (asterisk) in the package.xml manifest file. For information about using the manifest file, see [Deploying and Retrieving Metadata with the Zip File](https://developer.salesforce.com/docs/atlas.en-us.api_meta.meta/api_meta/file_based_zip_file.htm "The deploy() and retrieve() calls are used to deploy and retrieve a .zip file. Within the .zip file is a project manifest (package.xml) that lists what to retrieve or deploy, and one or more XML components that are organized into folders.").