madrid 1st june 2017 -...

24
Transaction Security Pedro Molina. Madrid 1st June 2017 @Pmolina81 [email protected]

Upload: others

Post on 26-Apr-2020

5 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Madrid 1st June 2017 - dreamOlédreamole.es/wp-content/uploads/2017/06/Control-your-user...Multiblock Report Package Install Queued Execution Report Report Export REST API Salesforce1

Transaction SecurityPedro Molina.

Madrid 1st June 2017

@Pmolina81

[email protected]

Page 2: Madrid 1st June 2017 - dreamOlédreamole.es/wp-content/uploads/2017/06/Control-your-user...Multiblock Report Package Install Queued Execution Report Report Export REST API Salesforce1

Event MonitoringFrancisco Porras Alijarte

Madrid 1st June 2017

[email protected]

@trailsopor

Page 3: Madrid 1st June 2017 - dreamOlédreamole.es/wp-content/uploads/2017/06/Control-your-user...Multiblock Report Package Install Queued Execution Report Report Export REST API Salesforce1

@FinancialForce

Acerca de FinancialForce• Trabajando con Salesforce App Cloud desde 2009• Nuestros inversores: Salesforce Ventures, TCV, Advent & Unit4• Más de 660 empleados y con oficinas en San Francisco (HQ), Harrogate

y Granada entre otros países.• Clientes en 34 países

3

Page 4: Madrid 1st June 2017 - dreamOlédreamole.es/wp-content/uploads/2017/06/Control-your-user...Multiblock Report Package Install Queued Execution Report Report Export REST API Salesforce1

Transaction Security¿Como obtener transaction security?

¿Qué es?

¿Cómo funciona?

¿Qué nos permite gestionar?

Demo y links.

Page 5: Madrid 1st June 2017 - dreamOlédreamole.es/wp-content/uploads/2017/06/Control-your-user...Multiblock Report Package Install Queued Execution Report Report Export REST API Salesforce1

¿Como obtener transaction security?

Page 6: Madrid 1st June 2017 - dreamOlédreamole.es/wp-content/uploads/2017/06/Control-your-user...Multiblock Report Package Install Queued Execution Report Report Export REST API Salesforce1

¿Como obtener transaction security?Salesforce Shield

Disponible en: Enterprise, Performance, Unlimited, y Developer (classic y lightning experience).

Requiere: Compra de Salesforce Shield o subscripción a Salesforce Shield Event Monitoring add-on.

Page 7: Madrid 1st June 2017 - dreamOlédreamole.es/wp-content/uploads/2017/06/Control-your-user...Multiblock Report Package Install Queued Execution Report Report Export REST API Salesforce1

¿Que es transaction security?Una funcionalidad de Salesforce para monitorizar en tiempo real ciertos eventos y que nos permitirá elegir actuar de una forma u otra al respecto.

¿Pero como hacemos esto? ¿Tengo que picar código o ralentizar mi org con miles de jobs o workflows o triggers?

Page 8: Madrid 1st June 2017 - dreamOlédreamole.es/wp-content/uploads/2017/06/Control-your-user...Multiblock Report Package Install Queued Execution Report Report Export REST API Salesforce1

¿Que es transaction security?Una funcionalidad de Salesforce para monitorizar en tiempo real ciertos eventos y que nos permitirá elegir actuar de una forma u otra al respecto.

No. Pedemos crear nuestras transactions security desde setup solo con algunos clicks

Page 9: Madrid 1st June 2017 - dreamOlédreamole.es/wp-content/uploads/2017/06/Control-your-user...Multiblock Report Package Install Queued Execution Report Report Export REST API Salesforce1

¿Politicas de seguridad o transaction secutity policy?

Transaction security policy =

Event + Real-time action + Apex class

Page 10: Madrid 1st June 2017 - dreamOlédreamole.es/wp-content/uploads/2017/06/Control-your-user...Multiblock Report Package Install Queued Execution Report Report Export REST API Salesforce1

¿Qué eventos gestiona transaction security?Eventos disponibles:

Login. Se activara al hacer login.

Entity. Navegadores, sesiones, login IP… Solo enviaremos notificaciones y se activa al borrar, insertar, actualizar…

Data Export. Account, Contact, Lead, y Opportunity. Solo con exportaciones mediante reports,, con una API como Data Loader o Workbench

Access Resource. Para reports o dashboards principalmente. Notificara al acceder a un recurso.

Page 11: Madrid 1st June 2017 - dreamOlédreamole.es/wp-content/uploads/2017/06/Control-your-user...Multiblock Report Package Install Queued Execution Report Report Export REST API Salesforce1

Acciones en tiempo realBloquear la acción

Autentificación en dos tiempos

Finalizar la sesión del usuario

También podremos elegir no hacer nada en tiempo real y simplemente recibir un email o un email y una notificación en la aplicación.

Page 12: Madrid 1st June 2017 - dreamOlédreamole.es/wp-content/uploads/2017/06/Control-your-user...Multiblock Report Package Install Queued Execution Report Report Export REST API Salesforce1

Clase generada

Page 13: Madrid 1st June 2017 - dreamOlédreamole.es/wp-content/uploads/2017/06/Control-your-user...Multiblock Report Package Install Queued Execution Report Report Export REST API Salesforce1

¡Cuidado! Los eventos se evalúan en tiempo realRecomendaciones al crear transaction security

Pruébalas en una trial org (ni siquiera uses tu sandbox)

Cuidado con “Enabled”

Mucho cuidado con “Real time actions”

Page 14: Madrid 1st June 2017 - dreamOlédreamole.es/wp-content/uploads/2017/06/Control-your-user...Multiblock Report Package Install Queued Execution Report Report Export REST API Salesforce1

Demo + links de interésDocumentación https://goo.gl/vHQTFn

Clase Event https://goo.gl/O62Nvv

Ejemplos de clases https://goo.gl/6WHfdh

API (LoginHistory) https://goo.gl/NwzqYs

Salesforce Shield https://goo.gl/jJxxra

Page 15: Madrid 1st June 2017 - dreamOlédreamole.es/wp-content/uploads/2017/06/Control-your-user...Multiblock Report Package Install Queued Execution Report Report Export REST API Salesforce1

Event Monitoring (El Detective)

Page 16: Madrid 1st June 2017 - dreamOlédreamole.es/wp-content/uploads/2017/06/Control-your-user...Multiblock Report Package Install Queued Execution Report Report Export REST API Salesforce1

Event MonitoringIntroducción

Consulta Fichero Logs de Eventos (Workbench)

Visualización y Descarga de Ficheros de Log de Eventos

Event Types

Event Type – Report Export

Wave Analytics Event Log File - Report Export

Page 17: Madrid 1st June 2017 - dreamOlédreamole.es/wp-content/uploads/2017/06/Control-your-user...Multiblock Report Package Install Queued Execution Report Report Export REST API Salesforce1

Event Monitoring (Introducción)Event Monitoring es una de las muchas Herramientas que proporciona Salesforce para garantizar la seguridad de los datos, permite ver granularmente detallada la actividad de usuario en una Org.

Existen mas de 30 tipos diferentes de eventos. Son almacenados en ficheros de log de eventos disponibles cada 24 horas.

Developer Edition (DE) Orgs incluyen 30 tipos de registros con un periodo de retención de datos de un solo día.

Enterprise, Unlimited, and Performance Edition incluyen los eventos login y logout con un día del almacenamiento. Pagando a Salesforce se puede acceder a todos los tipos de eventos en el fichero de log con historico de 30 días.

Page 18: Madrid 1st June 2017 - dreamOlédreamole.es/wp-content/uploads/2017/06/Control-your-user...Multiblock Report Package Install Queued Execution Report Report Export REST API Salesforce1

Consulta Fichero Logs de Eventos (Workbench)

Page 19: Madrid 1st June 2017 - dreamOlédreamole.es/wp-content/uploads/2017/06/Control-your-user...Multiblock Report Package Install Queued Execution Report Report Export REST API Salesforce1

Visualización y Descarga de Ficheros de Log de Eventos

Page 20: Madrid 1st June 2017 - dreamOlédreamole.es/wp-content/uploads/2017/06/Control-your-user...Multiblock Report Package Install Queued Execution Report Report Export REST API Salesforce1

Event TypesApex CalloutApex ExecutionApex SOAPApex TriggerAPIAsync ReportBulk APIChange Set OperationContent DistributionContent Document LinkContent TransferDashboardDocument Attachment DownloadsLoginLogin AsLogout

MDAPI OperationMultiblock ReportPackage InstallQueued ExecutionReportReport ExportREST APISalesforce1 Adoption (UI Tracking)SandboxSitesTime-Based WorkflowTransaction SecurityUI TrackingURIVisualforce RequestWave ChangeWave InteractionWave Performance

Page 21: Madrid 1st June 2017 - dreamOlédreamole.es/wp-content/uploads/2017/06/Control-your-user...Multiblock Report Package Install Queued Execution Report Report Export REST API Salesforce1

Event Type – Report ExportFIELDS

CLIENT_IPCLIENT_INFOCPU_TIMEEVENT_TYPELOGIN_KEYORGANIZATION_IDREPORT_DESCRIPTIONREQUEST_IDRUN_TIMESESSION_KEYTIMESTAMPTIMESTAMP_DERIVEDURIURI_ID_DERIVEDUSER_IDUSER_ID_DERIVED

Page 22: Madrid 1st June 2017 - dreamOlédreamole.es/wp-content/uploads/2017/06/Control-your-user...Multiblock Report Package Install Queued Execution Report Report Export REST API Salesforce1

Wave Analytics Event Log File (Report Export)

Page 23: Madrid 1st June 2017 - dreamOlédreamole.es/wp-content/uploads/2017/06/Control-your-user...Multiblock Report Package Install Queued Execution Report Report Export REST API Salesforce1

Demo + links de interés

Workbench

Salesforce Event Log File Browser

Integration with Wave Analytics

Salesforce Helphttps://goo.gl/GSTTLf

Object Reference for Salesforce and Force.comhttps://goo.gl/LDzuzO

Page 24: Madrid 1st June 2017 - dreamOlédreamole.es/wp-content/uploads/2017/06/Control-your-user...Multiblock Report Package Install Queued Execution Report Report Export REST API Salesforce1

Q & AMadrid 1st June 2017