Legacy Salesforce URL Redirection Retires
Legacy Salesforce URL Redirection Retires – Salesforce Announcement Security Notification At Salesforce, we understand that the confidentiality, integrity, and availability of your data is vital to your business, and we take the protection of your data very seriously. We’re writing to remind you that redirections for some of your Salesforce orgs’ URLs stop in the Winter ’25 release, starting in August 2024 for sandboxes and in September 2024 for production orgs. We highly encourage you to test for this change and update all references to your previous URLs before those redirections stop. Security Notification Why the Change? To comply with the latest browser and security standards, Salesforce recently required that customers deploy enhanced domains. This feature updated the hostname formats for the domains that serve Salesforce orgs. To reduce the impact of this change, your previous hostnames are redirected by default. However, to meet Salesforce security standards, some of the previous domains will be retired in 2024. The corresponding redirections stop in the Winter ’25 release. Why the Change? Actions Required Review the affected hostnames and how you can disable the redirections for testing. For details, see Prepare for the End of Redirections for Non-Enhanced Domains in Salesforce Help. Additional Resources Salesforce Enhanced Domains FAQSalesforce Help: Prepare for the End of Redirections for Non-Enhanced DomainsSalesforce Help: Log My Domain Hostname RedirectionsSalesforce Help: Enhanced Domains TimelineTo ask questions about enhanced domains, visit our monitored My Domain and Enhanced Domains group in the Trailblazer Community.We appreciate your trust in us as we continue to make your success and security our top priorities. Additional Resources Legacy Salesforce URL Redirection Retires Prepare for the End of Redirections for Non-Enhanced Domains After enhanced domains are deployed, your previous non-enhanced hostnames are redirected. Those redirections stop in Winter ’25, starting in August 2024 for sandboxes.. Review the affected hostnames and how you can disable the redirections to test before Salesforce disables them. REQUIRED EDITIONS Available in: both Salesforce Classic (not available in all orgs) and Lightning Experience Available in: Group, Essentials, Professional, Enterprise, Performance, Unlimited, and Developer Editions After enhanced domains are deployed, Salesforce redirects two categories of non-enhanced hostnames. To see if redirections are in place for a previous My Domain, check the Redirections section of the My Domain Setup page. NOTE My Domain URL redirections help prevent disruption, but they’re not intended as a permanent solution. Not all services work well with redirections, and a redirection adds a step to the process of loading the final web page. When you deploy enhanced domains, we highly recommend that you disable redirections during testing and update all references to your old URLs. Track the Source of Redirections You can search the metadata for your org to determine where the impacted URLs are used in Salesforce, but discovering all the other places that your URLs are used can be more complex. For example, site URLs and content URLs can be used on your website, social media pages, marketing materials, and templates such as email signatures and automated responses. To help you identify these locations outside of Salesforce, the Hostname Redirects log includes the referrer and origin sent with each request that Salesforce redirects. For more information, see Log My Domain Hostname Redirections. Notify Users During Redirections To help your users update outdated links and bookmarks, display a brief message during the redirection that provides the current URL. See Manage My Domain Redirections. Previous *.force.com Site Hostnames When you enable and deploy enhanced domains, the hostname formats change for your Experience Cloud sites and Salesforce Sites. To minimize potential disruption, the *.force.com hostnames that Salesforce hosted for your sites are redirected to your current site hostnames. Those redirections remain in place until Winter ’25 or until you disable these redirections. To disable these redirections for testing purposes, use an option in the Redirections section of the My Domain page and test. For more information, see Disable Redirections for Your Previous Force.com Site URLs. For the replacement format for each of these hostnames, see My Domain URL Format Changes When You Enable Enhanced Domains. To better understand the purpose of each hostname type and whether it applies to you, see My Domain Hostnames. Here are the *.force.com site hostnames for a production org that are temporarily redirected after you enable and deploy enhanced domains. Here are the .*force.com site hostnames for a sandbox that are temporarily redirected after you enable and deploy enhanced domains. Other Non-Enhanced My Domain Hostnames When you enable and deploy enhanced domains, your other previous non-enhanced My Domain hostnames are redirected. Those redirections remain in place until Winter ’25 or until you disable these redirections. For the type and the replacement format for each of these hostnames, see My Domain URL Format Changes When You Enable Enhanced Domains. To better understand the purpose of each hostname type and whether it applies to you, see My Domain Hostnames. NOTE If you deploy another My Domain change after you enable and deploy enhanced domains, these hostnames are no longer redirected. For more information, see Understand Redirections for Previous My Domain Hostnames. To disable the redirections of these non-enhanced My Domain hostnames for testing purposes, you can temporarily disable your previous My Domain. For more information, see Disable or Remove Your Previous My Domain. Here are the non-enhanced hostnames for a production org that are temporarily redirected after you enable and deploy enhanced domains. Here are the non-enhanced hostnames for a sandbox that are temporarily redirected after you enable and deploy enhanced domains. 1 If your installed package is unmanaged, the package name is c. Instanced URLs Without My Domain If your org was created before October 2020, you didn’t get a My Domain by default. In that case, your users accessed Salesforce with these hostnames that contained your instance name but not your My Domain name. These hostnames are redirected if the Instanced URL setting in the Redirections section on the My Domain Setup page is set to Redirect to the same page within the domain
