Author: Brian Chan

Strategy for managing profile and permission set

Brian Chan

Modern Salesforce Security Strategy: Balancing Profiles and Permission Sets🔗 Inspired by this insightful video If you’re responsible for managing user access in Salesforce, you know the struggle: too many custom profiles, inconsistent permissions, and a tangled web of access that's hard to maintain or scale. While the long-term vision is to move to permission sets… Continue reading Strategy for managing profile and permission set

Permission Sets vs Profile

Brian Chan

Navigating the Shift from Profiles to Permission Sets: A Couple of Gems from Gearset As Salesforce continues to evolve its security model, one of the most impactful shifts has been the move from profile-based access control to a more modular, scalable model centered around permission sets and permission set groups. This transition isn't just a… Continue reading Permission Sets vs Profile

How to Securely Store and Use API Keys for Callouts in Salesforce

Brian Chan

Introduction When integrating Salesforce with external services via API callouts, one of the first questions that comes up is: “Where should I store the API key?”Hardcoding it in Apex? Not ideal. Using Custom Metadata? Maybe. Let’s walk through the most secure and scalable options — and why it matters. Why Storing API Keys Securely Matters… Continue reading How to Securely Store and Use API Keys for Callouts in Salesforce

Square Sandbox OAuthHow I (Finally) Got Square Sandbox OAuth to Work with SalesforceSquare Sandbox OAuth

Brian Chan

aka "Why does this thing keep giving me a 400 error?" If you’ve ever tried to set up the OAuth flow between Salesforce and Square’s Sandbox, you’ve probably gone down the same rabbit hole I did — full of documentation that kind of hints at the answer but never quite gives you the full map.… Continue reading Square Sandbox OAuthHow I (Finally) Got Square Sandbox OAuth to Work with SalesforceSquare Sandbox OAuth

Useful Bookmarks

Brian Chan

https://enterpriseforcearchitect.com/ - Great website around Enterprise Architecture with Salesforce. Blog dates to 2014, but still pretty relevant in terms of applying TOGAF to Salesforce Enterprise Implementation Flow at an enterprise level https://admin.salesforce.com/blog/2021/the-ultimate-guide-to-flow-best-practices-and-standards https://medium.com/salesforce-architects/7-things-architects-should-know-about-flow-8173ddeeae28 https://thesalesforcearchitect.com/2020-09-15-Flow-Best-Practices/ https://architect.salesforce.com/design/decision-guides/trigger-automation/ More to come as I surf through the wilderness of the Web...