Strategy for managing profile and permission set

Modern Salesforce Security Strategy: Balancing Profiles and Permission Sets🔗 Inspired by this insightful video If you’re responsible for managing user access in Salesforce, you know the struggle: too many custom profiles, inconsistent permissions, and a tangled web of access that's hard to maintain or scale. While the long-term vision is to move to permission sets… Continue reading Strategy for managing profile and permission set

Permission Sets vs Profile

Navigating the Shift from Profiles to Permission Sets: A Couple of Gems from Gearset As Salesforce continues to evolve its security model, one of the most impactful shifts has been the move from profile-based access control to a more modular, scalable model centered around permission sets and permission set groups. This transition isn't just a… Continue reading Permission Sets vs Profile

How to Securely Store and Use API Keys for Callouts in Salesforce

Introduction When integrating Salesforce with external services via API callouts, one of the first questions that comes up is: “Where should I store the API key?”Hardcoding it in Apex? Not ideal. Using Custom Metadata? Maybe. Let’s walk through the most secure and scalable options — and why it matters. Why Storing API Keys Securely Matters… Continue reading How to Securely Store and Use API Keys for Callouts in Salesforce

Square Sandbox OAuthHow I (Finally) Got Square Sandbox OAuth to Work with SalesforceSquare Sandbox OAuth

aka "Why does this thing keep giving me a 400 error?" If you’ve ever tried to set up the OAuth flow between Salesforce and Square’s Sandbox, you’ve probably gone down the same rabbit hole I did — full of documentation that kind of hints at the answer but never quite gives you the full map.… Continue reading Square Sandbox OAuthHow I (Finally) Got Square Sandbox OAuth to Work with SalesforceSquare Sandbox OAuth