A Salesforce Administrator at a regional healthcare network is provisioning system access for remote telemetry nurses. Company compliance rules mandate that users with the Telemetry Nurse profile must be completely blocked from logging in whenever their connection originates from outside the hospital's secure VPN IP address range. Which configuration should the administrator implement to meet this security requirement?
- Define the designated IP address range under Login IP Ranges on the Telemetry Nurse Profile.Answer
- BAdd the designated IP address range to Network Access under Security Controls in Setup.
- CCreate a custom Permission Set containing the allowed IP range and assign it to the telemetry nurses.
- DFreeze the user accounts automatically whenever an off-network IP address is detected during authentication.
Answer
Define the designated IP address range under Login IP Ranges on the Telemetry Nurse Profile.
Defining the allowed IP range under Login IP Ranges on the user's Profile explicitly restricts authentication so that any login attempt originating outside the designated IP range is denied completely.
Step-by-Step Solution
Key Concept
Profile Login IP Ranges vs. Org Network Access