Soru

Zorluk: OrtaLogin Security, Login IP Ranges, and Login Hours

A Salesforce Administrator at Velocity Logistics has defined corporate IP addresses (192.0.2.0192.0.2.0 to 192.0.2.255192.0.2.255) under Organization-Wide Network Access. The Field Sales Profile has no IP ranges defined under its Profile Login IP Ranges section. A sales representative assigned to the Field Sales Profile attempts to log into Salesforce from home using an unrecognised IP address (203.0.113.45203.0.113.45) with valid username and password credentials. What will occur during this login attempt?

  1. A
    The user is completely blocked from logging in because their home IP address is not included in Network Access.
  2. The user is allowed to log in successfully after passing identity verification (such as entering a verification code).Cevap
  3. C
    The user logs in immediately without any security prompt because no IP ranges are specified on their profile.
  4. D
    The login attempt is denied and the user account is automatically frozen until an administrator approves the new IP address.

Cevap

The user is allowed to log in successfully after passing identity verification (such as entering a verification code).
When no Login IP Ranges are configured on a user's Profile, Organization-Wide Network Access settings dictate identity challenge requirements. Logging in from an IP address outside the trusted Network Access range prompts the user for identity verification (activation code), but does not block the login attempt.

Adım Adım Çözüm

1
Evaluate Profile-Level Login IP Restrictions
No IP ranges are set on the Field Sales Profile.
If Profile Login IP Ranges are defined, any login attempt outside those ranges is restricted and hard-blocked immediately. Since none are defined, profile-level blocking does not apply.
2
Evaluate Organization-Wide Network Access Settings
The user's home IP address (203.0.113.45203.0.113.45) is outside the trusted Network Access IP range (192.0.2.0192.0.2.0 - 192.0.2.255192.0.2.255).
Network Access IP ranges define trusted IP locations where multi-factor/identity verification challenges can be bypassed.
3
Determine Login Challenge Behavior
Identity verification is activated.
Because the IP address is outside the org-wide trusted ranges (and no profile-level IP restriction blocks it), Salesforce requires the user to complete identity verification to successfully log in.

Anahtar Kavram

Difference between Profile Login IP Ranges (Hard Restriction) and Org Network Access (Identity Verification Bypass)
Bu soruyu puanla