What happens is: 1st time you log into salesforce, your IP address is registered so the next time whenever you try to login from ANOTHER IP address it sends a verification code with which you login. In order to bypass this verification process again n again, System admin declares a range of IP addresses which can be used to login without the need of verification code.
NOW, in case of restricted IP addresses, Admin goes to a particular PROFILE, and declares a range of IP addresses for that profile and if the users from that profile tries to login from any other IP address they will simply be DENIED THE ACCESS.
True.
Worth mentioning that the trusted IP addresses are general network security settings that apply to the all org and that IP restrictions are configured at the profile level.
https://help.salesforce.com/s/articleView?id=000386441&type=1
=> Users will not be able to access Salesforce from any IP that is not listed in the range. They will receive a Restricted IP error when logging in
Profile level Truested IP range introduces additional challenge for the users like additional verification. However they can login as normal user upon clearing the verification.
From Salesforce: Control login access at the user level by specifying a range of allowed IP addresses on a user’s profile. When you define IP address restrictions for a profile, a login from any other IP address is denied.
this is different to trusted IP ranges.
Login IP Ranges (referred to here) restrict the IP you can login from. Trusted IP Ranges prompt the two-factor verification when logging in from outside the range.
they will be prompted to perform the 2nd factor authentication. So yes they can login but will need to authenticate their user
whereas the IP range allows them to login as normal
the trusted IP range does not need to authenticate their user
After users complete the login challenge (usually by entering a code sent to their mobile device or email address), they can log in from outside of trusted IP addresses.
if this is the case then why we have IP range settings in profile? User will be dined access.
if no IP range has been setup in profile then whatever you said is right.
upvoted 3 times
...
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Tapla
Highly Voted 2 years, 1 month agodcgm
1 year, 8 months agoMonBouj
Most Recent 3 months, 3 weeks agoSFCatalyst
3 months, 3 weeks agovetrisf
1 year, 1 month agoastrostef
2 years, 7 months agoSarahB87
2 years, 9 months agonky
2 years, 11 months agoturu
3 years agoHarikanth
3 years ago