Salesforce MFA roll-out & Spring ’22 key new features (2022-01-26)
1. MFA Roll-out &
Spring ’22: Key new features
26th
January 2022
Lausanne, Switzerland User Group
2. Agenda
➢ Intro to Lausanne, Switzerland User Group
➢ MFA Rollout: are you ready?
➢ Spring ‘22 key features for Admins & Users
3. Giuseppe Cardace
Group IT Manager @ Acrotec
17x Salesforce Certifications
(incl. Application & System Architect)
@gcardax
4. What is a User Group?
User Groups are local and virtual groups that meet live or
online about everything Salesforce, from being an
Awesome Admin, to non-profit and industries, Equality
and Women in Technology.
5. Have Fun & Share Success
Knowledge Sharing Networking
What is our mission?
Lausanne, Switzerland User Group
• Best Practices
• Highlights from new
releases
• Hands-on sessions
• AppExchange Use Case
Demos
• Meet other Salesforce
Users, Administrators,
Developers & Architects
• Speak up about day-to-day
challenges and share
learned lessons
• Share a dinner with
like-minded people
• Participate in challenges to
win Salesforce swags! ☺
• The more we grow as a
community, the more
successful we will be
6. Spread the word
Present a topic Lead a Study Group
How can YOU help?
Lausanne, Switzerland User Group
Share your experience on:
• Salesforce products
• AppExchange apps
• Useful Admin tools
30-45 minutes per meeting
• There’s no better way to
assess your understanding
of a topic than to explain it
to someone!
• If you know someone who
could benefit and would be
interested in this kind of
group don’t hesitate to
share our contact details
7. E-mail
Trailblazer Community Trailblazer Community Groups Events
Where to find us?
Lausanne, Switzerland User Group
Join the Chatter group on Trailblazer
Community to participate to group
discussions and vote for next topics:
Lausanne, Switzerland User Group (private)
Requires a Salesforce account
(could be from a free Dev org)
Bevy is now the new event management
platform for the community groups.
Register here to stay up-to-date on the
events:
https://trailblazercommunitygroups.com/salesforce
-user-group-lausanne-switzerland/
lausanne-ch-user@trailblazercgl.com
9. Customer
Adopt the latest
security controls and features
available.
Continually monitor
user behaviors and
event logs.
Protect sensitive customer
data in alignment with
compliance standards.
Salesforce
Prepare customers for
an evolving threat landscape.
Provide solutions that enable
the customer to keep their
data secure.
Educate customers on the
need and options for
enhanced security.
Protecting Data is a Partnership
10. Strong security measures are more important than ever.
The global threat landscape is constantly evolving, and attacks are on
the rise.
Remote work environments are a new front for attacks.
Usernames and passwords are no longer sufficient protection on their
own.
Today’s Security Landscape
11. Attacker sends an
email to the target
Attacker collects
target's
username/password
Target clicks on the
email which goes to
a phishing website
Attacker denied access
to target's account
thanks to MFA
Phishing
Website
Security Is More Important Than Ever
Multi-Factor Authentication (MFA) can prevent some of the most prevalent types of attacks
Join the discussion in the MFA - Getting Started Trailblazer Community!
Enabling MFA is one of the
easiest, most effective
actions you can take to help
secure your org(s)
By 2024, the use of multi-factor
authentication (MFA) for application
access solutions will be leveraged
for over 70% of all application
access, up from 10% today.
Source - Gartner:
https://www.gartner.com/en/documents/3956209/magic-
quadrant-for-access-management
12. Enhance the Security of Your Business
Secure user accounts with multi-factor authentication (MFA)
Something you know
Login Credentials
Something you have
Authenticator App
Security Key
MFA
Enabling MFA is one
of the easiest, most
effective actions you
can take to help
secure your org(s)
14. Multi-Factor Authentication (MFA) Requirement
On February 1, 2022, Salesforce will require customers to use MFA in order to
access Salesforce products through the user interface*.
How can customers satisfy the MFA requirement?
Turn it on directly in your Salesforce products
Use your SSO provider’s MFA service
OR
* MFA is currently available for most Salesforce products.
** Nail the Basics of Cybersecurity with MFA by Jim Alkove, Forbes, January 29, 2021
Enabling MFA is one
of the easiest, most
effective actions you
can take to help
secure your org(s)**
15. Users won’t be blocked
from logging in on
February 1, 2022
The contractual MFA requirement goes into
effect on February 1, 2022, as described in
the Salesforce Trust and Compliance
Documentation.
But users won’t notice any changes to their
login experience on this date.
What to Expect on the
MFA Requirement Deadline
❖ Salesforce isn’t enforcing MFA or blocking
users from accessing Salesforce products
in the February 2022 time frame.
❖ If you’re unable to roll out MFA to all your
users by the requirement date, users will
still be able to log in and work as they do
today.
❖ But keep in mind that you’ll be out of
compliance with the contractual
requirement if you’re not using MFA by the
deadline.
See also:
• You’ll get 6+ months notice before MFA is enforced for direct logins
• Being out of compliance means your Salesforce environments are less
secure
• If you’re concerned about satisfying the requirement on time, let’s talk
16. MFA is NOT required for:
● Community users
● Sandbox users <but recommended>
● Automated Testing / RPA / Integration users
These methods are NOT supported:
● SMS (Text) verification
● Phone call verification
● Email verification
Some Key Points
https://sfdc.co/MFA_FAQ
Bookmark This Page!
Very comprehensive, and
constantly updated!
MFA FAQ
x
x
18. MFA Requirement: What to Expect
To help customers meet the requirement, Salesforce will:
Track auto-enablement and enforcement
dates for each Salesforce product with the
MFA Enforcement Roadmap at
https://sfdc.co/mfa-roadmap.
Using SSO? Salesforce won’t take
action to enable MFA for your SSO
identity provider. But the contractual
requirement applies to Salesforce
access via SSO.
Auto-Enable MFA for Direct Logins
When: Different dates by product, starting in Fall 2021
What happens:
● Salesforce turns on MFA on a customer’s behalf
● Users must use MFA to log in
● Login process prompts users to register for MFA
● If auto-enablement occurs before a product’s
enforcement date, admins can disable MFA
Enforce MFA for Direct Logins
When: Different dates by product, after February 2022
What happens:
● MFA becomes a permanent part of a product’s login
flow — users must use it to log in
● Non-MFA users are auto-enabled for direct logins
● Customer admins and users can’t disable MFA
19. Being out of compliance means your Salesforce
environments are less secure
Our goal with the MFA
requirement is to enhance
protection for your Salesforce
data – and by extension, your
business and your customers.
Without MFA, your Salesforce
environments are more
vulnerable to common
cyberattacks like phishing.
If You’re Out of Compliance If You Need Help
Wondering if your current or planned user authentication solution satisfies the MFA requirement?
Check out the MFA Requirement Checker.
Customers who don’t enable MFA
by February 1, 2022 will be out of
compliance with their Master
Subscription Agreements.
Speak with your legal team to
understand the implications of not
enabling MFA by the requirement
date.
We’re here to help you find a path
to MFA to avoid security and
compliance implications for your
company.
If you’re concerned about
satisfying the requirement, reach
out to your Salesforce
representative. We’ll work with
you to find a solution.
20. To help customers who haven’t met the requirement by the deadline,
we’ll begin automatically enabling MFA for users who log in
directly to Salesforce products. Then we’ll start enforcing MFA by
removing the option to disable it.
You’ll get 6+ months notice before MFA is enforced for
direct logins
How Enforcement Applies If You
Use SSO
Salesforce won’t take action to
enable MFA for your SSO identity
provider. Nor do we have plans to
block access to Salesforce products
or trigger MFA challenges if your
SSO service doesn’t require MFA.
This policy could change in the
future.
But remember that the contractual
requirement to use MFA applies to
users who access Salesforce
products through SSO.
Auto-enablement and
enforcement dates
vary by product.
Check out the MFA
Enforcement
Roadmap to keep
track of the timelines
for your products.
For each of your Salesforce products,
you’ll receive a minimum of 6
months notice before MFA is
enforced.
We’ll provide advance notice and
guidance via the standard release
channels for your products, such as
email communications or release
notes.
21. If you’re concerned about satisfying the requirement
on time, let’s talk
We understand that moving to MFA may be a large
change for some customers. We know there can
be challenges with balancing competing priorities,
or that you may have environments where MFA
isn’t possible with today’s functionality.
If you’re concerned about satisfying the MFA
requirement by February 1, 2022, contact your
Salesforce representative.
We’ll work with you to find a mutually
acceptable solution.
22. Manufacturing Cloud
Consumer Goods Cloud
Philanthropy Cloud
Government Cloud
Financial Services Cloud
Health Cloud
Experience Cloud
Datorama
Email, Mobile, &
Journeys
Pardot
Sales Cloud
Service Cloud
Analytics Cloud
Audience Studio
Salesforce Essentials
Salesforce Field
Service
Quip products
Industries Products
Marketing Cloud
Social Studio
Nonprofit Cloud
Education Cloud
Platform
MuleSoft
Tableau Online
Heroku
B2B Commerce
Commerce Cloud
B2C Commerce
Clouds that Support MFA Today
24. Salesforce
Authenticator
Mobile App
Third-Party
Authenticator
Apps
Security Keys
Fast
free authentication
sfdc.co/IntrotoAuthenticator
Such as:
Google Authenticator
Microsoft Authenticator
Authy
Such as:
Yubico’s YubiKey
Google’s Titan Security Key
SMS (Text) verification
Phone call verification
Email verification
Not Supported
x x
Strong Verification Methods for MFA
Salesforce supports these types of verification methods
25. Salesforce Authenticator
Fast, frictionless, free authentication
Salesforce Authenticator is a mobile app that can be used
with MFA in your Salesforce org or tenant, driving a
seamless user experience for your end users.
Salesforce Authenticator tells the user:
● What action needs to be approved
● What user is requesting the action
● From which service is the requested action coming
● What device the user is using
● From what location would the user approve or deny
this request
With this information, the user can simply tap the "Approve"
or "Deny" button to execute the decision, completing
authentication quickly as part of their login process.
26. Salesforce supports any authenticator app that generates
temporary codes based on the OATH time-based one-time
password (TOTP) algorithms (specified in RFC 6238).
To log in with this type of verification method, get a code from the
app, then enter that code during the Salesforce login process.
TOTP apps don’t require a data or internet connection.
Google
Authenticator
Microsoft
Authenticator
Authy
Widely-Used Apps
Third-Party Authenticator Apps
27. Products that support security keys:
● Products built on Salesforce Platform**
● B2C Commerce Cloud
● Marketing Cloud—Email, Mobile, &
Journeys
Supported form factors:
USB-A, USB-C, Lightning, NFC*
Supported browsers for WebAuthn keys:
Chrome, Edge, Firefox, Safari
Supported browsers for U2F keys:
Chrome, version 41 or later
* NFC devices are currently supported in B2C Commerce Cloud, Marketing Cloud—Email,
Mobile, & Journeys, MuleSoft Anypoint Platform, and Quip sites only.
** Products built on the Salesforce Platform support U2F-compatible keys only.
Logging in with a security key is simple
● Connect a security key to the computer
● Press the key’s button to verify your identity
Use any security key that’s compatible with the FIDO U2F or
WebAuthn (FIDO2) standards, including Yubico’s YubiKey or
Google’s Titan Key.
Easy-to-use hardware solution provides an
alternative to mobile app verification methods
● Works out of the box — no software to install
● Strong public-key cryptography that’s bound to a user’s
account and the Salesforce domain
● Resistant to malware and man-in-the-middle attacks
Security Keys
28. Built-In Authenticators
Easy MFA verification using a desktop or mobile
device’s built-in authenticator service, such as
Windows Hello, Touch ID, or Face ID.
● Verify identity with fingerprint, iris, or facial recognition scan.
● No apps needed.
● Strong public-key cryptography that’s unique to the user’s
account.
● Resistant to malware, phishing, and man-in-the-middle
attacks.
Logging in with this type of verification method is easy!
1. Enter a username and password.
2. Use your built-in authenticator to provide your biometric
identifier, PIN, or password.
● User’s device, operating system, and
browser must support the FIDO2
WebAuthn standard.
● Built-in authenticator service must be
enabled and set up to verify a user’s
identity via a biometric, PIN, or
password.
● For biometric authentication, user’s
device must include a supported
fingerprint, iris, or facial scanner.
● Works only for logins to the device
where the built-in authenticator exists
30. Salesforce Authenticator: Register the App
1. Install Salesforce
Authenticator on your
mobile device. It’s available
from the Apple App Store
or Google Play.
2. On your computer, log in
to your account. You may
be prompted to verify your
identity with a one-time
passcode via email or text
message.
3. The screen to register
Salesforce Authenticator
displays automatically.
4. On your mobile device,
open Salesforce
Authenticator and tap Add
an Account.
31. 5. The app displays a
two-word phrase.
6. On your computer, enter
the phrase in the
Two-Word Phrase field.
Then click Connect.
7. Salesforce Authenticator
is connected to your
Salesforce account. You’re
prompted to confirm the
connection details in the
app.
8. In Salesforce
Authenticator, verify that
the connection details are
correct, then tap Connect.
Salesforce Authenticator: Register the App continued
32. 9. And that’s it! You’ve
successfully connected
Salesforce Authenticator to
your account.
10. And you finish logging
in.
Salesforce Authenticator: Register the App continued
33. 1. On the login screen,
enter your username and
password, as usual.
2. Salesforce prompts you to
use Salesforce Authenticator
to verify your identity.
3. On your mobile device,
respond to the push
notification to open
Salesforce Authenticator.
4. In Salesforce
Authenticator, verify that the
login request is from you,
then tap Approve.
You’re successfully logged in
to your account.
Salesforce Authenticator: Logging In
34. “How To” Adoption Journey Slides
Summary Slides of the Full Path and Each Phase
● Overview (key steps per phase)
● Multi-Factor Authentication Assistant (Core
products only)
● MFA Rollout Pack (customizable planning and
change management resources)
35. The Recommended Path to MFA
Get Ready
Evaluate business and user
requirements
Inventory users, roles, and
permissions
Plan rollout, change management,
and support strategies
Roll Out
Kick off change management
activities
Distribute verification methods to
users
Enable MFA
Help users register and log in with
a verification method
Manage
Collect feedback and monitor
adoption metrics
Troubleshoot issues and support
users
Optimize your overall security
strategy
36. Available from Setup in Lightning Experience,
the Assistant guides you through a
recommended process for a successful MFA
rollout. Step-by-step guidance is divided into
three phases for easier manageability.
Each step includes
supporting resources or
tools to help you take
action.
Use the Assistant as a
checklist for tracking
completed tasks and overall
progress.
Your central hub for delivering MFA to your users
Meet the Multi-Factor Authentication Assistant
37. Rollout Pack Assets
Adoption Journey
● Rollout checklist
Get Ready Phase
● Stakeholder presentation
● User inventory templates
● Sample project schedule
● Change management strategy
guidance, plus templates
Roll Out Phase
● Sample drip email campaign
● User training deck
● User onboarding templates for
verification methods
● Simple test plan template
Meet the MFA Rollout Pack
Planning and Change Management Templates
Download the pack here:
https://sfdc.co/download-mfa-rollout-pack
41. Search Enhancements
Use profile images to differentiate users or
groups in search results
You can now see your colleagues, Chatter groups
icons and more in the instant results search and
previews.
Search Results Objects Page Has a New Name
(Beta)
In Setup, the Search Results Objects page is now
titled Objects to Always Search. To tailor search
results to your users, assign the objects that you
want Einstein to search and include in results.
43. Lightning on Tablet - new tablet app experience
Supports Lightning apps, navigation, and
record pages
● Utilizes full display on both iPad and
Android tablets
● Supports rotation between landscape
and portrait
No additional admin config required
● Instantly usable with existing mobile
Lightning Apps
● No tablet-specific customizations or
components
● Relies on app and record layouts that
support phone
Supported on iPadOS 14+, Android 8+
Available to all customers
Unified Lightning experience across desktop and mobile.
44. Tablet layout support in Lightning App Builder
Tailor your app and record page layouts for tablet
Header, Subheader, Right Sidebar One Region
Header, Subheader, Left Sidebar
Header and Two Equal Regions
Header and Three Regions
Header and One Region
Header and Left Sidebar
Header and Right Sidebar
Grouped Header and One Region
45. Live preview of app pages and records pages in landscape and portrait
Design-Time Preview in App Builder
Preview layouts of tablet components in Lightning App Builder by selecting tablet landscape
or portrait from the device previews. Now you can see how the screen layouts will appear on
tablet.
46. Tablet-specific guidance for streamlining your Lightning app performance on tablet
Design-Time Performance Guidance in App Builder
Run the page analysis tool for advice on how to optimize records for faster tablet performance.
47. Administrator Opt-In
It’s super simple to opt-in to this experience. Navigate to the Salesforce Setup, inside of the Mobile App Quickstart and
there is a new option under Tablet Preferences. A docked prompt will also appear to administrators encouraging them to
enable the new tablet experience.
If for some reason, you need to fall back to a previous experience, you can do so from the same panel. Select the option,
logout, restart the app, and log back in.
Note: Legacy Salesforce1 and Single-Column Lightning will no longer be available as of Spring ’23.
49. Add Mobile Home to any existing Lightning App
Your users can now instantly add Mobile Home to their Lightning app
Mobile Home can be added to any Lightning app by a Salesforce administrator using the
Lightning App Setup in Salesforce Setup, but this feature is so valuable that we wanted
allow end-users to experience it without delay!
Administrators can disable this opt-in feature via a connected app setting but it’s on by
default for all users.
50. Mobile App Enhancements
A new Pinned List card allows users to quickly
reference a commonly used list of records and
objects.
The Quick Navigation iOS widget now
supports both dark and light modes. It shows
the first four tabs of your selected Lightning
app allowing you to quickly launch into that
tab.
52. Edit Multiple Fields Inline for Reports (Beta)
With the Spring ‘22 release, Inline Editing
for Reports gets a big productivity boost!
You can now edit multiple fields on
multiple rows in a report and save all the
changes with one click. The field types
supported are: Date, Lookup, Picklist,
Text, Number and Checkbox.
Previously, inline editing for reports only
supported one field on one record at a
time, so you now can save time updating
more fields and records at once.
53. Enhanced Report Type Selector (Beta)
Take the guesswork out of report type
selection when creating a report. With
the enhanced report type selector,
quickly access recently used report types
and show the fields and objects that are
included.
See at a glance which report types are
standard or custom, and keep the
number of available report types
manageable by hiding ones that you
don’t need.
54. Dynamic Dashboard Gauge Charts (GA)
Dashboard gauge charts are a great way to
track your performance and business goals,
but your business is always changing. With
dynamic gauge charts, you’re no longer tied to
static goals or performance levels. Build your
gauge chart using report metrics and field
values that respond dynamically to your
business.
For example, a gauge chart can show how a
subsidiary’s sales are doing relative to your
overall business.
56. Assignment Expiration for Permission Sets & Groups (Beta)
Now you can expire permission sets and groups
with a lot less maintenance and automation
required. No more calendar invites and reminders
to turn off functionality that is only needed for a
period of time.
Turn it on by going to the User Management
Settings Page. It’s also easier now to search for and
filter users to assign to permission sets and
permission set groups. Using the Lightning list views
you’re familiar with, you can better manage
expiration dates for those permissions.
Updated UI for assigning permission sets & permission set groups with
expiration
Note:
You cannot expire a permission set with the any of
the following permissions:
●Manage Users
●Manage Profiles & Permission Sets
●Assign Permission Sets
58. Criteria based sharing rules no longer exclude HVU and
System Users.
Criteria Based Sharing Rules
Enhancement
New checkbox to include customer
community & System Users
Examples:
- view Chat Transcript records owned
by Automated Process User
- cases created in a portal and owned
by a high-volume portal user can
now be shared
60. External Services
Support for OAS 3.0
Register even more public APIs, such as the Asana
API, without having to convert the JSON schema to
OAS 2.0.
Support for polymorphism and composition
Developers can now use API operations that include
allOf, anyOf, oneOf, and Discriminator.
Enhanced UI to map unsupported media
types
Reduce confusion for admins who register APIs that
require an unsupported media type.
Access External Services via Flow as guest
user
Community guest users can now run flows that
contain External Services actions if they have access
to the flow in Experience Builder. Previously, this
required a Support case.
62. No need to duplicate a prompt to ensure the user sees it on a
specific page
Choose Where Your Prompts Appear
Now you can show guidance on
any page, not tied to a specific app.
It’s possible to make a prompt
show on any page in any app or on
any page within a specific app.
Admins a can benefit by creating
fewer prompts that show up with
more flexibility. No need to
duplicate a prompt to ensure the
user sees it on a specific page
63. Use a URL to include an image vs using file upload.
Add Images via URL
Now Admins can include images
that may already be on a webpage.
You can also use a URL so space is
not consumed in Files.
Using a URL to include an image in
a prompt makes it easier to reuse
existing resources or reduce using
up storage space in Files.
65. Renewals Management in Your
Account app
Renewals Management allows you to easily find information and alerts about your
Salesforce contracts. Seamlessly take action to confirm, change, or cancel your contract
renewals directly in your org with Your Account.
Confirm or request changes to your Salesforce contract
renewals directly in your org
68. Orchestrator
Orchestrator is the next step for unifying
automation across the platform. Use
your existing flows as building blocks to
optimize larger automated processes.
Orchestrator makes it easy to plan the
entire process from end-to-end using a
low-code interface.
Orchestrator lets you combine multiple
flows to support multi-users,
multi-departments, multi-partners long
running processes and capture
execution metrics with Salesforce.
Now Generally Available
Additional
License
may be
Required
69. Setup in Flow
Orchestration is currently accessible from the
Flows section of setup. There are post-GA
plans to have our own setup menu.
Step 1: Create a new flow
Step 2: Select Orchestration Type -
The difference between an Orchestration and
the other flow types we see here: an
Orchestration is a layer on top of flows that
you can use to order multiple flows.
Step 3: Add a Stage to your Orchestration
Step 4: Choose Background/Interactive Step
Use Orchestrator to automate complex processes
Additional
License
may be
Required
70. Assign steps to a group or queue
Group/Queue/Reference Assignment
Assignment is expanded to include groups and queues, as
well as variable references to users, groups, and queues.
This is useful if you want to dynamically assign steps based
on outputs from previous steps and for assigning steps to
more than one person, as is needed when work items
need to be given to teams.
For example, if you have a screen flow that needs to be
approved by any one of your QA team, you can assign it to
the corresponding QA group. Any member of that group
can complete the screen flow.
With Group and Queue assignment, the use cases for
Orchestrator expand to more than just a single team.
Entire cross-company teams can collaborate on a business
process within Orchestrator. This is very useful in larger
organizations where teams like to distribute
responsibilities across their members.
Additional
License
may be
Required
71. Entity list views - Orchestration Runs
Orchestration Run list views give a central location for
admins to view every orchestration that has run or is
running in their org. From this list view, they can also
cancel or debug running orchestrations.
Orchestration List Views
Entity list views - Work Items
Work item list views give the end user a central
location from where they can access all of their
assigned and completed work from Orchestrator.
For end users in orgs that heavily use Orchestrator,
searching through email notifications will be an
inefficient way to organize their pending work. This list
view will let them manage their work and order it by
assigned date to prioritize multiple tasks more easily.
Additional
License
may be
Required
72. Evaluation Flows
With evaluation flows, orchestration builders can specify a flow as the entry criteria for their
stages and steps. This flow can do conditional checks so your orchestration will only run a
certain stage/step when a custom condition is met. These flows can run like autolaunched
flows in the background and check for records, platform events, and other values necessary
for starting a step.
If you have steps that happen outside of their orchestration, this step can be very useful in
making checks for actions that happen outside of Orchestrator, supporting our vision of
helping customers capture their entire process with Orchestrator.
Additional
License
may be
Required
73. Administrative Actions
Now admins can cancel a running orchestration. Additionally, they can reassign a work item,
changing the assigned user for that associated interactive step and disallowing the previously
assigned user from completing it.
This will be really useful for admins looking to optimize their stalled orchestrations. If a step is
stuck due to an unresponsive end user, they can simply redirect that step to someone else. If
a quick fix is unavailable, they also have the ability to stop the orchestration run entirely so it
can be restarted.
Additional
License
may be
Required
74. Debug in-progress and failed orchestrations
Orchestration Debugging
Admins can open running orchestrations in the Flow Debugger. This shows the path in which
the orchestration ran (orange line), as well as the entry/exit conditions and inputs/outputs of
each step.
If an admin runs into a paused orchestration that they think should be running, they can use
the debugger to figure out why it hasn’t resumed. Additionally, they can debug step behavior
if the orchestration runs but behaves unexpectedly.
Additional
License
may be
Required
76. Flow Builder connections are automatically generated
Auto-Layout is Generally Available
Flows stay neat and organized.
● New Flows now default to Auto-Layout
but you can always switch back to
Free-Form if desired.
● Open Subflows directly from the builder
canvas
● Improved path routing for Loops:
● Connect a path within a Loop to the
head element of the Loop
● End a path within a Loop
● With the above Loop capabilities,
convert more Flows from Free-Form to
Auto-Layout
77. Sight-impaired trailblazers can create and edit flows by using
their keyboard and screen reader – no mouse required!
Create Flows with Keyboards and
Screen Readers
These shortcuts apply to the Screen element, in both
freeform and autolayout mode.
These shortcuts apply when autolayout mode is
enabled.
Action Shortcut
Return to canvas Shift+F6
Switch item focus Tab, Shift+Tab (backwards)
Configure the selected
component
Enter
Reorder the selected
component
Spacebar, then arrow keys
Cancel reordering Esc
Action Shortcut
Switch section focus. Return
to canvas
F6, Shift+F6 (backwards)
Switch item focus Tab, Shift+Tab (backwards)
Configure the selected
component
Enter
Navigate element menu Arrow keys
Reorder the selected
component
Spacebar, then arrow keys
Cancel reordering Esc
79. Custom Labels for Flow Navigation Buttons (GA)
Previously, the only way to change the
default labels was to build your own
custom footer. It’s now possible to
override the default labels when you
configure your screens.
Now you can make it clear exactly
what will happen when the user
moves forward. “Create Case” or
“Acknowledge Terms” are much more
clear than “Next”.
You can also provide translations for
your custom footer labels using the
Translation Workbench.
80. Generate choice options by using an existing record collection
in your flow
Collection Choice Sets
Previously, the only way to generate a list of
records as choice options was to use a Record
Choice Set. That’s a perfectly fine way, but what if:
● You already have a collection of records and
don’t want to duplicate your query
● You need a particular set of records, and the
filters in Record Choice Sets aren’t enough.
In this example, the results of the Get Records is
used as the choice options in the Accounts to
Update field
Note: Collection Choice Sets support record
collections from any source: Get Records,
Filter/Sort Collection, an action, or a screen
component.
82. New Field Types supported
Now that picklist support has been added,
many objects can now be created and
updated with easy-to-configure fields and
without using the traditional flow
components.
More coming in Summer ‘22, but for now,
you can use both Components (for data types
that are not yet supported) and Fields (the
new, faster way for supported data types) on
the same screen to accomplish your use
cases.
Email, Phone, and Picklist
84. It’s time to “go with the Flow!” We are encouraging our customers to move from Workflow
Rules and Process Builder to Flow.
With that in mind, Spring ‘22 contains the first look at our Migrate to Flow tool, which
provides a one-click migration from a workflow rule to flow.
Get started quickly with Flow by moving existing automation
over
Migrate to Flow (Beta)
85. Migration Banners in Workflow Rules and
Process Builder
You’ll see a new in-app banner when you navigate to Workflow Rules that announces the plans to
retire Workflow Rules. As of the Summer ’21 Release, Flows have full feature parity and all new
functionality and enhancements will continue to be made to Flows. While we don’t have firm dates
yet on when retirement will happen, we want to let customers know as soon as possible so they do
not continue to invest more automation into tools that won’t be used in the future
A new Migrate to Flow tool is in Beta and is linked in the in-app banner.
86. Record-triggered flows now contain shortcuts in
auto-layout move, which move the most
commonly used actions to the top of the menu.
In Record-Triggered Flows in Autolayout Mode,
shortcuts will appear to facilitate email sending
and record updating.
Shortcuts
Access your most frequently used
elements
87. Flow Trigger Explorer
Get a bird’s eye view of all your triggered
automation and dig in to specific versions
and activate accordingly. Explorer also
shows your record-triggered
orchestrations.
When the Flow team talked to our
customers about what it would mean to
Go with the Flow, we kept hearing a
recurring challenge - how to manage the
complexity of a large implementation,
where multiple people may have built
triggered automation at different times or
in different places.
Flow Trigger Explorer lets you view all the
flows that will trigger in a particular
object/trigger situation, such as when an
Opportunity is updated or a Case is
created.
88. Now you no longer need to create one large
flow or process to control order of
execution.
Go to Advanced Properties and set a
number from 1-2000. Non-ordered flows
run as they did before between 1000 and
1001.
We recommend spacing out trigger order
numbers by 10s or 100s for optimal
flexibility (i.e. 10/20/30 or 100/200/300)
Trigger Ordering
Flow now allows you to
order your
record-triggered flows!
89. Changes to Triggered Flow Runtime
Execution
We have versioned in some asked-for changes to how and where flows are triggered to
allow for a more consistent experience.
Flows created in this release going forward, or which are upgraded to this version, will
now support slightly different runtime behaviors.
● Flows will now be triggered by approval and time-based trigger field updates. This
change allows field changes made by approval processes to trigger flows.
● After-Save Record-Triggered Flows also now run before entitlements. This means
Entitlements can now include any updates made by traditional after-save flows.
New ordering changes take effect for flows configured to run on the latest API version
(54.0) Keep in mind that this will not affect any existing flows unless you choose to click
Save As and ‘upgrade’ the flow to use version 54 or higher.
92. Forecasting Change Indicators
Easily identify any changes to the forecast rollup from last week
Sales leaders are immediately in the know when forecasts change from week to week. Make
adjustments, coach their team and to forecast with confidence. Visual indicators and
color-coding make it easy to see changes to closed won, commit, best case, and most likely
numbers in the last 7 days
95. Resolve Disruptions Faster with
Customer Service Incident Management
Incident Problem Change Request
SPRING ‘22 ENHANCEMENTS
Default Page
Layouts
SLA
Management
Asset & Work
Plan Integration
Omni-Channel
Support
New Standard Objects as of Winter ‘22
96. Easy to Get Started with an
out-of-the-box incident management
solution
Quickly setup Incident Management
Quickly setup Incident Management based
off best practices. With default page layouts
for all 3 Incident Management (IM) objects
available out-of-the-box and with the 3 IM
objects added to the Service App Navigation
Bar once IM is turned on, it’s even faster for
teams to prep and begin resolving incidents.
97. Manage all the steps that need to
be completed to fix an incident
Field Service Integration
With Work Plan integrated with
Change Request, now steps related to
technician fixes can integrate with the
Field Service Lightning Mobile app,
making it easy to manage all the steps
and leverage Work Step templates for
fixes.
98. Meet SLA & Regulatory Compliance
Requirements
Support for Entitlements &
Milestones to meet SLAs
Stay on top of and manage SLAs by
adding Milestone components to
their incident page layout.
Quickly prioritize incidents and
make sure incident is
resolved/follows service level
agreements. Agents can see
information about SLAs that need
to be adhered to on the incident
page.
99. Seamlessly Route Incidents
Omni Channel
Support of Incident
Now, Omni-Channel will be enabled for
Incident objects, making it easy for
Incidents to be routed to the proper agents
and queues seamlessly.
Use Omni-Channel to route an incident to
an agent or queue, just like you do with
cases, saving your agents time with faster
resolution.
100. Asset Integration
With the Salesforce Asset object
linking to all 3 Incident Management
objects, it’s easy to tie incident
investigations to changes in asset
status or asset issues.
For example, see all related assets to
incident/problem objects so it’s easy
for me to investigate if changes in
assets are causing the issue.
Investigate asset status changes
which may be contributing to the
incident
103. Repeater Widgets
Provide rich and flexible tables experiences to end users
Take your tabular data to the next level. The repeater widget lets you create rich,
scrollable data cards with customized layouts. Use a card layout for example to build a
great looking sales rep leaderboard.
Just add a query to a repeater widget to show your dynamic data in rich scrollable layouts
that you can customize field by field.
104. Build richer and more customized dashboards with the power of
Lightning Web Components
Custom Functionality with Lightning
Web Components
Now you can build a seamless experience between your custom extensions and your Tableau
CRM data. With Lightning Web Components, you can create customized reusable extensions
for use anywhere in Lightning Experience. Create charts, widgets, and even Tableau data
visualizations, and bring them directly into your dashboards.
105. Resize Table Columns and
Wrap Text to Fit Content
Now users can resize individual columns in
tables and toggle text wrapping in tables.
Text wrapping will allow longer text to be
shown without being cut off.
Provides granular flexibility to builders & end
users to control column width
106. CDP Direct (Generally Available)
CDP Direct is natively integrated with Salesforce CDP offering single sign-on, no connector setup & live queries
without moving data.
● New ‘Salesforce CDP’ tab within the Data Lake provide access to ingested data.
You can outline, analyze & monitor the data using Salesforce CDP
● Map objects in data Models to standard and custom information models.
They provide access to areas such as products, orders & user engagement.
● Calculated insights
Multi-dimensional metrics pre-calculated in Salesforce CDP, which can be consumed in Tableau CRM.
Build insights on Salesforce CDP data without having to move
it into Tableau CRM
107. Live & Direct Query Enhancements
Global filters on live datasets
With the Spring ‘22 release, global filters now support live datasets (Snowflake & BigQuery
Direct).
Embedded filters on live datasets using JSON
With the Spring ‘22 release, filters on live dataset fields can be added to embedded
dashboards using the filter string syntax.
BigQuery Direct (Beta)
With the Spring ‘22 release, direct queries can be run against Google BigQuery to generate
insights without moving data into TCRM.
Compound Date Support on Live Datasets
With the Spring ‘22 release, users can use compound date combinations with live datasets
(e.g. Y-M, Y-W, Y-M-D)
108. Other App Building Enhancements
Access Tableau CRM Templated App Logs Anytime in Analytics Studio
See which assets were created for your templated app or check why app creation failed. Previously,
this information was available only by email to the user who created the app.
Improved Experience When Navigating Between Tableau CRM Dashboards
Users get a cleaner and more readily understood experience as they navigate between dashboards.
If the destination dashboard link is already open with filters and
selections, that state is cleared before applying new filters and selections from the source
dashboard.
Add Relative and Dynamic URLs in Link Widgets
The link widget now supports relative URL destinations that start with a slash and dynamic URLs
created via bindings. Use relative links to connect other pages, like a list of recently viewed
opportunities, inside the Salesforce experience. Create dynamic links based on query results and
user selections.
Change Record Ownership in Tableau CRM
Change ownership in your data without leaving your Tableau CRM dashboard. Access the Change
Owner action for objects like Account and Opportunity directly from the custom actions menu.
109. SAQL and SQL Enhancements
Expand WHERE's Range with the BETWEEN Operator in SQL
Use the BETWEEN operator in the WHERE clause to check whether numeric, string, and date data
types fall within a given range(inclusive). For numbers, it's shorthand for >= AND <=. You can use this
operator with aggregate, window, and scalar functions.
Convert Multivalue Fields to String Fields in SQL
Querying multivalue fields presents a challenge: Only one item appears in query results. By
converting each set of multiple values to a single alphabetical, delimited string, a new SQL function,
MV_TO_STRING(), shows all items in a multivalue field. The field remains multivalue in the dataset.
Use Trigonometry and String Parsing Functions in SQL Queries
Use the same functionality as your other favorite SQL implementations with SQL for Tableau CRM’s
new trigonometry and string functions.
111. Troubleshoot Recipe Jobs
with Expanded Monitoring
Investigate and optimize your recipe
jobs with the more detailed Jobs
Monitoring page. Details like wait time,
overall and per-step duration, and
detailed error messages are available.
You can see at a glance, for example,
whether a recipe run was completed
later than usual because of increased
rows or wait time. You can also improve
recipe run times by testing different
transformation configurations and by
monitoring each job’s processing
duration.
112. Data Manager
(Beta)
Data Manager has a brand new look.
The streamlined Connections view in
Data Manager now lets you see
connections in a column list. Get details
when you click on a connection.
In the new Usage view, we’ve improved
visibility into your usage and limits
113. Forecast data across Multiple Dimensions
(Partitioned) Time Series
Forecasting
Data being forecast can be grouped by
forecast levels or hierarchies such as Region,
Country, Product Family, etc.
● Supports up to 100 Forecast Grouping
● Supports up to 500 Forecasted values
114. Detect (Granular) Sentiment
Generate numeric sentiment values between 1.00
and 5.00, with 5.00 being the most positive.
Sentiments are classified between 1 and 5 with
associated probabilities (called Sentiment Scores) for
each class.
Actual numerical sentiment value is calculated as a
weighted-average of all of the sentiment scores across
1 to 5.
Generate sentiment scores into the dataset directly
for further custom-handling
Detect Sentiment with Numeric Values and
Categorized Sentiment Scores!
115. Merge data between two data
sources with the Update node
Update Node
For example, to update selected account
names after a series of recent acquisitions
and mergers, replace the name from an
uploaded spreadsheet based on
matching account IDs.
Previously, without key pair matching,
you’d include every account’s name in the
spreadsheet and clean up with a Join
node.
116. Canvas and Editor Enhancements
Data Prep is more intuitive and easier to use
than ever with data preview status, canvas
zoom & auto-layout, and API name
customization
● Canvas enhancements
○ Zoom
○ Auto-layout nodes
○ Select multiple nodes & move nodes
○ View data preview execution status
○ Reconnect nodes
● Editor enhancements
○ Customize API name
○ Select multiple items in Columns tab
○ Resizable editor panel
117. Connector Enhancements
Adopt the New and Improved Tableau CRM Connectors
It’s time to make the switch. The remote connectors that you use to sync data to Tableau CRM have
been improved. Connections with the same or better options and performance are automatically
switched to the new versions. We plan to complete auto-switching during the Winter ’23 release. For
other connectors, customers prior to August 1, 2021 can choose when to manually upgrade or
migrate. Customers new to Tableau CRM after August 1, 2021 can access only the new connector
versions
Sync Data from HubSpot (Beta)
Pull your marketing, sales, and customer service data from HubSpot into Data Manager without code
by using the HubSpot connector for Tableau CRM.
Output Your Tableau CRM Data to Azure Data Lake (Beta)
Push your transformed data from Tableau CRM into Microsoft’s Azure Data Lake using Data Prep
recipes.
119. Tableau CRM Mobile enhancements
Get the Latest Version for iOS and Android
The Tableau CRM mobile app is updated on a monthly basis. Monthly
releases can contain features in addition to bug fixes. Download the
latest release, v14.2 from the App Store or Google Play. The Spring
’22 release will be available in February.
Sign up on http://mobileanalyticsbeta.salesforce.com/ to get early
access to mobile releases, typically a few weeks before the apps
become GA on the Apple App Store & Google Play Store. By signing
up, you’ll get access to our latest builds before they’re released so that
you can test out new functionality, and ensure your data and
dashboards render as expected.
120. On-the-go data exploration
View Lenses & Explore Data
in Salesforce Mobile
● Lenses & Datasets are now
available in the Analytics Tab.
● Save your explorations from
Salesforce Mobile.
121. Save as Lens
Analysts & Managers are able to
save their data explorations
on-the-go.
Utilize Save As to create new
insights from existing lenses.
Don’t lose your work. Save it, and
share it with your colleagues.
Save & share your explorations
123. Multiclass Classification is GA!
Model multiclass classification problems
Using Multiclass classification, Einstein
Discovery users can now classify a record in
up to 10 different buckets rather than two
previously supported binary classifications.
Customers can now make more nuanced
predictions so instead of just predicting
whether something is "Good" or "Bad," they
can now classify into buckets such as "Very
Bad, "Bad," "Neutral," "Good," and "Very
Good."
124. Predictions in
Flow
Build more intelligent
business processes
● Generate predictions within your flow
process
● Explain the predictions using top factors
● For example, what if you could notify an
account team before a customer
escalates a case, or what if you could
make sure that case gets some extra
attention based on the customer’s level
of support?
125. Enhanced Live Data Monitoring
Prediction Alerts have been streamlined
Alerts are now only shown (and active) for the most recently deployed model.
Out of bounds means the model doesn’t know what to do with the inputs it was given. This is a sign
of drift. You can also see how often nulls are passed into the model from certain variables.
Check out the story to see what values are considered in bound for each variable and set up a
missing value strategy.
126. Data Rebalancing
Improve Dataset Distributions with Class Weights
An imbalance dataset won’t give you the best model results. Now, we’ll alert the user if the
binary outcome is imbalanced (more than 95% of a single value). They can then choose to
apply special weights to build a better performing model.
127. Einstein Discovery for Reports
New and improved occurrence analysis
Now when you first click Analyze on a report, you
can see the rate of occurrence for all the data in the
report.
New column profile cards will show up for each
column in the report.
Drill in and analyze any number or binary column. A
new analysis will be generated.
Click on any of the charts to drill in further to see the
existing insights.