Hi all,

Small team here, we're in the process of implementing a brand new Jira Cloud for our team.

Our requirements are simple:

We plan on working in sprints on projects, but still have some ad-hoc tasks that should be tackled outside of sprints (quick wins/small questions etc.).

My understanding is that JSM can support the later, but not the former (IE JSM cannot hold sprints).

In that case, from what I understood, we need to adopt a dual-board methodology - a JSM board for intake, and if one of those items requires code change, we link it to a sprint board. How the linking is done - this I am not sure (is it moving? Cloning? Unsure yet).

Another requirement is that all internal users that use JSM will be 'unlicensed' IE the 'free' users - but STILL be able to use SSO to log into JSM.

Does anyone have experience with this, and have any feedback or recommendations on the above?

Is it really the only way to go - by handling two projects that live side by side?

Hi all

I have a legion go 1, bought it early when they just came out.

I haven't had any issues with it until recently.

I tried playing Path of Exile 2, and when connected to power and on performance mode, legion go crashes after a few minutes of gameplay and shuts down completely.

After a while I figured ok, maybe that game is too heavy for a legion go 1, even on low settings.. so today I tried Travellers rest, really a pixel indie game, and even there after about 30 minutes gameplay, Lego just shut down.

Any idea what's happening?

I'm also scared to run updates now with all the mess going around, I haven't updated in a while.

Hi all,

We use Cases for internal purposes in Salesforce.

We create Slack Channels directly from the case (native functionality).

Often we put cases on 'Pending Requester' for example, waiting for response.

What we want to achieve - when someone sends a slack message in the slack channel linked to the Salesforce Case, we want to change the case status to 'Pending Support' for example.

I'm not sure if this is just a fantasy or if this is actually possible, I assume maybe it can be done with some listener, but then we have to invite a bot or whatever to every channel automatically?

Can anyone advise if they've done something similar to this, and how?

Hi all,

I started working for a company where the architecture is a bit messy.

Basically - the product is a SaaS platform, and the product team asked the Salesforce team to send webhooks to endpoints in the platform on certain updates - like if a customer crossed a segment or account ownership changes etc.

This feels really weird to have it rely on webhooks.

This night for example there are about 80 errors due to too many callouts.

Any suggestions on how to get information across safely to such platforms?

Ideally I would suggest that they subscribe to Change Data Capture but I'm not sure we have enough events to handle this mass.

Hi all,

Sorry - I'm new to the concept of JWT Flow.

From what I can gather, using an External app and a certificate + key I generate, I can basically authenticate as any user in Salesforce. Do I have that understanding correct?

I create an External App, enable JWT flow, upload crt.

Then in my app, I upload the private key.

That, with the consumer Id, allows me to authenticate as any user. Do I have that right?

In terms of safety, doesn't that mean that if the private key were to leak, I'd be screwed?

Of course, safeties will be put in place, such as only authorizing relevant users, IP restrictions and the fact that the key will sit in an Azure Keyvault.

But just wondering if this entire flow comes with the horrible risks I'm imagining in my worst-case scenario mind.

Hi all,

Does anyone know which permission needs to be granted, that will allow a specific user the permission to approve all CPQ Approval Records - WITHOUT providing a system admin profile?

Assuming of course he is NOT part of the approval chain itself.

I tried various permissions but he constantly gets an error:

Error:Not Allowed to approve because you don't have permission

Not sure which permission is missing here.

We tried giving the cpq admin permission set and also modify all data (in sandbox, as a test, as I found some references to this permission)

But still nothing

Hi all

We have an automation that tries to update a lead owner and a custom field, and it's throwing the error

CANNOT_UPDATE_CONVERTED_LEAD: cannot reference converted lead.

However I checked and the lead "IsConverted" is false.

Any idea what might be causing it?

Hey all,

Just wondering how are you solving requirements where emails must be sent from specific individuals inside Salesforce (via automations).

For example sending an email 1 month before renewal - that will be sent directly from the CSM.

Or a post-QBR email, being sent from a CS Team Leader, stuff like that.

I REALLY don't want to add people as org-wide email addresses - that feels like a bad solution.

One thing I managed to sort of do is send an email from a generic address, and include a 'reply to' address, which does not require an org-wide validated email, and can be anything.

Are there any solutions for this in Salesforce or is this just not something that we can do here?

Hi all,

I trust ya'll more than Salesforce support with this question tbh 😄

With the upcoming changes, how do I actually determine my Okta is Phishing-Resistant?

I checked the list of "Determining Authentication Strength & The Evaluation Logic" under:

https://help.salesforce.com/s/articleView?id=005321563&type=1

And I see 'phr' under AMR/ACR.

I used the SAML Validator inside Salesforce, and I see:

2. Looking for an Authentication Statement (contains ACR values) and AMR attributes
ACR (Weak): urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport
AMR (Strong): mfa, phr, okta_verify
AMR (Weak): pwd

And I do see phr in the ARM section - do we know if the mere presence of a 'high' one qualifies, or do we also have to eliminiate the weak ones? Anyone knows?