Domains

To meet the latest browser requirements, enable enhanced domains. In new sandboxes, enhanced domains are enabled by default. You can redirect your site URLs separately from your previous My Domain URLs after you enable enhanced domains. And update your allowlists to prepare for partitioned domains.

  • Enable Enhanced Domains (Release Update)
    To comply with the latest browser and security standards, enable enhanced domains on My Domain. With enhanced domains, your company-specific My Domain name is included in your URLs, including Salesforce Sites and Experience Cloud sites. Consistent domain formats improve the user experience and standardize URLs for use in custom code and API calls. Enhanced domains also comply with the latest browser requirements, allowing your users to access Salesforce using browsers that block third-party cookies. Because this update affects application URLs, including Experience Cloud sites, Salesforce Sites, and Visualforce pages, we recommend that you enable enhanced domains before this update is enforced. This update was first made available in Summer ’21 and was scheduled to be enforced in Winter ’23, but we postponed the enforcement date to Spring ’23 for production orgs. For sandboxes and non-production orgs, the enforcement date is still Winter ’23 unless you enable a new org-level setting that postpones the enforcement to Spring ’23.
  • Use Enhanced Domains in New and Refreshed Sandboxes
    To help you test enhanced domains, they’re enabled by default in new and refreshed sandboxes. If enhanced domains aren’t enabled in your production org, you can disable this option.
  • Redirect Your Site URLs After You Enable Enhanced Domains
    When you enable enhanced domains, the *.force.com URLs for your Experience Cloud sites and Salesforce Sites change. To minimize disruption for users who visit your previous *.force.com URLs, choose whether to redirect those public-facing URLs to your current site URL or to return an error message.
  • Prepare for Partitioned Domains
    To maximize the availability of your orgs, My Domain uses partitioned domains for new Developer Edition orgs, demo orgs, sandboxes, scratch orgs, patch orgs, free orgs, and Trailhead Playgrounds. Partitioned domains include a word related to the org type, which makes it easier to identify an org by a URL. To prepare for this change, update your allowlists for the new domains.
  • Test Your Custom Domain That Uses a Third-Party CDN in a Sandbox
    Before you enable a custom domain that uses a third-party Content Delivery Network (CDN) in production, develop and test the domain in a sandbox. A custom domain, such as https://www.example.com, serves your Experience Cloud sites or Salesforce Sites.
  • Enable the Salesforce CDN Partner in a Sandbox Custom Domain
    Test a custom domain that uses the Salesforce CDN partner to serve your Experience Cloud site in a sandbox before you enable the updated domain in production.
  • Improve Code Security with My Domain Logins
    For an extra layer of security, use your My Domain login URL to access your Salesforce org with code. Although you can continue to use the generic Salesforce login URLs, your My Domain login URL is unique. And, unlike instanced URLs such as na47.salesforce.com, it continues to work when your org is moved to another instance. Because we recommend this approach, My Domain URL placeholders replace the generic login.salesforce.com and test.salesforce.com login URLs in our Salesforce Help and Developer documentation.
  • Wait 15 Minutes Between Domain Changes
    To avoid potential conflicts between follow-up processes such as CNAME and DNS updates, you can’t make two domain changes that require provisioning within 15 minutes.
  • Postpone the Enforcement of Enhanced Domains in Sandboxes and Non-Production Orgs
    The Enable Enhanced Domains release update is enforced for sandboxes and non-production orgs in Winter ’23. If you need more time to test enhanced domains in sandboxes and non-production orgs, you can postpone the enforcement date to Spring ’23 using an org-level My Domain setting. Non-production orgs include demo orgs, Developer Edition orgs, free orgs, patch orgs, Trailhead Playgrounds, and trial orgs. For production and scratch orgs, the enforcement date is automatically postponed to Spring ’23 without any action required.
  • Other My Domain Changes
    To help you make My Domain changes, the My Domain Setup screen was updated. The button to revert a provisioned My Domain change is now called Cancel New Domain. And to help you understand your choices, the domain suffix picklist values were updated.

https://help.salesforce.com/s/articleView?id=release-notes.rn_security_domains.htm&release=238&type=5