Transaction Security Policies in Salesforce

 Transaction Security is a feature that monitors Salesforce events in real time and applies actions and notifications based on rules you create. These rules, or policies, are applied against events in your org.(ex : our policy was to have no more than three active sessions per user.) You create policies for certain event combinations, and specify actions to take when those events occur.

Using Transaction Security Policy, you can define events to monitor and take action when that event happens. 

Here are a few examples of the events that you can monitor.

1.You want to block and notify the administrator when somebody tries to export the ‘Contact’ information

2.You want to raise the session security to Two-Factor Authentication (2FA) 

  when a user tries to access Salesforce from two different IP Address within the last 24 hours

3.You want to block the access when someone tries to login from a particular country or from a particular operating system or browser

4.You want to block chatter posts containing particular keywords

5.You want to limit the concurrent number of sessions for a user or for an administrator

And when these events occur, you can take these actions

1.Block – Don’t let the user complete the request

2.Two-Factor Authentication – Step up the security and prompt the user to confirm identity by using two-factor authentication, such as the Salesforce Authenticator app

3.Freeze user – Prevent further logins into your org by the user.

4.End session – Prompt the user to end an existing session when the number of concurrent sessions a user is allowed to have is strictly limited.

Note :

 Transaction Security is a framework that intercepts Salesforce events in real-time and applies appropriate actions and notifications  based on the security policies you create. 

 

 Transaction Security Policy requires purchasing 'Salesforce Shield' or 'Salesforce Event Monitoring' add-on subscriptions.