Table of Contents
About the Authors
About the Technical Reviewer
Acknowledgments
Introduction
Chapter 1: Salesforce Platform Governance Method
Overview
The Method
The Resource Base
Key Points
Basic Structure
Method Adaption
Architecture Governance
Process Management
Scoping the Application Governance Cycle
Summary
Chapter 2: Application Architecture: Phase A
Overview
General Architecture
Localization / Global Deployments
Workflow & Processes
Formulas
Files & Social
Method
Approach
Inputs
Steps
General Architecture
Localization & Global Deployments
Workflow & Processes
Formulas
Files & Social
Outputs
Scenario
Summary
Chapter 3: Data Architecture & Management: Phase B
Overview
Design & Optimization
Data Movement
Method
Approach
Inputs
Steps
Design and Optimization
Data Movement
Outputs
Scenario
Summary
Chapter 4: Identity & Access Management: Phase C
Overview
Single Sign-On
Identity Management
Method
Approach
Inputs
Steps
Single Sign-On
Identity Management
Outputs
Scenario
Summary
Chapter 5: Sharing & Visibility: Phase D
Overview
Declarative Sharing
Govern the core declarative platform features that are used to meet record-level, object, and field-sharing requirements
Organization-Wide Defaults (OWDs)
Profile-level object settings
Permission set–level object settings
Record ownership
Manual sharing
Govern the use of team functionality to meet business requirements
Role hierarchies
Teams (accounts, case, and opportunity)
Queues
Manager groups
Govern list view, report folder, and dashboard folder security
List view security
Report folder and dashboard folder security
Legacy folder sharing
Enhanced folder Sharing
Govern implicit sharing within the platform
Implicit sharing
Master–detail relationship
Account relationship data sharing
Govern the appropriate sharing design for the various community user types
Sharing sets
Sharing groups
Super user access
External account hierarchy
Govern the application of territory management
Programmatic Sharing
Govern the core programmatic platform security features that have been used to meet sharing requirements
Enforcing sharing rules
Enforcing object and field permissions
Enforcing SOQL data filtering
Class security
Apex-managed sharing
Govern the security risks in programmatic customizations relative to data visibility, focus on difference in capabilities between programmatic sharing for standard vs. custom objects
Performance
Govern whether the solution is scalable to and maintainable at enterprise levels
Data Security
Govern any specific secured data implementation on the Salesforce platform
Govern the use of “classic” encryption fields in the Salesforce platform and the limitations that need to be taken into consideration
Method
Approach
Inputs
Steps
Declarative Sharing
Programmatic Sharing
Performance
Data Security
Outputs
Scenario
Summary
Chapter 6: Integration: Phase E
Overview
Technologies & Overall Integration Strategy
Govern the enterprise integration landscape and overall integration strategy, with associated risks, trade-offs, and business and technical considerations
Govern the data backup/archiving/data warehousing integration strategies
Govern whether the appropriate integration strategy and standard integration patterns have been used
Govern the integration components involved in a flow and consider transaction management and error and exception handling
Integration Solution Tools
Govern the use of the appropriate platform-specific integration technology for integration with external systems
Remote Process Invocation – Request and Reply
Remote Process Invocation – Fire and Forget
Batch Data Synchronization
Remote Call-in
UI Update Based on Data Changes
Data Virtualization
Govern the usage of the Lightning platform integration APIs and features and determine whether they have been appropriately used
Security
Govern how security requirements are met at each of the integration layers
Method
Approach
Inputs
Steps
Technologies and Overall Integration Strategy
Integration Solution Tools
Security
Outputs
Scenario
Summary
Chapter 7: Apex, Visualforce & Lightning: Phase F
Overview
Visualforce
Apex
Lightning Components
Design and Functionality
Govern the continuum of UI options actually used against those available on the platform (buttons, mashups, Canvas, Visualforce pages, and Lightning components)
Govern the sharing and visibility model in code solution
Govern the code against security best practices to ensure all Visualforce and Apex code is developed per OWASP standards
Govern the object-oriented design principles and design patterns that were adhered to when developing the solution (Singleton, etc.)
Govern the appropriate use of the Model-View-Controller pattern
Govern any Apex controllers against the technical standards (extensions to standard controllers and custom controllers)
Govern the usage of custom settings and synchronous vs. asynchronous patterns, and all the available execution contexts (e.g., batch, trigger, callout, etc.)
Govern the usage of batch Apex and the flex queue
Govern the Apex / Visualforce solution against the governor limits
Govern the order of execution of transactions within the platform (specifically against pre-existing triggers)
Govern the quality of test coverage (required for production deployment, call-out testing is a special case)
Govern the approach to error/exception handling
Performance and Scalability
Govern that performance and scalability best practices have been considered within Visualforce pages and Apex code (performance profiling, use of static resources)
Govern the Apex and Visualforce performance to include LDV scenarios (Pagination, JavaScript remoting)
Govern the use of external web technologies and complementary UI technologies
Maintainability and Reuse
Govern multi-language support and determine the appropriate solution has been used to support globalization
Govern the options and techniques used to make programmatic components maintainable and reusable on the platform (custom settings, skeleton templates, custom metadata types)
Method
Approach
Inputs
Steps
Design and Functionality
Performance and Scalability
Maintainability and Reuse
Outputs
Scenario
Summary
Chapter 8: Communities: Phase G
Overview
Design
Govern the license types associated with the sites and communities
Govern the sharing usage for partner, customer, and employee community users
The project team has planned its sharing model
The project team has defined its sharing requirements
The project team has determined the sharing options it should use
The project team has updated its sharing requirements with the sharing option it will implement
Govern the different UI / UX capabilities to style a community
Govern the mobile considerations for communities
Identity Management
Govern how identity management is handled within communities: provisioning, syncing, and de-provisioning
Govern the use of external identity (Facebook, Google, etc.) if appropriate
Method
Approach
Inputs
Steps
Design
Identity Management
Outputs
Scenario
Summary
Chapter 9: Mobile Solutions Architecture: Phase H
Overview
Mobile Strategy and Design
Govern the mobile solution for use of the appropriate mobile platform: HTML5, Native (iOS / Android), hybrid solutions, or Salesforce mobile app
Govern the authentication / authorization (including SSO), offline storage, and sync requirements
Govern the use of Salesforce mobile app declarative design
Mobile Security
Govern how the project has secured the mobile application and its data, including offline data encryption
Method
Approach
Inputs
Steps
Mobile Strategy and Design
Mobile Security
Outputs
Scenario
Summary
Chapter 10: Development Lifecycle & Deployment: Phase I
Overview
Development Lifecycle
Govern the development and release of applications on the Salesforce platform
Govern the testing strategies and test plan
Deployment Techniques and Considerations
Govern the deployment strategy and the platform tools, use cases, limitations, and best practices for environment management and data migration strategy
Govern the tools (source control and continuous integration for release management)
Method
Approach
Inputs
Steps
Development Lifecycle
Deployment Techniques and Considerations
Outputs
Scenario
Summary
Chapter 11: Resource Base Introduction
How to Use the Resource Base
The Resource Base Structure
The GitHub Repository
A Final Word
Chapter 12: Application Architecture (Phase A) Resource Base
Guidelines and Best Practices
General Architecture
Localization / Global Deployments
Workflow & Processes
Formulas
Files and Social
Phase A Standards
General
Objects
Descriptions
Help
Objects
Enterprise Object
Project Object
Fields
Enterprise Fields (Global, Reusable)
Project-Specific Fields
Workflow
Enterprise Workflows
Project-Specific Workflows
Lightning Process Builder
Enterprise Process Builders
Project-Specific Process Builders
Flows
Enterprise Flows
Project-Specific Flows
Validation Rules
Enterprise Validation Rules (Global, Reusable)
Product-Specific Validations
Labels
Lightning Components
Profiles
Permission Sets
Record Types
Page Layouts
Roles
Custom Settings
Static Resources
Duplication Rules
Matching Rules
Checklists
Chapter 13: Data Architecture & Management (Phase B) Resource Base
Guidelines and Best Practices
Design & Optimization
Data Movement
Phase B Standards
Data Model Definition
Objects
Enterprise Object
Project Object
Fields
Enterprise Fields (Global, Reusable)
Project-Specific Fields
Custom Settings
Checklists
Chapter 14: Identity & Access Management (Phase C) Resource Base
Guidelines and Best Practices
Salesforce Identity & Single Sign-On (SSO)
Phase C Standards
Checklists
Chapter 15: Sharing & Visibility (Phase D) Resource Base
Guidelines and Best Practices
Sharing & Visibility
Declarative Sharing Resources
Programmatic Sharing
Sharing & Performance Impacts
Data Security
Phase D Standards
Checklists
Chapter 16: Integration (Phase E) Resource Base
Guidelines and Best Practices
Salesforce Integration
Integration Resources
Phase E Standards
Checklists
Chapter 17: Apex, Visualforce & Lightning (Phase F) Resource Base
Guidelines and Best Practices
Apex, Visualforce & Lightning
Programmatic Resources
Phase F Standards
Checklists
Chapter 18: Experience Cloud (Communities) (Phase G) Resource Base
Guidelines and Best Practices
Salesforce Experience Cloud
Experience Cloud Resources
Phase G Standards
Checklists
Chapter 19: Mobile Solutions Architecture (Phase H) Resource Base
Guidelines and Best Practices
Mobile Solutions Architecture
Mobile Resources
Phase H Standards
Checklist
Chapter 20: Development Lifecycle & Deployment (Phase I) Resource Base
Guidelines and Best Practices
Development Lifecycle and Deployment
Development Lifecycle & Deployment Resources
Phase I Standards
Checklists
Index