--- description: Reference information for Salesforce (FedRAMP) in Zero Trust integrations. title: Salesforce (FedRAMP) image: https://developers.cloudflare.com/og-docs.png --- [Skip to content](#main-content) > Documentation Index > Fetch the complete documentation index at: https://developers.cloudflare.com/cloudflare-one/llms.txt > Use this file to discover all available pages before exploring further. # Salesforce (FedRAMP) Last updated Apr 17, 2026|Copy as Markdown| [View as Markdown](https://developers.cloudflare.com/cloudflare-one/integrations/cloud-and-saas/salesforce-fedramp/index.md)| [Agent setup](https://developers.cloudflare.com/agent-setup/) Availability The Salesforce (FedRAMP) CASB integration requires a special entitlement on your account. To request access, contact your account team. The Salesforce (FedRAMP) integration detects a variety of data loss prevention, account misconfiguration, and user security risks in an integrated FedRAMP-compliant Salesforce environment that could leave you and your organization vulnerable. ## Integration prerequisites - A FedRAMP-compliant Salesforce environment (most editions are compatible) - Permissions to a Salesforce organization with either: - System Administrator permission - Permissions for View Setup and Configuration, Customize Applications, and Modify All Data ## Integration permissions For the Salesforce (FedRAMP) integration to function, Cloudflare CASB requires the following Salesforce permissions via a Connected App: - `Manage user data via APIs (api)` - `Manage user data via Web browsers (web)` - `Perform requests at any time (refresh_token, offline_access)` - `Access unique user identifiers (openid)` These permissions follow the principle of least privilege to ensure that only the minimum required access is granted. To learn more about each permission, refer to the [Salesforce OAuth Tokens and Scopes documentation ↗](https://help.salesforce.com/s/articleView?id=sf.remoteaccess_oauth_tokens_scopes.htm). ## Security findings The Salesforce (FedRAMP) integration currently scans for the following findings, or security risks. Findings are grouped by category and then ordered by [severity level](https://developers.cloudflare.com/cloudflare-one/cloud-and-saas-findings/manage-findings/#severity-levels). To stay up-to-date with new CASB findings as they are added, bookmark this page or subscribe to its [RSS feed](https://github.com/cloudflare/cloudflare-docs/commits/production/src/content/docs/cloudflare-one/integrations/cloud-and-saas/salesforce-fedramp.mdx.atom). ### File sharing Identify uploaded content, files, and attachments that have been shared in a potentially insecure fashion. | Finding type | FindingTypeID | Severity | | --- | --- | --- | | Salesforce (FedRAMP): Content Document publicly accessible without a password | `4cde56ed-19db-4cdb-a6c6-3aede5e17785` | Critical | | Salesforce (FedRAMP): Content Document publicly accessible with weak password | `68c43ab8-733d-4798-b25f-202f6fcf435f` | High | | Salesforce (FedRAMP): Content Document publicly accessible and password protected | `75194f6b-5a95-48fa-b485-37181d2d19c8` | Medium | | Salesforce (FedRAMP): Content Document shared and not viewed in 12+ months (stale permission) | `7125e209-234a-4f10-89d2-1af0601c277f` | Medium | | Salesforce (FedRAMP): Content Document larger than 2 GB | `3d21de13-4b9f-483c-921a-44cdef7a58c5` | Medium | ### Account misconfigurations Discover account and admin-level settings that have been configured in an insecure way. | Finding type | FindingTypeID | Severity | | --- | --- | --- | | Salesforce (FedRAMP): Domain without HTTPS | `20916e32-442e-4622-9e54-e1f37eb7d79f` | High | | Salesforce (FedRAMP): Default Account record access allows edit | `316f1d9a-447e-432c-add7-7adde67c4f19` | Medium | | Salesforce (FedRAMP): Default Case record access allows edit | `a7c8eb3e-b5be-4bfc-969a-358186bf927a` | Medium | | Salesforce (FedRAMP): Default Contact record access allows edit | `e7be14f0-24d6-4d6c-9e12-ca3f23d34ba9` | Medium | | Salesforce (FedRAMP): Default Lead record access allows edit | `12fde974-45e8-4449-8bf4-dc319370d5ca` | Medium | | Salesforce (FedRAMP): Default Opportunity record access allows edit | `2ab78d14-e804-4334-9d46-213d8798dd2a` | Medium | | Salesforce (FedRAMP): Organization with active compliance BCC email | `43e5fd20-1cba-4f1d-aa39-90c7ce2e088a` | Low | ### User access Flag user access issues, including account misuse and users not following best practices. | Finding type | FindingTypeID | Severity | | --- | --- | --- | | Salesforce (FedRAMP): User sending email with different email address | `a2790c4f-03f5-449f-b209-5f4447f417af` | Medium | | Salesforce (FedRAMP): Inactive user | `57e44995-c7ad-46fe-9c55-59706e663adf` | Low | | Salesforce (FedRAMP): User has never logged in | `a0bf74df-c796-4574-ac1c-0f239ea8c9ac` | Low | | Salesforce (FedRAMP): User has not logged in for 90+ days | `8395c824-bc44-4c12-b300-40f2477384d4` | Low | Was this helpful? YesNo ## On this page [![](https://developers.cloudflare.com/_astro/logo.te5VL_aD.svg)Docs](https://developers.cloudflare.com/) ```json {"@context":"https://schema.org","@type":"TechArticle","@id":"https://developers.cloudflare.com/cloudflare-one/integrations/cloud-and-saas/salesforce-fedramp/#page","headline":"Salesforce (FedRAMP) - CASB · Cloudflare One docs","description":"Reference information for Salesforce (FedRAMP) in Zero Trust integrations.","url":"https://developers.cloudflare.com/cloudflare-one/integrations/cloud-and-saas/salesforce-fedramp/","inLanguage":"en","image":"https://developers.cloudflare.com/og-docs.png","dateModified":"2026-04-17","publisher":{"@type":"Organization","name":"Cloudflare","description":"One platform for your apps, agents, and workforce. Build, secure, and scale without managing infrastructure","url":"https://www.cloudflare.com/","sameAs":["https://github.com/cloudflare","https://www.linkedin.com/company/cloudflare","https://x.com/cloudflare"],"logo":{"@type":"ImageObject","url":"https://developers.cloudflare.com/logo.svg"},"address":{"@type":"PostalAddress","streetAddress":"101 Townsend St","addressLocality":"San Francisco","addressRegion":"CA","postalCode":"94107","addressCountry":"US"},"contactPoint":[{"@type":"ContactPoint","contactType":"Customer Support","url":"https://support.cloudflare.com/","availableLanguage":["English"]},{"@type":"ContactPoint","contactType":"Sales","url":"https://www.cloudflare.com/contact/","availableLanguage":["English"]}]},"isPartOf":{"@type":"WebSite","@id":"https://developers.cloudflare.com/#website","name":"Cloudflare Docs","url":"https://developers.cloudflare.com/"},"keywords":["Salesforce"]} ```