You are here:
Control Access and Security for the Salesforce Mobile App
By default, all users in your organization can log in to Salesforce for Android and iOS. However, you can control access to all versions of the Salesforce mobile app and configure security policies through a mix of settings and connected app attributes.
Required Editions
| Setup for the Salesforce mobile app available in: both Salesforce Classic and Lightning Experience |
| Setup available in Salesforce Classic in: all editions except Database.com |
| Setup available in Lightning Experience in: Group, Professional, Enterprise, Performance, Unlimited, and Developer Editions |
| User Permissions Needed | |
|---|---|
| To edit your Salesforce for Android and Salesforce for iOS settings: | Customize Application |
| To view your Salesforce for Android and Salesforce for iOS settings: | View Setup and Configuration |
Settings
You can turn on and turn off onboarding tips, feedback, and the importing of contacts from the Salesforce Settings page. These settings apply to your full org.
From Setup, enter Settings in the Quick Find box, then select Salesforce Settings.
Connected Apps
You can control security and access for the Salesforce mobile app using settings components that are installed from the managed Salesforce connected apps package. You can view and edit the settings for each of the apps, including controlling user access with profiles, permissions, and IP range restrictions, from the Manage Connected Apps page.
The Salesforce for Android and Salesforce for iOS components are automatically installed when one of your users installs the Salesforce mobile app from the App Store or Google Play on a mobile device and authenticates with your organization by logging in to the Salesforce mobile app. Alternatively, you can manually install Salesforce and Chatter Apps connected apps package so you can review and modify the default security and access settings before rolling out the Salesforce mobile app to your users.
From Setup, enter Connected Apps in the Quick Find box, then select Manage Connected Apps. Click Edit for the app you want to modify.
Connected App Attributes
You can use connected app custom attributes to manage in-app security policies, such as disabling copying and pasting from the Salesforce mobile app. Several of the Salesforce mobile app custom attributes have a default value that automatically applies when a user logs in to Salesforce for Android or Salesforce for iOS. If the values are appropriate for your org, you’re all set.
To change a default value, or configure an attribute that doesn’t have a default setting, go to Setup. Enter Connected Apps in the Quick Find box, select Manage Connected Apps, then click the name of the connected app you want to modify. In the Custom Attributes section on the connected app page, click New and enter the attribute name and value.
| Attribute Key | Attribute Value | Platform | Description |
|---|---|---|---|
DISABLE_ACTIVITY_TIMELINE
|
|
iOS |
|
DISABLE_EXTERNAL_PASTE
|
|
Android, iOS |
|
ENABLE_SHARE
|
|
Android, iOS |
|
FORCE_EMAIL_CLIENT_TO
|
The email app’s URI scheme. Can differ by platform. For example, here's an Android URI scheme example for Blue Mail, and an iOS URI scheme example for Gmail. Android:
iOS:
|
Android, iOS | If a user taps on an email action in the Salesforce mobile app, the user is directed to the email app specified in the attribute value. You can specify one email app only. The attribute value that you enter depends on the email app and the device platform.
|
HIDE_SEARCH_ICON_FOR_LIGHTNING_APP
|
|
Android, iOS | With this custom attribute defined and set for an app developer name, users don’t see the global search icon in the top navigation of that app. Note that this attribute only hides the global search icon for the specified Lightning apps. It doesn’t hide the global search icon from the Salesforce mobile app itself (Chatter for iOS or Chatter for Android). |
SHOW_OPEN_IN
|
|
Android, iOS |
|
SHOW_PRINT
|
|
iOS |
|
We also recommend that you warn users about the changes you intend to make, especially if you’re going to restrict activities that were previously available. The Salesforce mobile app doesn’t show messages or indicators that connected app settings have changed.

