Transaction Security Metering

Salesforce meters transaction security policies for uniform resource use. If a policy request can’t be handled within three seconds, a fail-close behavior occurs, and access is blocked. Transaction Security implements metering by limiting policy execution. If the elapsed execution time exceeds three seconds, the user’s request is denied.

Here’s an example of how metering works. Let’s say your org has four LoginEvent policies set up with a notification action. A user triggers every policy. The first three execute within three seconds, but the final policy exceeds the three-second limit. Transaction Security stops processing the policies and fails closed, blocking the user’s login request. Because the policy evaluations didn’t finish, a notification isn’t sent.