Print this page

How do I login to Salesforce1 when I have IP Restrictions?

Knowledge Article Number 000004578
Description

Many times users of the Salesforce1 app will continue to be asked to activate their device when logging into Salesforce1.  This situation is normally caused by logging in from an un-authenticated IP address. This occurs when users are traveling to different locations.

For organizations with trusted IP ranges under Network Access or IP restrictions at Profile level, there are several methods which will allow Salesforce1 users to authenticate:

1.  Under Connected App Detail for Salesforce1, adjust the IP Relaxation setting to Relax IP restrictions.  
 

Connected App Detail:
Classic Salesforce UI

  • Navigate to Administer > Manage Apps > Connected Apps
  • Drill into the appropriate Connected App (i.e., Salesforce1 for iOS, Salesforce1 for Android) to view the Connected App Detail
  • Under OAuth polices, set IP Restrictions to "Relax IP restrictions" (or appropriate setting)
New Lightning UI
  • Top Right Gear > Setup Home > Apps > Connected Apps > Manage Connected Apps
  • Drill into the appropriate Connected App (i.e., Salesforce1 for iOS, Salesforce1 for Android) to view the Connected App Detail
  • Under OAuth polices, set IP Restrictions to "Relax IP restrictions"
OR

2.  Users can login to Salesforce1 via their company's WiFi, VPN (Virtual Private Network) .  Please Note:  System Admins would still need to have the VPN IP addresses added at the Profile level.  

Learn how to Edit a Connected App

Important:
  • If you want to maintain your IP restrictions policy under the Profile level, please select IP Relaxation setting to Enforce IP restrictions.
  • If your organization uses Single Sign On you will be unable to Relax IP Restrictions with Salesforce1. Please see our documentation on Connected Apps and IP Restrictions.
Resolution

 


 





promote demote