Resolve Volunteers for Salesforce Site Access Issues After Summer '25 Release

Resolution

This issue occurs when legacy domain redirections are disabled following Salesforce's enforcement of enhanced domains in Summer '25. Follow these steps to restore access:

Step 1: Enable Legacy Domain Redirections

1. From Setup, enter My Domain in the Quick Find box, then select My Domain.
2. In the My Domain Details section, select Edit.
3. Enable the following checkboxes:
   • Redirect legacy (non-enhanced) My Domain hostnames
   • Redirect [orgname].secure.force.com URLs to your current My Domain site URLs
4. Click Save.

Step 2: Update Site Guest User Permissions

1. From Setup, enter Sites in the Quick Find box, then select Sites.
2. Click your volunteer site name.
3. Click Public Access Settings.
4. Click Object Settings.
5. Click Campaign.
6. Ensure the Volunteer Website Time Zone field has Read access enabled.
7. Click Save.

Step 3: Update Legacy URL References (Recommended)

While Step 1 provides immediate resolution, update any hardcoded URLs for long-term stability:

Replace legacy URLs:

https://[orgname].secure.force.com/volunteers/...

With enhanced domain URLs:

https://[orgname].my.salesforce-sites.com/volunteers/...

Step 4: Configure Clickjack Protection (If Using iFrames)

If your volunteer pages are embedded in external websites using iFrames:

1. From your site's detail page, click Site Configuration.
2. Under Security, adjust Clickjack Protection settings as needed.
3. Test with different protection levels if pages don't display correctly when embedded.

Step 5: Maintain Future Compatibility

To prevent issues during Winter '26 upgrade:

1. Return to My Domain settings.
2. Enable Maintain legacy redirections during the Winter '26 upgrade.
3. Click Save.