Security Update for the Audit History Logs

Starting with the 1.34.0 release, the full name and full email address for active audit history users are masked from administrators. Masking occurs when the active user isn’t part of the organization and they’re active in Audit History for a User, Organization, or API Client sessions. Masking is also used when organization users view their audit history on the start page. The mask improves security compliance.

How: Masking uses the format A****a B*****b for full name and A****b@salesforce.com for email. The email domain is visible. Regardless of the number of characters in the name and email address, 5 asterisks are used for the mask.