Recommended Security Settings for FedRAMP

This guidance outlines recommended security settings that can be set by the top-level Master Administrator and other privileged users. These settings help ensure that customers configure their Own organization securely and in compliance with customer-defined or industry-specific requirements.

• Enable Single Sign-on for FedRAMP
  Within the Own Government Cloud platform, single sign-on (SSO) is the only authentication method available for user login. Own from Salesforce supports single sign-on using SAML 2.0. Instead of relying on local authentication for password and security policies, you can set your own authentication using your managed identity provider (IdP).
• Platform Settings for FedRAMP
  Set a session timeout to log out users after an interval of inactivity. Establish IP address restrictions to help ensure that only trusted sources can access the platform. See what URLs to allowlist so that the Own Government Platform can securely communicate with the Salesforce environment.