Northern Trail Outfitters (NTO) has deployed my domain. The Chief Marketing Officer wants to make sure that all of the Salesforce users log in using the branded login URL. There needs to be a grace pe

Requiring login from the branded URL without a specific grace period mechanism for old URLs could immediately block users without guidance or transition time.

Setting the redirect policy to 'Do Not redirect' means that users attempting to access Salesforce via old instance URLs will not be automatically redirected. Instead, they will be prompted to update their bookmarks to the branded My Domain URL, effectively enforcing its use after a grace period for manual updates.

The 'Redirect with a warning' policy still redirects users to the My Domain, which allows them to continue using old bookmarks, thus not effectively 'making sure' they update to the branded login URL in the long term.

Setting a login policy to prevent login from `https://login.salesforce.com` immediately blocks old bookmarks without providing a grace period for users to update them, leading to immediate access issues.