Northern Trail Outfitters (NTO) has deployed my domain. The Chief Marketing Officer wants to make sure that all of the Salesforce users log in using the branded login URL. There needs to be a grace…

Question

Options

• ASet the login policy to require login from https://nto.my.salesforce.com
• BSet the Redirect policy to Do Not redirect.
• CSet the redirect policy to Redirect with a warning to the same page within the domain.
• DSet the login policy to prevent login from https://login.salesforce.com

• A
  8% (3)
• B
  72% (28)
• C
  15% (6)
• D
  5% (2)

Explanation

Option B is correct because setting the Redirect Policy to "Do Not Redirect" provides the grace period the CMO requires. During this phase, users who still have old bookmarks (pointing to login.salesforce.com or the instance URL) can continue to access Salesforce while they migrate their bookmarks to the branded My Domain URL (nto.my.salesforce.com). This is the transitional configuration - once the grace period ends, the admin can tighten the policy to enforce the branded URL exclusively.

Why the distractors are wrong:

• A immediately requires login from nto.my.salesforce.com, breaking any existing user bookmarks with no grace period.
• C auto-redirects users with a warning, meaning old bookmarks still work (just with a redirect), so users have no real incentive to update them - the goal of migrating everyone to the branded URL stalls.
• D immediately blocks login from login.salesforce.com, cutting off users who haven't updated their bookmarks yet - no grace period.

Memory tip: Think of redirect policies on a spectrum from "soft" to "hard" enforcement. "Do Not Redirect" is paradoxically the grace period setting because it keeps old paths functional during transition, while the login policy options (A and D) are the hard enforcement levers you pull after the grace period ends.

No community discussion yet for this question.