Salesforce Architect's Handbook: A Comprehensive End-to-End Solutions Guide

Description

Beginning-Intermediate user level Table of Contents About the Authors About the Technical Reviewer Acknowledgments Introduction Chapter 1: Salesforce Architecture Why Do Companies Choose Salesforce? Modern-Day Options to Build Technology Solutions On-Premise Solution Infrastructure as a Service (IaaS) Platform as a Service (PaaS) Software as a Service (SaaS) Salesforce as a PaaS- and SaaS-Based Cloud Service Provider (CSP) A Deep Dive into the Technology Stack Infrastructure Layer Metadata and Shared Services Layer Identity and Access Management and Application Definition Layer Apex Code Runtime Engine Layer The Lightning Application Layer The Lightning Component Layer Lightning Page Component Lightning Page Custom Metadata for Your Organization Multi-tenant Architecture and the Metadata-Driven Framework The Seven Architecture Domains to Consider When Architecting with Salesforce Application Design Architecture Data Architecture Security Architecture Salesforce Integration Domain Salesforce Identity and Access Management (IAM) Domain Salesforce Mobile Domain Development Lifecycle Management Key Considerations and Limitations When Architecting with Salesforce Summary Chapter 2: The Art of Artifacts Art of Artifacts FUSIAOLA Analysis F: Features Data Context Business Logic Context Interaction Context U: User Information Role Attribute Business Function Attribute Internal vs. External Attribute Role Hierarchy Index Attribute S: Systems I: Integrations A: Authentication O: Objects L: Licenses A: Assumptions Who Sees What? Organization-Wide Defaults and Data Visibility Scope and Nature of Integrations Identity Provider–Initiated vs. Service Provider–Initiated Authentication Format of the FUSIAOLA Analysis System Landscape Artifact What Is the Salesforce Organization Strategy? What Are the Systems Existing or New That Need to Interact with Salesforce? What Are the Specialty Salesforce Licenses That You Will Be Using Beyond the Core Sales, Service, or Platform Licenses? What Are the AppExchange Products That You Will Leverage to Avoid Custom Development? How Many Different Types of Salesforce Community Licenses Are Needed for External (or Any Internal) Users? What Are the User Authentication/Authorization Tools for Both Internal and External Users to Authenticate into Salesforce? What Is the Integration Strategy to Integrate Salesforce with Existing or New Systems? Data Model Artifact Objects Needed to Store and Manage Data in Salesforce Object Types Record Types Within Each Object Object Relationship to Other Objects The Organization-Wide Default Settings for Object Visibility Owners of the Records Within Each Object An Estimated Number of Records Per Object That Can Exist at Any Given Period Summary Chapter 3: Salesforce Application Architecture Salesforce Licenses Org-Level Licenses User Licenses Chatter Licenses Chatter External Licenses Chatter Free Chatter Only License (Also Known as Chatter Plus) Salesforce Licenses Salesforce Platform Licenses External Identity Licenses External Apps Licenses Customer and Partner Community Licenses Permission Set Licenses Feature Licenses Usage-Based Entitlements Platform vs. CRM Licenses Salesforce Application Design Choices Common Declarative Options Common Programmatic Options Order of Execution Within Salesforce Salesforce AppExchange Considerations for Using Off-Platform Systems Instead of Salesforce Salesforce Org Strategy Considerations Chapter Summary Chapter 4: Salesforce Data Architecture Why Is Data Architecture Important? Data Modeling in Salesforce Data Model Techniques and Considerations Top-Down Consideration with Bottom-Up Requirements Choices and Compromises User Story: Same-Day Shipping Approach Options: Normalized or Denormalized Architecture Choice: Normalized User Story: Lead Contact Information Approach Options: Normalized or Denormalized Architecture Choice: Denormalized Cardinality: Salesforce Options Selecting the Best Type of Relationship Revisiting Cardinality in Salesforce Other Data Modeling Considerations Large Data Volume Architecture What Causes LDV Issues? Object Size Record Ownership Record Relationships Data Skews Addressing LDV Issues A Final Word on Account Skews, Ownership Skews, and Lookup Skews Data Lifecycle Management in Salesforce Data Migration Types of Data Manipulation Operations Available for Data Migration Data Migration Process Complex Data Migration ETL (Extract-Transform-Load) Data Extraction and Data Cleaning Data Transformation and Verification Data Loading Data Backup Data Archiving Salesforce Big Object Chapter Summary Chapter 5: Salesforce Security Architecture Why Is Security Architecture Important? Three Pillars of Salesforce Security Strategy Platform-Level Security: Access and Visibility Object, Field, and Record Levels Sharing Record Owner Permission Sets Profile Organization-Wide Defaults Role Hierarchy Sharing (Criteria and Ownership) Ownership-Based Sharing (OBS) Rules Criteria-Based Sharing (CBS) Rules Manual and Programmatic Sharing Manual Sharing Programmatic or Apex-Managed Sharing Teams Territories Divisions Access to Data Behind the Scenes Access Grants and Record Access Calculations Salesforce Access Grants Are Stored in Three Different Tables The Impact of License on Security Platform Security Standard (Out-of-the-Box) Salesforce Audit and Event Monitoring Capabilities User Login Monitoring Field History Tracking Monitor Configuration and Setup Changes Transaction Monitoring and Policies Data Encryption and Data Security Options Salesforce Shield Platform Encryption Event Monitoring Field Audit Trail Security for External User Experiences and Salesforce Portals Clickjack Protection in Communities Cross-Site Scripting (XSS) Prevention Using Groups to Manage Access and Visibility Implicit Sharing Can Impact Record Sharing Community Sharing for External Users External Organization-Wide Defaults Sharing Sets Share Groups (for Internal Users) External Role Hierarchy Making Optimal Decisions Chapter Summary Chapter 6: Salesforce Integration Architecture Integration Strategies Integration Architecture Use Case Integration Levels Integration Layer API Protocol Types Middleware Point-to-Point ETL: Extract, Transform, and Load ESB: Enterprise Service Bus Integration Choices Overview of Integration Patterns Approach Timing Source, Target, and Direction Calling Mechanism Error Handling and Recovery Idempotent Design Considerations Security Consideration State Management Integration Patterns Integration Patterns, Uses Cases, and Justification Selecting the Appropriate Integration Strategy and Integration Pattern Request and Reply Fire and Forget Batch Data Sync Remote Call-In UI Update Data Virtualization Other Integration External Service Options Variety of Integration Options Available Chapter Summary Chapter 7: Salesforce Identity and Access Management Architecture Stages of an Identity and Access Management Lifecycle Architecting Identity and Access Management in Salesforce Provisioning Access Authentication Authorization OpenID Connect Framework for Authorization OAuth 2.0 Authorization Scopes Session Management Two-Factor Authentication Single Sign-On Identity Provider (IDP)–Initiated SAML SSO Flow Service Provider (SP)–Initiated SAML SSO Flow Logouts and Redirects Single Logout (SLO) User Account Management Deprovisioning Chapter Summary Chapter 8: Salesforce Mobile Architecture Why Mobile Architecture Is Important It’s a Lifecycle Leverage Devices Virtual and Mobile Security Connects the World Important Mobile Concepts Modern Mobile Applications User Experience Access to Device Features Speed to Market Development Costs Application Performance Security (Device and API) Considerations Development Skills Deployment Pulling It All Together Using and Accessing Mobile Features Instant Access to Applications and Data Application Access (Authentication and Authorization) Application Use Mobile Security Managing an Enterprise Mobile Environment Enterprise Tools Salesforce Mobile App Features Application Design Considerations Salesforce Mobile Development New Salesforce App Development Environment Differences Salesforce Mobile SDK Development Salesforce Supports IoT, Wearables, and Other Connected Devices Understand IoT Architecture Patterns Connecting Salesforce with IoT Devices Implementing IoT on Salesforce Chapter Summary Chapter 9: Salesforce Development and Deployment Lifecycle DevOps Traditional Software Development Approach Delivery Methodology Waterfall Methodology Agile Methodology Hybrid Methodology Salesforce Delivery Team Environment and Release Management Strategy Org-Based Development Approach Source-Driven Development (SDD) Approach Continuous Integration and Continuous Deployment (CI/CD) Strategy Salesforce DX Salesforce CLI Scratch Orgs Salesforce Package(s) Environment Hub Testing Strategy Governance and Monitoring Steering Committee Center of Excellence (COE) Data Governance Committee DevOps vs. DevSecOps: What’s the Difference? Chapter Summary Appendix A: Salesforce Authorization Flows Web Server Flow User-Agent Flow JWT Bearer Flow Device Flow Asset Token Flow Username and Password Flow Refresh Token Flow SAML Assertion Flow SAML Bearer Assertion Flow Appendix B: Salesforce Integration Patterns Request and Reply Fire and Forget Batch Data Sync Remote Call-In UI Update Data Virtualization Appendix C: Salesforce Sample Artifacts System Landscapes Data Models FUSIAOLA Options Lifecycle Management Artifacts Artifacts Used During a Mock CTA Review Index