Lightning Experience Setup
Introduction
Lightning Experience is the newest user interface for Salesforce.
With FieldFX built on the Salesforce platform, you can take advantage of Lightning Experience right away.
To use the FieldFX Lightning package starting with version 1.225, you must use the FieldFX Managed Package version 1.529 or higher. To find the version numbers you have installed, see Check Version Number for FieldFX Managed Package and FieldFX Lightning Managed Package. |
Prerequisites
To set up Lightning Experience, you need:
Have these user licenses | Have these permissions | Complete these tasks and review these topics before continuing |
---|---|---|
None |
|
None |
Step-by-Step Guides
When setting up the Lightning Experience, you can complete these tasks:
Switch to Lightning Experience
-
Run the Lightning Experience Migration Assistant:
-
Open Setup.
-
Click Get Started on the Lightning Experience Migration Assistant panel.
-
Follow the on-screen instructions to learn and set up Lightning Experience.
-
Update these workflow controls on FieldFX Back Office page layouts to 250 pixels:
-
Test all FieldFX functionality in Lightning Experience:
-
Run through the tasks completed during your daily operations.
-
Verify that everything is working correctly and adjust page layouts where necessary.
Contact FieldFX Support if you encounter any issues.
-
Add to the CORS Whitelist
FieldFX and Salesforce has a Cross-Origin Resource Sharing (CORS) Whitelist. With this list, FieldFX Visualforce pages can access Salesforce.com content.
For more information on CORS, see Salesforce Help: Add Your Website to the CORS Allowlist. |
Access the CORS list by:
-
In Lightning Experience, open Setup
.
-
Enter
CORS
in the Quick Find box. -
At the CORS screen, click New to enter a new URL.
-
At the Allow an Origin screen, enter a URL in the Origin URL Pattern in the CORS Allowed Origin List Edit section. For more information, see Salesforce Help: Configure Salesforce CORS Allowlist
The URL must include https://, and can include a port. You can also allow browser extensions. You can use the wildcard character (*) which must be in front of a second-level domain name, for example, https://*.example.com. -
Click Save.
The table of allowed Origins List appears with the new Origin URL Pattern you just entered.
Access CSP Settings
-
In Lightning Experience, open Setup.
-
In Setup, enter
CSP
in the Quick Find box. -
Select CSP Trusted Sites.
Ensure Salesforce FXL CSP Setting is Enabled
-
At the CSP Trusted Sites list, find
SalesforceFXL
. -
Click Edit in the Action column for the Salesforce FXL Trusted Site.
-
At the CSP Trusted Site Definition (Managed) window, find the Active checkbox in the Content Security Policy Trusted Site Edit > General Information section.
Field Name Entry / Option Trusted Site Name
SalesforceFXL
Trusted Site URL
Description
Optional
Active
checkboxSelect
Context
dropdownAll
-
If the checkbox is clear, click to enable it.
-
Click Save.
Enable Clickjack Protection
Clickjacking is a tactic in tricking a user to click on a link that performs malicious actions. The actions could be data intrusion, unauthorized emails, change credentials, etc. The trusted domain could have a transparent UI control that is on top of a button. The user thinks they are clicking on the button, but they are clicking on an invisible button that takes them somewhere else, thus their link was clickjacked.
Salesforce uses clickjack protection for Visualforce pages but the admin must enable the protection in their org.
-
While in Setup, enter
Session Settings
in the Quick Find search box. -
At the Session Settings screen, find the Clickjack Protection section.
-
If not already selected, select the Enable clickjack protection for Setup pages checkbox.
-
If not already selected, select the Enable clickjack protection for non-Setup Salesforce pages checkbox.
-
-
Save your changes.
Enable Trusted Domains for Inline Frames
Some Visualforce pages use iFrames, or inline frames, to display content. To protect your domain and Visualforce pages using iframes from clickjacking, you can add these domains so they allow iframing.
-
While in Setup, enter
Session Settings
in the Quick Find search box. -
At the Session Settings screen, find the Trusted Domains for Inline Frames section.
-
To add a domain, click Add Domain.
-
Enter the domain name in Domain.
If the domain name is a Visualforce page, add force.com
. -
Choose the iFrame Type and select Visualforce Pages.
-
Click Save or Save & New to add another domain.
-
-
Back in the Trusted Domains for Inline Frames section, select one or both of these checkboxes:
-
Enable clickjack protection for customer Visualforce pages with standard headers
-
Enable clickjack protection for customer Visualforce pages with headers disabled
-
-
Save your changes.
Enable CSP Trusted Site Definition
If you are unable to see your file uploads using the FXL File Viewer, you may need to add or edit the CSP Trusted Site Definition.
-
While in Setup, enter
CSP
in the Quick Find search box. -
Select CSP Trusted Sites.
-
At Content Security Policy Trusted Sites window, ensure there is a Trusted Site for the FXL File Viewer.
-
To edit the Trusted Site entry, click Edit next to the entry.
-
Under CSP Directives, ensure that all the checkboxes are checked:
CSP Directives checkbox: Allows Lightning Components to load this: Allow site for connect-src
URLs using script interfaces from this site.
Allow site for font-src
Fonts from this site.
Allow site for img-src
Images from this site.
Allow site for media-src
Audio and video from this site.
Allow site for style-src
Stylesheets from this site.
-
Enable Trusted URLs
To access this function, you must have Admin permissions. If not, contact your organization’s Admin. |
Certain Lightning Components and Visualforce pages require a Trusted URL entry to display content.
To allow specific access to FX functions, confirm that the following is enabled:
-
While in Setup, enter
Session Settings
in the Quick Find search box. -
At the Session Settings screen, find the Trusted URLs.
-
Confirm that an entry for the URL: https://*.salesforce.com exists and is Active.
-
If one does not, select New Trusted URL.
-
For the API Name, enter
SalesforceFXL
-
For the URL, enter
https://*.salesforce.com
. -
Confirm that the Active flag is checked.
-
Ensure that the CSP Context is set to All
-
Check each box next to every CSP Directives.
You can leave the camera and microphone unchecked under Permissions Policy Directives. -
Save your changes.
-
Once complete, log out completely and log back in to see changes.
You may need to clear the browser cache for as well. Otherwise, you may still run into errors otherwise.
The following error may still occur if these actions aren’t performed:
Look for
…because it violates the following Content Security Policy directive: connect sr 'self'
Use the steps in Find Error Message in Chrome’s Developer Tools.
Find Error Message in Chrome’s Developer Tools
Google Chrome is the recommended browser to use with FieldFX. Chrome has been tested as working with FieldFX. If you use another browser, results and command locations will vary. |
To find details about the error message return, access Chrome’s Developer Tools.
-
Click
> More Tools > Developer Tools or use Ctrl + Shift + I.
-
At the Developer Console, click on the Console tab.
-
Search for the error.