Salesforce Sites

Click & Pledge's "Click & Pay" Salesforce app makes use of a feature called 'Salesforce Sites' so that your organization does not have additional costs to send custom emails and publish events online.

This requires custom configuration of the Sites feature, so when you experience an error with your event page or sending emails with images or attachments, you may find it helpful to review your Salesforce Site permissions. C&P has provided this custom configuration by providing gratis installation and post-installation; however, Salesforce is drastically modifying this feature of their platform to implement Salesforce Communities.

This article identifies the errors that require modifications to Salesforce Sites and reviews the latest version of these settings.

• Errors that may require Site setting review
• Site Domain
• Site Detail
• Site Profile
• Site Guest User
  • Time Zone
  • Permission Sets
• Sharing Settings
  • Enable External Sharing Model
  • Change Default External Access for all C&P Objects to "Private"
  • Create the sharing rules
  • Recalculate the sharing rules

Errors that may require Site setting review

• "Authorization Required" Error

• "Event not found" error

 

Site Domain

As part of initial post-installation, you must create a Site Domain.  Note that the Site Domain in Salesforce is different from setting up "My Domain"  "My Domain" affects the URL you use to work within Salesforce, Site Domain affects the URL used to create public sites or Communities - now referred to as "Digital Experiences".

The site is used to host images that you include in Autoresponders and Invoices , and hosts the form you create to sell tickets in Event Management.

By using this feature of Salesforce, your organization does not have to purchase an SSL or provide hosting to have an Event page.

1. In Salesforce, click the Setup gear icon at the top right
2. Type 'Site' in the Quick Find box of the left column. DO NOT hit enter.
3. Click on 'Sites'
4. On the Sites page, you can choose a domain name for your Salesforce Site.  We recommend entering the same text as your domain for your primary website.

e.g. 'ClickandPledge' (from our site, 'https://clickandpledge.com/')

5. Once you have chosen a domain, and checked the Terms of Use, click 'Register My Salesforce Site domain'

Once complete, you must still request post-installation by granting login access , collecting your Organization's Id , and by requesting post-installation in the forum or by creating a Support ticket.   You may go ahead at this point and Re-verify your Connection

Site Detail

Navigation

1. Go to "Setup" (gear icon)
2. Type "Site" in the Quick Find, DO NOT HIT ENTER
3. Click Sites
4. Click the Site Label for the site used for Click & Pledge apps.

This may be "default", "events", "C&P Events", depending on how the site was originally created. The description will generally make reference to its use for Click & Pledge apps.




Site Detail values needed

• Site Contact - user that will receive notifications relevant to the Site
• Default Web Address - The subfolder of the URL that will specifically reference this Salesforce Site.
• Active - must be checked for the site to function
• Active Site Home Page - set to CnP_PaaS_EVT.ActiveEventPage
• Clickjack Protection Level - If event pages will be embedded into other websites with iframes (likely), set to "Allow framing by any page", otherwise "Allow framing by same origin only" is sufficient.
• Referral URL - needs to be unchecked.  Causes "Event is not found" error if checked.
• Default Record Owner - be sure to set one.  Used to create the records in the Event objects.

Site Profile

To access the Site Guest User Profile, click the "Public Access Settings" button on the Site Detail screen

Salesforce Reference: User Management Settings

With Enhanced Profile User Interface disabled, the Site User profile page will be incredibly long. You are looking to verify the Standard Object Permissions.  The Find function (Ctrl-F) of your browser can be helpful will these long screens

1. Click on Object Settings
2. Click on the Object to review or edit
3. Review the Object Permissions for Account, Campaigns, Contacts, Documents, Leads, Opportunities, and Products.
   • Review the Field permissions, if needed.  Best practice is to check Read permission for each field.
4. Move to the next object for review.

 

 

 

Site Guest User

Return to Profile Overview screen above, click "Assigned Users" to see the Site Guest User

Time Zone

The Site Guest User's time zone informs the time zone used for the times on the Event registration page.  If your organization sets up events in multiple time zones, best practice is to create a separate Site for each time zone.

Edit the Site Guest User to the time zone needed for Event Management.

Permission Sets

As of the Spring '21 release of Salesforce, Site Guest User permission sets are replaced by sharing rules, and are no longer necessary.  If your Salesforce instance is Spring '21 or later, and you do not experience errors loading C&P Event registration pages, you may safely remove these permission sets from the Site Guest User:

• PS-CnP-Event-ONLY-SiteGuestUser-CRU
• PS-CnP-PaaS-ONLY-SiteGuestUser-CRU

Sharing Settings

As of the Salesforce Winter '21 release, the Site Guest User uses "sharing" to access custom objects, rather than opening up this security through permission sets.
 

Enable External Sharing Model

Navigate to Sharing Settings

• Click the gear icon at the top right, select Setup
• Type "sharing" in the Quick Find
• Click "Sharing Settings"
• Click the "Enable External Sharing Model" button.  If there is a "Default External Access" column, external sharing is already enabled.

 

 

Change Default External Access for C&P Objects to "Private"

On the Sharing Settings screen, click "edit", and change Default External Access to "Private" for ALL the objects that start with "C&P"  (there's quite a few, not all are shown here)

 

 

Create the sharing rules

1. In Click & Pay Suite go to Settings > Maintenance. The Site Guest User Permissions tab opens.
2. Move the desired sites to the righthand side box.
3. Click "Assign permission to the guest user"

This creates a series of rules in the sharing settings so that the Store/Event pages can load and web site users can automatically create records in Salesforce when they fill out the Registration form.

In Sharing Settings, they look like this:



There's nearly 60 of them!  They are created by an Apex job, so best practice is to monitor the job to make sure it completes.

To monitor the sharing rule job: 

1. In Salesforce Setup, type "job" in the Quick Find (left column)
2. Click "Apex Jobs"
3. Find the job labelled "CnP_GuestUserPublicAccessQueueable"
4. Verify the job status is "Completed".  Refresh your browser tab every few minutes to update the Status

 

 

Recalculate the sharing rules

1. Return to Setup > Sharing Settings
2. Click the Manage sharing settings for: dropdown, and choose "Opportunities"
3. Scroll to Opportunity Sharing Rules, verify the rule exists for the Site Guest User, and click "Recalculate"
4. Repeat steps 1-3 for Leads and Campaigns.