Salesforce Admins Podcast

Mike Gerholdt

The Salesforce Admins podcast features real-life Salesforce Admins, product managers, and community leaders who transform businesses, careers, and community with clicks, not code. This 20min (sometimes a bit more) weekly podcast hosted by Mike Gerholdt feature episodes to empower Salesforce Admins who are implementing Enterprise CRM solutions. There may be some (digital) confetti. For more than our most recent episodes, go to https://admin.salesforce.com/salesforce-admin-podcast.

  1. 5d ago

    From Inbox Requests to a User Management System

    Today on the Salesforce Admins Podcast, we talk to Michelle Wolfe, Platform Engineer. Join us as we chat about how she built a Flow-powered user management system to handle requests, approvals, user creation, permissions, communications, and even onboarding. You should subscribe for the full episode, but here are a few takeaways from our conversation with Michelle Wolfe. Streamlining change requests with screen flows It's a good thing when your organization is growing, right? For Salesforce Admins, however, new hires need new accounts, and that means approvals, permissions, and onboarding. My guest this week, Michelle Wolfe, found herself in exactly this situation. She turned to Flow to build an automated user management system with no code, and she's here to tell us all about it. Michelle's company was bringing in 80+ people per new hire class, but the account creation request process was a mess. Managers would email a random member of the three-person admin team, and then they would manually create the account. So the first step was to wrangle the business process with a screen flow to get the correct information into Salesforce and create a case. But Michelle was just getting started. Now that everything was in Salesforce, she knew that she could use Flow to automate the rest of the process. New account creation with autolaunched flows Once the new user's information was approved by their manager, Michelle set up an autolaunched flow to spin up the account. This took care of data validation, configuring the correct permissions, and creating a username. Finally, a second autolaunched flow would close out the case and send two email actions: one to confirm the request, and one to welcome the new user. With help from Flow and Einstein Copilot, Michelle transformed a complicated manual business process into something streamlined, simple, and scalable. Partner with your training team for a fresh perspective on your org Michelle credits her success with how closely she works with her training team on enhancements. "Because they interact with new employees, they see things differently than someone who's been here for years and knows how we use our Salesforce," she explains. That fresh perspective helps her identify improvements she might otherwise miss. Listen to my full conversation with Michelle for more on how she used Flow to automate user management—we really get into the weeds. And make sure you're subscribed to the Salesforce Admins Podcast so you never miss an episode. Podcast swag Salesforce Admins on the Trailhead Store Admin Trailblazers Group Admin Trailblazers Community Group Social Michelle on LinkedIn Salesforce Admins on LinkedIn Salesforce Admins on X Mike on Bluesky social Mike on Threads Mike on X Full show transcript Mike: This week on the Salesforce Admins Podcast, I'm joined by Michelle Wolf to talk about what happens when user onboarding stops being a string of emails and becomes a real platform process. So Michelle built a Flow-powered system that handles requests, approvals, user creation, permissions, communications, and even offboarding, while keeping the admin team in control. We're going to talk about the automation behind it, but also the process decisions that make it accurate, secure, and useful for her business. Now, because when admins design access and onboarding well, they're not just saving time. They're protecting trust and helping people get productive faster. So listen in, subscribe, share this episode with an admin who has one too many user requests sitting in their inbox. I'll tell you who doesn't have too many user in requests sitting in their inbox, and that's Michelle. So let's get Michelle on the podcast. So Michelle, welcome to the podcast. Michelle Wolf: Thank you for having me, Mike. Mike: I think this is exciting because I can't recall the number of times I've had people on about onboarding users. And I think it's because whatever cool tool we have come out, it's the second thing people do. They're like, "Oh, I could do this, and I need to figure out how to do X, Y, and Z when I onboard people." Because it was like that with Flow. There was stuff with Chatter when that came out, "How do I onboard people and add them to groups?" And Jennifer Lee was at your session at Midwest Dreaming, and she thought it was just phenomenal. So I had to have you on the podcast to talk about it. But before we get into that, tell me a little bit about yourself, how you got started with Salesforce and what you do. Michelle Wolf: Yeah. So my journey started as a lot of ours as an accidental admin. I was working for a small family-run business who had Salesforce, and they were paying a consultant to basically be their full-time admin. And one day my manager walked into my office and said, "I don't want to pay them anymore. I need you to learn this." And I was like, "Okay." Mike: "I suppose." Michelle Wolf: Yeah. Why not? So yeah, that's what started my journey. And I skilled up on Trailhead and I was on it two, three hours a day trying to figure out how to be an admin in Salesforce. And this was back at the initial transition from Classic to Lightning. Mike: Ooh, fun. Michelle Wolf: So half of my early batches are on Classic. There just wasn't a ton of Lightning stuff out there yet. So I would build a lot in Classic and then flip it over to Lightning to see what it looked like because they did like the Lightning interface, which was great. So that started my journey. And then when I decided to part ways with that company, I took a different position and paused my admin career. And then about five years ago or so, I had an opportunity to be a product SME for Salesforce. And I was like, "Yes, I miss this product. I miss doing this. I miss being able to make things better with just the click of the button. So let's go do this." And I jumped in both feet and never looked back. And so I've been an active admin for a little over five years now. And I'm a Flownatic. Anything I can automate, I am doing it. Mike: I love it. Active admin as opposed to passive. Michelle Wolf: Exactly. Mike: I don't know. So I love when you started because I remember those times and the reason there wasn't enough Lightning things is we were all writing it as fast as we could. Michelle Wolf: Yeah, I know it. Mike: It's kind of like learning to drive with a manual. And then they're like, "Oh, well, here's an automatic." And you're like, "Oh, I already know how to drive with a manual." I mean, if you knew how to do things in Classic, then doing stuff in Lightning was just that much easier, in my opinion anyway. Michelle Wolf: Yeah. I agree. I agree. And the user experience was better for my users. They liked the layout and the feel. It jived with their personalities better instead of that very formal grid-looking everything. Mike: I mean, that was the internet at a certain period in time. And then it grew up and it was like your eyes don't have to squint with white space. Michelle Wolf: Right. Mike: Every field just went from tight polyester pants to sweatpants. And it was like, "Yay." Michelle Wolf: Exactly. Mike: Let's talk about being a Flownatic because I've talked with Jen. I know Jen said she was in your session. I really think, I mean, outside of just it's so incredibly powerful, the amount of things that you can do on the Salesforce platform without writing a single line of code. Flow is one of those. And I remember it was 100 years ago that I saw Flow for the first time at Dreamforce when I was a customer. And I think they called it Business Process Management or something. And it was an app you had to download, and then you had to upload schemas to it. It's since graduated into a much more robust tool. But the nice thing is once you know that, I mean, caveat emptor because AI runs off of all the flows. I mean, if you're good at Flow, there's very few things you can't make Agentforce do. So tell me a little bit about why you built onboarding with Flow. Michelle Wolf: Yeah. The company I was with found themselves in a really big period of growth, which was really amazing. But the new hire classes were like 80 people. And I just could not bring myself to want to spend a week of my life just filling in these boxes to make new users. It was really so time-consuming. And one typo here, one missed field here. My validation rules didn't check out. It was just a pain. It's just very mind-numbing. And I was like, "There has to be a better way." And I went through the different variations of the Add Multiple Users. It's an out-of-the-box function, except I couldn't put my custom fields on there, which means I couldn't save my users because we had validation rules in place. And then I experimented with a bulk upload, but it was such a pain because if I would typo a field, I would mess up my entire formula. Mike: Yeah. Michelle Wolf: And I was like, "There has to be a better way. There just has to be a better way." And- Mike: Plus then all you're doing is just creating the user. Michelle Wolf: Exactly. Mike: With Flow, you can do so much more. Michelle Wolf: Exactly. So by converting it to a Flow, I had a screen. I used my screen flows, and I leveraged the fact that the onboarding team is already putting that information into an email or something. Well, just go here and put it in a case for me. Just hit this button, pull out the fields. Now I don't have to do this. And then I used that screen flow to make a case so I can track my productivity, when the requests are coming in, when the requests are due by, who's doing the request. We started with just managing cases manually and making the users off the cases. And we had built in the approval process to make sure that someone else was double checking the inputs. Did they spell their name right? Did they put in the email right? Because I don't kn

    From Inbox Requests to a User Management System

  2. Jul 30

    Solving Sharing Mysteries with Setup with Agentforce

    Today on the Salesforce Admins Podcast, we talk to Nikita Kothari, Senior Member of the Technical Staff at Salesforce.  Join us as we chat about using Setup with Agentforce to understand and manage record access. You should subscribe for the full episode, but here are a few takeaways from our conversation with Nikita Kothari. Setup with Agentforce simplifies sharing Why can't I see this record? It's a simple question but, as any admin knows, finding an answer can get complicated quickly. If you've ever found yourself digging through Setup pages and running SOQL queries to troubleshoot permissions and record access issues, this episode is for you. This week, I'm talking to Nikita Kothari, a Senior Member of the Technical Staff at Salesforce. She's here to tell us how Setup with Agentforce can help solve sharing mysteries. Using natural language questions, admins can trace access across org-wide defaults, role hierarchies, sharing rules, groups, and manual shares to figure out what's really going on. Troubleshooting permissions and record access issues As Nikita explains, permissions and record access issues are so complicated because they are affected by many overlapping configuration settings. Small changes can accumulate over time, especially in a reorg. Setup with Agentforce was built to help you detangle these issues with simple natural language prompts. You can put your questions about permissions and record access to an agent, instead of having to wade through 1,300 pages of Setup to figure it out on your own. Once you've got a handle on what the problem is, you can use Setup with Agentforce to help you implement changes and get everything sorted. And it's built with trust in mind: every write action requires your explicit approval, the agent is bounded by your permissions, and every configuration change is captured in the Setup Audit Trail. Plan permissions for your org If you're trying to figure out where to get started, Nikita recommends starting small. "It's very difficult to go back and fix something," she says, "so I would highly recommend trying any changes in a sandbox with the minimum set of users to see if it is working as expected or not."  And because Setup with Agentforce makes looking at permissions and record access so much easier, Nikita recommends taking advantage of it to conduct a monthly permissions review. Again, these issues accumulate over time, so an ounce of prevention is truly worth a pound of cure. Make sure to listen to my full conversation with Nikita for more on Setup with Agentforce and how to get sharing straightened out in your org. And don't forget to subscribe for more episodes of the Salesforce Admins Podcast. Podcast swag Salesforce Admins on the Trailhead Store Learn more Salesforce Admins Blog Post: Mastering Your Org's Sharing Configuration with Setup with Agentforce Salesforce Admins Blog Post: 5 Use Cases To Get Started With Setup with Agentforce Salesforce Admins Podcast Episode: Setup with Agentforce Makes Salesforce Admin Tasks Easier Admin Trailblazers Group Admin Trailblazers Community Group Social Nikita on LinkedIn Salesforce Admins on LinkedIn Salesforce Admins on X Mike on Bluesky social Mike on Threads Mike on X Full show transcript Mike Gerholdt: Today on the Salesforce Admins Podcast, we're talking with Nikita Kothari, Senior Member of the Technical Staff here at Salesforce, about using Setup with Agentforce to understand and manage record access. Sharing can be one of those invisible parts of the platform until someone can see a record they shouldn't or can't see one they need to. Nikita explains how admins can use natural language questions to trace access across org-wide defaults, role hierarchies, sharing, rules, groups, and manual shares. We also discuss why validation, permissions, testing, and human approval remain essential when AI helps make configuration changes. So give this episode a listen, click that subscribe button, maybe share it with another Salesforce admin who's ever asked, "Why can this user see this record?" Let's get Nikita on the podcast. So Nikita, welcome to the podcast. Nikita Kothari: Thank you, Mike. It is amazing to be here. I'm from the engineering team, so you'll get my lot of perspective on how we are building Setup with Agentforce on sharing. Mike Gerholdt: Yeah, that's exactly what I wanted to talk about. Let's first get a little acquainted with you. What do you do at Salesforce, and what are some of the things that you've worked on? Nikita Kothari: So it's been close to two years I'm working with Salesforce. And currently, I'm working with access control and sharing space. What pulled me in is the realization that sharing is one of those invisible infrastructure layer. When it works, nobody thinks about it, but when it breaks, it actually breaks the customer trust. And you know how customer-centric Salesforce is, its number one priority is trust. So there is lot of critical issues that we are dealing with and we are trying to make the sharing as the best place for the admins. And we love our admins and we are trying to make things better for them. Mike Gerholdt: I love our admins too. I used to be one for a while. I'd like to still think I am, but we'll see. Well, let's get into it. So I read your article and I'll link to that in the show notes. Tell me, I mean, before Setup with Agentforce, what did an admin have to do to answer a question of, why can this user see this opportunity and this user not? Nikita Kothari: Oh, good question. So it's the simplest way of dealing with solving the sharing's toughest problems. So just to enable the Agentforce, you don't have to do anything. It comes along with the Agentforce. So go to the setup page, search for the Agentforce agent and enable your Setup with Agentforce, and then you can start writing those questions. You don't have to know anything beforehand, that's the best part of the Agentforce setup. And sharing is the challenging domain, I won't deny that. It is very, very complex. So answering even the simplest question that you ask, like, "Who this person is having access for this thing," it requires to look into a lot of different domains like OWD, role hierarchy, sharing rules, sharing groups, manual shares, to see which layer actually give that access to that particular user. And looking that information, sometimes it's easier with the UI, but most of the time user has to run lots of SQL queries to get the correct answer. And previously, admin was spending hours of work and sometimes even the afternoons just to deal with that single questions. And with Setup with Agentforce, it just a minute of work. You just give prompt to your chatbots and it'll give you the correct answer within seconds. Mike Gerholdt: Yeah. I mean, boy, it used to be a lot of archeological digging. I think you called it that in the article. I know I used to have to feel like I was going through a checkbox, but tell me, I mean, walk us through a real investigation where an admin discovers that a user can see a record, they probably shouldn't. How would they use Setup with Agentforce to trace where that access came from? Nikita Kothari: Yeah, great question. So while building these actions, we particularly divide it into two different segments. First segment is the read action and the second segment is the write action. Just to keep it, things untangled, read actions will help you to investigate. When you ask a question like, "Why Nikita has access for these things?" So our agent will go into the background, it will do all kinds of research and it will come up with the best answer. "Okay, Nikita is part of this group, and these groups provide the access to this particular record." And what a write action on the hand will do, it will help you to solve that problem. Now you know Nikita is part of the particular group. You can go ahead and ask your write action, "Can you please remove Nikita from this group?" And your write action will help you to remove that particular user from that group and boom, your problem is solved within a few minutes. It's reliable, it's fast, and I'm sure admin can save a lot of time with these two things. And you don't need to know which action or which thing you need. You just write the plain natural language and our LLM will be able to guess where to navigate and how to solve that problem. Mike Gerholdt: Yeah. No, I hear you. I think you walked us through what a good sharing investigation looks like. But for you, is there a sequence admins should follow so that they don't just jump straight to changing configuration? Nikita Kothari: I would say I would highly recommend admin to start playing with the read action. There is no particular sequence, I would say, but mostly how the sharing is defined is like first we have the OWD, which provides the base access to the records and to the objects. And then comes the role hierarchy, then comes sharing rules, then we have public groups and queue and we have the manual shares. So at each level, sharing opens up the door for more access. So if you're going below the hierarchy, sharing will provide more and more access to the user. And if you want to close that access, it's not easier that one sharing rule will open up the access and then you create another sharing rule to close the access. It's not how it works. So in that case, you need to spend a strategic amount of time thinking how you can revoke that access. And sharing is accumulation of the small, small, small decisions over the time. Sometimes adding someone to the group, for the reorg, you have to do lot of things with the sharing, and every decision gets compound. So I highly recommend our admins to at least spend 30 minutes a month to refresh and reanalyze their sharing configuration to avoid the future problem. So this is basically the flow looks like, but I would say there is any of s

    Solving Sharing Mysteries with Setup with Agentforce

  3. Jul 23

    Salesforce Superbadge Cohorts Build Skills Through Community

    Today on the Salesforce Admins Podcast, we talk to Jean Velonis, Senior Technical Program Manager at Salesforce. Join us as we chat about the new Superbadge Cohort Learning pilot program and how you can get involved. You should subscribe for the full episode, but here are a few takeaways from our conversation with Jean Velonis. Improvements to Superbadges I have to confess, I've always found Superbadges to be a little intimidating. They're locked behind requirements, without clear step-by-step instructions for how to work towards them. That's why I sat down with Jean Velonis, a Senior Technical Program Manager working to improve the Superbadge experience. The first thing Jean wants you to know is that they've overhauled the Superbadge UI. Instead of being locked behind a list of requirements, Superbadges now have a Recommended Learning section. These Trailhead modules and badges are organized into units, giving you a much clearer path to work towards your goal. What is the Superbadge Cohort Learning pilot program? In addition to the UI changes, Jean and her team are launching a new pilot program called Superbadge Cohort Learning. These sessions let you connect with other learners and subject matter experts to work towards a Superbadge together, guided by a facilitator. For now, the pilot program is focused on two of the most popular Superbadges. For admins, the Data Quality and Validation Superbadge gives you the knowledge you need to prep your org for AI. And if you're a dev or looking to improve your coding skills, there will also be groups for the Apex Callouts Superbadge. They're running both in-person and virtual versions of these sessions, so look out for them at a Dreamin' event or community group near you. Volunteer as a subject matter expert or facilitator If you already have these Superbadges, Jean highly recommends volunteering as a subject matter expert or a facilitator. When you're working with new learners, you'll run into questions and situations that deepen your understanding of the topic more than you ever thought possible. The other thing about students is that they keep learning. Teaching is an incredible opportunity to make strong connections that will last throughout your career. As Jean explains, two of her former students are now her go-to people when she has code or Flow questions. Make sure to listen to the full episode for more from Jean about the Superbadge Cohort Learning pilot program. And make sure you're subscribed to the Salesforce Admins Podcast to catch us in your feed every Thursday. Podcast swag Salesforce Admins on the Trailhead Store Learn more Sign up to be a subject matter expert or facilitator: Superbadge Cohort Learning Pilot Session Salesforce 360 Blog Post: How to Stand Out in the AI Era with Superbadges Admin Trailblazers Group Admin Trailblazers Community Group Social Jean on LinkedIn Salesforce Admins on LinkedIn Salesforce Admins on X Mike on Bluesky social Mike on Threads Mike on X Full Transcript Mike: This week on the Salesforce Admins Podcast, I'm joined by Jean Velonis to talk about the Superbadge Cohort Learning Pilot and what happens when admins stop learning alone and start solving problems together. We're going to dig into these cohorts and how they bring experts, beginners, and everyone together in the same room to work through real challenges, build confidence, and get comfortable being uncomfortable. Because for Salesforce admins, knowing how to troubleshoot, test, fail safely, and ask better questions matters just as much as knowing where to click. And as AI and agents become part of everyday platform work, well, those fundamental skills help admins validate what is correct, keep data reliable, and make sure that the platform reflects what the business actually needs. So listen in, subscribe and share this episode with an admin who learns best by rolling up their sleeves and figuring it out. Let's get Jean on the podcast. So Jean, welcome to the podcast. Jean Velonis: Thank you so much for having me. I think this is the second time I've been here, but it's been a while. Mike: I know. Well, when you do the podcast for almost 14 years now, I try not to have guests back, only if they're important like yourself. Jean Velonis: Ooh, thank you. Mike: We were Salesforce MVPs together a hundred years ago when the internet was still tubes and wires, and now we're both at Salesforce. And you're on, I would call, what, the curriculum side, the learning side? Jean Velonis: Yeah, I would categorize that. It's more Trailhead, right? So long story short, certification was my jam for so long, and superbadges were part of that. But over the last couple of years, we've decoupled from certification. We're still with Trailhead and we're still considered an assessment, but we don't have all the guardrails of certification on us anymore, which is really exciting. Mike: Gotcha. And just for reference, if anybody thinks they might have met Jean at a Dreaming event or a Salesforce event, you tend to usually have purple hair and a bedazzled Ranger hat. Is that an accurate description? Jean Velonis: These are facts. These are facts. I've had purple hair probably since six months of coming into Salesforce. And if anybody knows the famous Chris Duarte out there, she taught me everything I know about bedazzling. So I made a Ranger hat. Mike: Yeah. A lot of people bedazzle now because of her. Jean Velonis: Yes. Mike: Well, let's talk about this new Superbadge cohort learning pilot that you've kicked off because I think you're trying to bring the best of both worlds together. Jean Velonis: Absolutely. This isn't a new concept either. I'll just throw that out there. We had some amazing trailblazers before the pandemic and even through the pandemic doing Salesforce Saturdays or Salesforce Sundays and they would get together in person or virtually and work on Trailhead. So this is kind of piggybacking off that concept and really bringing some of the community magic to superbadges because I think we can all look at a superbadge and be like, oh, that's kind of intimidating. There's no step-by-step instructions. This looks really hard. There's multiple steps to it, and that just looks hard and I don't want to do it. But the cohort learning brings a facilitator, like a community group leader or a Dreamin event person to come in and help bring people together virtually or in person and work on a Superbadge together. And we've been running a couple of pilots of these. We did one at TDX and WITness Success in Indi. And it's been really successful in person just because you can pair experts and newbies together at a table and make people really uncomfortable, and then they start talking to each other and learning from each other. And I think that's what gets really excited about doing this cohort learning. And then we've done a couple of virtual events as well where we've brought community group leaders, kind of like train the trainer of like, here's how you should run this virtually to be successful, because that virtual is a little bit different beast. It's really easy to hide and stay on mute and turn your camera off where we really try and get people excited to share their skillset with each other. Mike: Yeah. No hiding in the dark corners. So I really like the idea of this. I've always really enjoyed Trailhead because I'm the type of learner that likes to do it at my own pace. Sometimes I even crazily go back and redo a badge just because I feel like if I've rushed through it, did I really learn it or was I just trying to get it done? And when I'm really trying to learn it, I really take my time. I will agree with you, I've written superbadges. I also enjoy the freedom. They're kind of like, "Here, go, do. " And you're like, "Oh yes." It's almost like the days of driver's ed when you get out from behind the desk and you finally get to drive the car in the real world. It's a little more of trying things out. So are these cohorts that you're doing now, are they open to any superbadge or are they just specific ones? Jean Velonis: That's a really good question. We looked at our whole library of Superbadges and we wanted to pick one for admins and one for developers. And that doesn't mean it's just if you have that skill set. It's more of like, here's two of the main roles we see in the community. So we have data quality and validation, which is really for anybody prepping you for this agentic ecosystem that we're in, cleaning up your org. Mike: I mean, to be honest with you, that's what we've needed to do this whole time. Even before AI, it's sweeping the floors, you know? Jean Velonis: Yeah. I mean, it's been that way for a long time. I think I made my whole Salesforce admin career of going in and cleaning up orgs, to be honest. So that was a great place for us to start. And then now we've started looking at the developer side of it and we picked Apex Callouts superbadge for all of our developers. And I was very intimidated by trying to put together a superbadge in a box for that cohort because I'm not a developer. But going through this process, I'm like, "You know what? I think I can actually do this," And that's because of all the great learning badges on Trailhead and being able to go at your own pace. Because that's a whole nother skill set for an admin to try and figure out, right? Mike: Right. I've often thought of, this is just how Mike's brain works. If I had children, I would for sure name one of them Apex because then you just gave them a shout-out. Jean Velonis: That's hilarious. I would've never thought- Mike: That's how I work. My brain today is like, "Oh yeah. Hey, did you hear you were mentioned on a Salesforce podcast?" "Of course I was. I'm an Apex Callout." Jean Velonis: I'll tell you a weird secret. I do put my children's names in superbadge content. All of us over here under

    Salesforce Superbadge Cohorts Build Skills Through Community

  4. Jul 16

    How Can Admins Reduce MFA Friction in Salesforce?

    Today on the Salesforce Admins Podcast, we talk to Jay Hurst, Senior Vice President of Product Management, and James Ferguson, Senior Director of Product Management, at Salesforce. Join us as we chat about MFA step-up authentication and what it means for Salesforce Admins. You should subscribe for the full episode, but here are a few takeaways from our conversation with Jay Hurst and James Ferguson. Step-up authentication protects sensitive actions Starting next week, Salesforce is requiring all users to use Multi-Factor Authentication (MFA). If you're a privileged user like, for example, an admin, you'll need to use a phishing-resistant MFA. That's why I sat down with Jay Hurst, VP of Product Management, and James Ferguson, Senior Director of Product Management, to talk about why these changes are vital to protect your org's data. The first thing to know is that AI is making it easier than ever to launch targeted phishing attacks at scale. So while the MFA requirements provide a good first layer of protection, we want to make extra sure you are who you say you are before you're allowed to perform certain actions, like downloading a large number of records or running a big report. Phishing-resistant MFA uses a passkey, like a fingerprint or facial recognition biometric, to verify that it's actually you and not just someone with access to your email account. Balancing security with user friction As Jay and James acknowledge, these changes will add some friction to your users' experience. However, with the pace at which these kinds of attacks are evolving, it's more important than ever to get serious about your security posture. "We're trying to introduce a little more friction right now so that people start to think," Jay explains, "and start to build those habits of understanding when they're doing something that potentially could be considered a malicious attack, such as downloading that All Opportunities report." They're also building out compensating controls that should make things easier in the future, allowing you to trust users from a certain IP range, for example. Security is a journey, not a destination The most important thing to realize is that these requirements are about more than just jumping through some extra hoops. Phishing and man-in-the-middle attacks are growing more and more sophisticated, and you need better protections than "Well, that hasn't happened yet." Instead, James and Jay recommend viewing this as an opportunity to partner with other stakeholders in your org to develop a comprehensive security plan. As Jay says, "Security is a journey, not a destination. What is 100% secure today is not as secure tomorrow." The trick is to develop a security-focused mindset throughout your business that will protect you now and in the future. Make sure to listen to my full conversation with Jay and James for more on step-up authentication and how admins can reduce friction for users. And make sure you're subscribed to the Salesforce Admins Podcast so you never miss an episode. Podcast swag Salesforce Admins on the Trailhead Store Learn more Salesforce Admins Podcast Episode: What Are Security Essentials for Salesforce Admins? Salesforce Admins Blog Post: Securing Your Org: From Reactive to Proactive Salesforce Help Article: Prepare for the upcoming Step-up Authentication requirements on Report Actions Salesforce Help Article: Prepare for MFA Enforcement for All Employee Users Salesforce Help Article: Prepare for Phishing-Resistant MFA Enforcement for Privileged Users including Admins Salesforce Help Article: Security-Related Product Updates to the Salesforce Platform: User Identity, Data Protection, and Access Controls Admin Trailblazers Group Admin Trailblazers Community Group Social Jay on LinkedIn James on LinkedIn Salesforce Admins on LinkedIn Salesforce Admins on X Mike on Bluesky social Mike on Threads Mike on X Full show transcript Mike: This week on the Salesforce Admins Podcast, we're talking with Jay Hurst and James Ferguson from Salesforce Product Management about MFA step-up authentication and what it means for Salesforce admins. As you know, security isn't just a front-door login decision anymore. It's about protecting sensitive actions, understanding risk, and designing systems users can trust. So Jay and James are going to help us unpack phishing-resistant MFA, compensating controls, IP ranges, SSO, and why these changes matter in a world where data, automation and AI are all working together. For us Salesforce admins, this is a chance to think beyond features and really look at how we steward the entire system. So listen in, click that Subscribe button, and of course I would love if you could share it with fellow Salesforce admins or, hey, you know what? Let's make some friends in that security team. So with that, let's get Jay and James on the podcast. So Jay and James, welcome to the podcast. Jay Hurst: Thanks for having us, Mike. James Ferguson: Great to be here. Mike: Absolutely. Jay, let's start off with you. We kind of want to get to know a little bit about you, and James, we'll call on you second, but before we get into our topic today, can you just tell me a little bit about how you got to Salesforce and what you do? Jay Hurst: Sure, yeah. So I have been with Salesforce for almost 22 years now. I started in our customer support department, one of the first 12 phone support reps here at Salesforce. Did that for a couple years and helped found our Tier 3 organization in support. Eventually moved over to our customer-centric engineering department, stayed in there for a while. And then in 2012, had an opportunity to join the product management group for platform, and I moved over and ran a team called Force.com Canvas. And for the last, I guess, 12-ish years now, I've been kind of weaving my way upwards through platform. Currently, I lead our platform services subcloud, so all of the core foundational pieces of platform that you might think of are schema and metadata, APIs, eventing systems, connectivity systems, and also our identity area, which is what brings us here today to talk about MFA. Mike: Yeah. Boy, flashback. You called it the Force.com platform. Jay Hurst: Well, that's what it was called back then. Mike: I know. I know. Jay Hurst: And I can't remember all of the names we've had for it. Mike: Oh, that's okay. I'm sure there's a website that tracks all of them. Jay Hurst: I'm sure there is. Mike: James, fill us in. How'd you get to Salesforce, and what do you do here? James Ferguson: Well, I am, I guess compared to Jay, one of the newer members of the team. I've only been at Salesforce for about 16 and a half years, almost 17 years. Pretty much entirely on the platform product management side, working on various things people know and love like sharing and big objects and event monitoring and those things. And most recently I've taken over responsibility for the identity product team, responsible for all the login and auth and SSO and all of the wonderful things we'll talk about today. Mike: Oh, wow. Okay. So then just to be clear, I'm actually the newest person on this call. I've only been at Salesforce for a little over 12 years now, so I guess I still have my rookie stripes. Jay Hurst: Combined we're almost at 40, or just over 40. Mike: Yeah, combined. We almost get our AARP discount, right? Jay Hurst: Yeah, exactly. Mike: Jay, let's kick off. I know I did a podcast ... and I'll link back to it ... not that long ago with Laura Pelke talking about some of the new things that were coming out, and of course security is always big on admins' mind. She did a wonderful job of explaining step-up authentication to me, which was basically the airport analogy of you have to show your ID to get in and then you have to show your boarding pass to get onto the plane. I thought that really made sense to me, but let's talk about the new authentication that's coming out, if you call it that, and the new step-up concerns that Salesforce admins have. Jay Hurst: Sure. So I think as we move into the continued proliferation of agents and AI across the industry, security is obviously top of mind for a lot of our customers and for Salesforce as well, specifically because we have to help protect our customers. And so when we're thinking of that and how we ensure our customers' data is protected, with step-up authentication, it's really focused around in that same analogy, making sure you're providing your boarding pass at the right times when you're doing things. So just like you need to show your boarding pass when you go through the TSA gate and when you're on the plane and probably to the gate agent after you're on the plane, when you're doing certain things within Salesforce, we want to make sure you are who you actually are and your session hasn't been compromised. So when you're doing certain higher sensitivity-type actions such as I want to download 10,000 records out of my system, maybe run a report, putting that end user through another verification of, "Hey, is this actually you? Prove it with your step-up," so that we have that confidence that we can release the records. And so this kind of helps prevent some of those man-in-the-middle phishing attacks where somebody gets you to log in and then steals your credentials or steals your session in the background. So it's kind of that second or third or fourth level of protection in the runtime. Mike: Wow. James Ferguson: I think that's an important shift that's worth calling out, because it's no longer about just putting a stronger lock on the front door and making sure somebody has better passwords, or even the later stuff, the more recent stuff with verification. But it's when sensitive things happen, we need to do a little extra even once you're inside the airport, if we want to continue that analogy. And so i

    How Can Admins Reduce MFA Friction in Salesforce?

  5. Jul 9

    How MuleSoft Helps Salesforce Admins Build Better Agents

    Today on the Salesforce Admins Podcast, we talk to Mofeyi Oluwalana, Director of Product Management at Salesforce. Join us as we chat about MuleSoft, Flow, Agentforce, and what happens when agents need to take action beyond Salesforce. You should subscribe for the full episode, but here are a few takeaways from our conversation with Mofeyi Oluwalana. MuleSoft creates agent-friendly business processes Agentforce can be truly transformative for our business processes, but sometimes it's easier said than done—especially when multiple platforms are involved. That's why I sat down with Mofeyi Oluwalana, Director of Product Management for MuleSoft. As Mofeyi explains, a problem many businesses run into when they're trying to implement AI is how to enable an agent to engage with something like a process that starts on a payment platform, goes through an OMS, and then ends up with a request to a warehouse for shipping. You can't just hand them the APIs and expect them to figure out the rest. That's where MuleSoft comes in. It gives you the building blocks you need to codify your workflows into something an agent can understand. Data mapping for real-time app integration Building an agent-friendly business process begins with data mapping. What do you need and where is it located? You also need to understand the triggers that kick off each part of the process. Does it start with a Slack message, or when an order is created? Often, these types of business processes don't start in the Salesforce ecosystem. MuleSoft allows you to translate these business requirements into APIs that an agent can use to take action. How to present to stakeholders As a product manager, Mofeyi frequently gives presentations to stakeholders, so I wanted to know if she had any advice for admins. "The most important thing when I walk into any room, regardless of the stakeholder, is who are they and what do they care about? Your ability to persuade and influence is largely due to your understanding of the three things that the people that you're talking to care about and how you align what you're talking about with those three things," she says. Make sure to listen to my full conversation with Mofeyi for more about MuleSoft and mapping your business processes. And don't forget to subscribe to the Salesforce Admins Podcast for a new episode every Thursday. Podcast swag Salesforce Admins on the Trailhead Store Learn more Salesforce Admins Blog Post: How MuleSoft Helps Admins Get the Most out of Agentforce Admin Trailblazers Group Admin Trailblazers Community Group Social Mofeyi on LinkedIn Salesforce Admins on LinkedIn Salesforce Admins on X Mike on Bluesky social Mike on Threads Mike on X Full show transcript Mike: This week on the Salesforce Admins podcast, we're joined by Mofeyi Oluwalana, product management director at Salesforce to talk about MuleSoft, Flow, Agentforce, and what happens when agents need to take action beyond Salesforce. Now, for Salesforce admins, this conversation matters because agents are only as useful as the data, the actions, the permissions, and the business logic they can safely reach. So Mofeyi's going to explain to us why integrations are not just about moving data from one system to another. They're about helping Salesforce connect to the real processes your business depends on. We'll talk about the questions that admins should ask when working with other platform owners, how to think about triggers and data mapping and why business context is so important when you're designing actions for humans and agents. So give this episode a listen, subscribe wherever you get your podcasts, share it with another Salesforce admin who's maybe thinking about how Salesforce could connect to the rest of their business. And with that, let's get Mofeyi on the podcast. So Mofeyi, welcome to the podcast. Mofeyi Oluwalana: Thank you so much. Mike: I'm excited. We don't do a whole lot of episodes outside a core platform. And I know my Salesforce admins ... My ... The Salesforce admins of the world work everywhere and especially now with Agentforce and agents and really just the whole bringing people together and giving a complete view of data, integrating data and working with MuleSoft and tools like that are super important. So I'm glad to have you on. I'm glad we got connected, but let's start off and learn a little bit about you. What was your path to Salesforce and becoming a product management director? Mofeyi Oluwalana: Yes. So I started at Salesforce a little over four years ago. I actually came through the APM program, also known as the Associate Product Manager Program. It's a two-year rotational program for folks coming out of university, getting their start in product. So I was able to come in through that program. I did three rotations all across Salesforce. I spent some time in Commerce Cloud working on how to run promotions on Black Friday. Mike: Oh, holy cow. Mofeyi Oluwalana: And I spent a lot of time in experience services, thinking about how we can make it easier for marketers to build nice looking emails. And I ultimately landed in MuleSoft, which is where I continued working with the MuleSoft team on how to make it easier for our customers to connect the systems that they need to, both for traditional use cases, but also for the agentic ones as well. Mike: Yeah. It's funny, for the longest time in my career, I worked retail and the day after Thanksgiving, Black Friday was always the busiest day. And then I got into tech and I was like, "I don't have to work Black Friday." Mofeyi Oluwalana: Guess what? [inaudible 00:03:17]. Mike: And then realized that like, "Oh man, I was a retail associate. There's still computers that have to be had." So I have a soft spot in my heart for all of the people that on Black Friday have to sweat it out and make sure that servers don't go down so that checks and barcodes and everything can happen on the other end. Mofeyi Oluwalana: Yeah. I never realized how complex it could mean to calculate hundreds of thousands of carts when there were promotions running on Black Friday, but certainly it's more complicated than one may think. Mike: Right. And then there's people like me that add stuff to a cart and I'll come back to it a little bit later like, no, there's somebody ... You're using up the last bit of ... I don't know. He probably doesn't know that. And then I'm also old school retail when you used to have to verify checks and put them through little check readers and now everything's a credit card or a tap or thumbprint. Mofeyi Oluwalana: All of the above. Mike: All of the above. But it's all of the above because we're integrating data and we're doing stuff with MuleSoft. So I threw together some questions, but let's start off with where should admin start when thinking about products like Flow and MuleSoft and Agentforce together? Mofeyi Oluwalana: Yeah. The journey with MuleSoft starts the moment that your agent wants to do anything outside of Salesforce. I think MuleSoft is the connector, so to speak. If you have data that your agents need to reach in your ERP, if you have actions your agents need to be able to take with your payment provider, how exactly will they be able to do that? Now when agents and agentic technology became a thing, a lot of people were of this opinion that, well, agents are smart enough to just understand platform APIs or where agents can read the specifications, figure out the commands that they need to execute and do all the things that they need to do to be successful. We very quickly realized that agents are really smart, but at the end of the day, they're limited by the information that they know and the tools that they have access to. So it's not sufficient to just give your agents a platform API spec. That's not going to cut it. Your agents need integrations and APIs that they can directly invoke that map to your business logic. They need this because not every organization operates the same. For one retail provider, creating an order is very different from other retail providers. And understanding that business vocabulary is really important when building agents that actually bring value. And that's really where MuleSoft and Flow come into the picture. You have actions that your agency to be able to take in order to execute a certain business process. Well, that action is really just an API and we serve those APIs so your agents are able to do those things. Mike: Yeah. I've always thought of Josh who's on my team keeps us in check with helping us understand stuff. And what you just described would be like as if you brought somebody new on and said, "Well, here's a phone and a phone book. And if you have problems, the phone number's in the phone book." And the agent's the same way. If you're just saying, "Here's all the specs and the APIs you can call, go figure it out." It's almost like handing them this giant phone book and just saying, "Well, you're smart. You'll figure it out." Mofeyi Oluwalana: Yeah. Exactly. And the thing is that for a retailer, creating an order may not just be creating that order record. Creating an order may be, oh, I create the order record and then I send a notification out via email that says, "Hey, this is your order." And then after that, I create an invoice. There are a number of steps that happen. And how do you codify those steps? Well, it's not enough to just give an agent, again, the phone book and the numbers. It's much better and much more reliable to give them the actual workflow or the API they can use to execute that entire process. Mike: Yeah. Now, one thing that I've run into, so back when I was doing some integrations as an admin, we had different third party tools that were being used. One thing that I didn't know to ask ... And I'm hoping you can help Salesforce admins like, here's the questions you need to ask. We had an

    How MuleSoft Helps Salesforce Admins Build Better Agents

  6. Jul 2

    How Can Salesforce Admins Find Simple Agentforce Use Cases?

    Today on the Salesforce Admins Podcast, we talk to Kacie Molina, Salesforce Consultant at Kawaii Cloud. Join us as we chat about how admins can start small with Agentforce and still make a big impact. You should subscribe for the full episode, but here are a few takeaways from our conversation with Kacie Molina. Why you should start small with Agentforce With all the capabilities Agentforce brings to Salesforce, it's easy to dream big. Big projects, however, require major organizational investments in time, planning, and execution. My guest this week, Kacie Molina, has some simple advice for her clients who want to get started with Agentforce: start small. Go back to the basics of listening for pain points and building solutions. Once you start piling up small wins and meaningful changes, it'll be easier to get organizational buy-in for something big and bold. Admins should listen for problems users already have Agentforce solutions don't always have to be some sort of major business process overhaul. Those types of changes require layers of approvals, budgeting, and business analysis. You end up spending as much time rethinking the business process as you do worrying about executing everything in Salesforce. Instead, look for simple use cases. For example, implementing an agent summary field to help users easily see what's going on with an account without having to scroll through a bunch of records. "All of those little use cases that maybe are too specific for a flow," Kacie says, "we can solve them with Agentforce and natural language." And over time, the simple solutions add up. Keeping AI work inside Salesforce supports better security Even if you're not already using Agentforce, people in your organization are already using AI. The problem is that they're often exporting data over to their LLM of choice, which creates all sorts of security vulnerabilities. That's why Kacie recommends enabling an agent to assist your users. You can use your model of choice, and it'll be grounded in your Salesforce data and protected by your security configuration. "It shows users that there's a safe place to get the answers they want without having to worry about breaking company policies," Kacie says.  Make sure to listen to my full conversation with Kacie about how to start small with Agentforce. And don't forget to subscribe to the Salesforce Admins Podcast so you never miss an episode. Podcast swag Salesforce Admins on the Trailhead Store Learn more Salesforce 360 Blog Post: From the Farm to Flows: How One Trailblazer Built a Tech Career from Scratch Kacie's post on LinkedIn Admin Trailblazers Group Admin Trailblazers Community Group Social Kacie on LinkedIn Salesforce Admins on LinkedIn Salesforce Admins on X Mike on Bluesky social Mike on Threads Mike on X Full show transcript Mike: This week on the Salesforce Admins podcast, we're talking with Kacie Molina about how admins can start small with Agentforce and still make a big impact. Kacie shares why the best AI ideas often come from listening closely to everyday user friction. The scattered preferences, repeated questions, messy exports, and those tiny gaps that slow teams down. We'll talk about building agents that are grounded in Salesforce powered by Flow and designed with trust and security in mind. Because the next generation of admins isn't just adding features, they're orchestrating safer, smarter systems where humans and agents work together. So give it a listen, click that subscribe button, share this episode with an admin who is ready to make AI even more practical for their users. And let's get Kacie on the podcast. So Kacie, welcome to the podcast. Kacie Molina: Thanks, Mike. I am super excited to be here today. Mike: Well, I'm excited to get you on. I was a rare occasion scrolling through LinkedIn and I came across a post that you had put up and it mentioned the AgentforceNow workshop that I think you were in one of mine or you'd been to one. Kacie Molina: I was in one of yours and it was done extremely well, might I say. Mike: You were. Oh, good. Well, I try hard. And you're talking about coming up with ideas and you'd had some ideas for agents and I thought, "Man, I just think we need some sort of agent brainstorm podcast." And so that's why I wanted to get you on. But we're going to talk about that. But before we get started, tell me a little bit about yourself, like how you got into Salesforce, what you do, all of the fun stuff. Kacie Molina: Absolutely. So I grew up in more rural USA, an Amish type community, so horse and buggy. Think maybe Little House on the Prairie, early 1800s. So did a lot of horse training and cheese making with my sister, tended gardens and animals. So my skills when I became an adult were fairly traditional. So as I was trying to translate, "What do I use my skills for?" I started nannying, childcare, and then I started my own sewing business. And during that phase, I was actually so bad at running a business, so I knew how to sew, but I didn't really know the business part. So keeping track of contacts and invoicing people on time was such a disaster for me. It was all little handwritten notes. So I was listening to podcasts and I heard about Salesforce. I logged into Trailhead and fell in love with the gamified learning. So it was kind of no turning back for me. I got my admin certification in about three months, landed a junior admin role shortly after. And it's been about five years and 10 certifications since then of working on all kinds of projects from in-house to consulting. And I just think like Flows, all think Salesforce. It's so much fun. And in the day and age of Agentforce, even more fun nowadays. So that's kind of how I stumbled onto the Salesforce path and it has been way too much fun. Mike: Oh man, I bet we could do a whole podcast on the skills of sewing and how they carry over to Salesforce. Kacie Molina: We probably could, although I do think Salesforce might be a little more fun. One, because you don't get poked by needles. That's a huge thing for me. I don't even like going to the doctor and getting poked by a needle and I did that for a profession. So I got poked all the time and it's much less frustrating than trying to deal with broken sewing machines. Salesforce kind of works pretty well. And when you're dealing with old-fashioned sewing machines, not so much. Mike: I could imagine. Yeah. Needleforce, that's what we'll call it. Kacie Molina: Needleforce. Mike: I bet that exists. I think that would be so cool if there was quilting or sewing at Dreamforce. Because I see people on the plane all the time with those knitting needles and stuff. I would love to have the patience to do it. Kacie Molina: It definitely takes a lot of patience. So actually, interestingly enough, when I was just getting into Salesforce, Mallory Donahue, she's such an amazing person I look up to. She was getting into Salesforce at the same time as me and she was also a seamstress. So I think there might be more sewing and needle people out there in the Salesforce world than you might think. Mike: Yep. Well, this is the diversion that Mike's squirrel brain gets on too quickly. But let's talk about ... I was so intrigued by your post, because I feel like even in the workshop that we do, the AgentforceNow workshop that I hosted, I think I'm back sometime in October because I have some vacation in July. We build an agent for Pronto, which is a food service company and it handles questions and cases and order issues. I mean, I feel like by the end of it, it's pretty complex because we've already built some Flows. There's some Apex actions that are in there. And so I feel like we're getting nitty-gritty into it, but your post kind of almost felt like a breadth mint of like, "Hey, have you ever just thought about asking your users five questions or whatever and then turning on Agentforce and giving it on action to do?" Kacie Molina: Yeah. I really like the workshop, because it gets into the more complex things and you see how the broader, the depth Agentforce can go to. But for me, when I started looking at ... Okay. So I serve multiple clients, and a lot of people are excited about Agentforce and I talk to a lot of admins about it as well, but where do you get started? For me, it was the really simple, small things where people I feel like nowadays more and more are expecting to be able to use natural language. And you don't really need to build a crazy, big agent that takes multiple sprints to complete. You can turn one on fairly simply to answer a couple simple questions and people can start to see that magic work from even a small start. Mike: Yeah. And I feel like, boy, this is me just thinking of that post, but you had really good ideas around not just what I would call the hard aspects of business, which is like invoicing and questions and emails, but also kind of like the soft aspects of business, which is just asking Agentforce to coach you that day or just kind of simple questions that you could give it that would maybe make you as a salesperson or customer service person feel better about what you're doing. Kacie Molina: Right. I do. I think it's really cool that you kind of came back to the small ideas and I'm actually very impressed you found that post because I feel like not many people see my LinkedIn post. Mike: You mentioned me in it, so I got that. But I mean, to be fair though, the small little detail, little things like that are actually kind of the bigger hooks to look for. Kacie Molina: They are in there. To me, they're everywhere. So bigger agent ideas, like there's a couple things that can be intimidating about them. One, they take a lot of time. Two, you're always looking for that big idea that is going to wow the whole company potentially. And then it also entails potentially budget and project approval, which yo

    How Can Salesforce Admins Find Simple Agentforce Use Cases?

  7. Jun 25

    How Do Admins Set Up Agentforce Coworker in Salesforce

    Today on the Salesforce Admins Podcast, we talk to Parth Shah, Director of Product Marketing, and Rikke Hovgaard, Director of Product Management for the Agentforce Coworker team at Salesforce. Join us as we chat about Agentforce Coworker and what it means for the way admins help teams get work done. You should subscribe for the full episode, but here are a few takeaways from our conversation with Parth Shah and Rikke Hovgaard. Agentforce Coworker brings AI into everyday business work AI has been a game changer for coding, but integrating it into normal business processes has proved more challenging. That's where Agentforce Coworker comes in. It's an autonomous AI teammate, grounded in your enterprise data from day one. For this episode, I sat down with with Rikke Hovgaard, Director of Product Management, and Parth Shah, Director of Product Marketing, to find out what Agentforce Coworker is and how it can help admins bring new tools to their team. Salesforce permissions remain central to trust and access Trust is central to any conversation about AI. New tools are exciting, but you need to be sure that they won't give people access to data they shouldn't be able to see. Luckily, Agentforce Coworker works around the permissions you've already configured in Salesforce. It's simple for admins, and keeps those guardrails in place. As far as configuration goes, Rikke and Parth are all about keeping it simple and transparent. While Agentforce Coworker automatically inherits the security and governance settings that are already in your org, you also have special configuration options just for the agent. Admins can connect more data through Data Cloud and Slack For Rikke, Agentforce Coworker is especially useful for summarizing her team's Slack conversations. She can quickly understand which team member is working on which issue, and where she might need to lend a helping hand. At the end of the day, Agentforce Coworker gives you a conversational interface to do more with your Salesforce data. "Coworker does the work in the background so that your team can actually focus on what matters," Parth says. Listen to the full episode for more from Parth and Rikke about Agentforce Coworker. And don't forget to subscribe to the Salesforce Admins Podcast to catch us every Thursday. Podcast swag Salesforce Admins on the Trailhead Store Learn more Introducing Agentforce Coworker Salesforce Admins Podcast Episode: How Headless 360 Helps Admins Bring Salesforce Anywhere Admin Trailblazers Group Admin Trailblazers Community Group Social Rikke on LinkedIn Parth on LinkedIn Salesforce Admins on LinkedIn Salesforce Admins on X Mike on Bluesky social Mike on Threads Mike on X Full show transcript Mike: This week on the Salesforce Admins podcast, we're talking with Parth Shah and Rikke Hovgaard about Agentforce Coworker and what it means for the way admins help teams get work done. Now, this isn't just about turning on another AI feature. It's about bringing trusted business context, permissions, data, and automation together so users can ask better questions and take action faster. Parth and Rikke are going to walk us through how Coworker connects to Salesforce data, how it respects existing permissions, and how it gives admins a simpler path to roll out and governance. So, be sure to listen in, press that subscribe button if you haven't already. And I would always appreciate it if you could share this episode with a fellow Salesforce admin. And with that, let's get Parth and Rikke on the podcast. So, Parth and Rikke, welcome to the podcast. Rikke Hovgaard: Thank you for having us. Parth Shah: Thank you. Mike: Well, I'm glad we could get you both on. This is the first time I've had a product manager and a product marketing major on a podcast. Usually, one of them has something too important to do that they bail out, but I'm bringing people together. It's going to be great. So, we're going to talk about Agentforce Coworker, but first I want to learn a little bit about each of you. Parth, I'm just going to start with you because you were the first one to bug me in my Slack DMs about Agentforce Coworker. So, I'd love to learn just a little bit about how you came to Salesforce and what you currently are working on.  Parth Shah: Yeah, absolutely. Slack makes it really easy to bug my Coworkers, especially my favorite ones. I sent a lot of emojis. So, sorry, Mike. Mike: Oh, I'm your favorite.  Parth Shah: Yeah. So, a bit about me. I grew up in Ohio, was a chemical engineer in undergrad, which really I love to build things and I love to, I guess, solve complex problems. And then when I graduated, I didn't want to go work in a plant, in a chemical plant. And so, I ended up going into sales within oil and gas. Did that for about three years, really understood how to actually talk to customers and what their pain points are. And then switched over to a really early stage startup in education technology, really passionate about education. Did that for about three years, which is where I learned a lot about product marketing. Then got my MBA and then joined Salesforce. So, been at Salesforce as a product marketer for about coming up to seven years. And what's been kind of interesting is I started off on the MuleSoft side of Salesforce, so all about integrations. I really learned what it means to connect data between different systems and how developers and admins go about doing that. And that's when I switched over. MuleSoft wanted to launch a new product called MuleSoft Composer at that time, which is now Flow. So, the next level of after connecting data is like, how do you actually use that data to automate processes and make it super simple for admins like our viewers out there? So, help launch that and then moved over to our Data 360, previously data cloud business. And here, I focus on everything that is around unstructured data. So, again, the through line here, if you look at data is, now we can start tapping into the unstructured data that's all out there because of AI. But the more important thing is now that AI is coming in, how do we actually bring that data, which is full of richness in audio, video, meeting notes, et cetera? How do we bring it into AI so that AI is really grounded? And so, that's been kind of my journey. Obviously, looking back at it, everything kind of connected. I didn't know at that time, but the through line I think is my curiosity of what's next within tech has kind of propelled me to go and find out and work on the cool next product that's coming up, which is also how I land on a Coworker. Mike: Wow. I would've had no idea that you started in oil and gas. Also, what's sales like in oil and gas? Hi, do you want any? Yes. Parth Shah: Cool. Yeah. It's very old. It's a very people oriented business. Mike: Yeah. All right. Well, I had to get that joke in. Rikke, I know you're letting me say your name that way, but in all fairness, being German, there's names that we just can't pronounce. So, I'd love to hear how you got started at Salesforce and obviously you're working on Coworker now. Rikke Hovgaard: Yeah. So, originally I'm from Denmark, which is why my name is a little hard to pronounce. Believe it or not, that's actually a pretty common name in Denmark. So, Rikke is fine here, but I started out after university working for a consultation partner. So, I started implementing Salesforce randomly, started out with Sales Cloud, Service Cloud, moved over to Pardot and Marketing Cloud when that was acquired by Salesforce and ended up also doing a little bit of data and analytics there. And then I decided it was time to move on to other things. So, I joined another partner in London and I moved to London and did that for a bit. I was working a lot on analytics at that point and also marketing. And so, it was mostly focused on what we know now as CRM Analytics and I started a blog on it as well. And so, a few years into it, I joined Salesforce in the CIM Analytics product team, helping customers get the most out of CIM analytics, deescalate some of their issues, best practices, all this kind of stuff. And I think that's where I also got a lot more involved with the community. And then I joined later in Data Cloud, moved over there and about two years ago I started the team with the search team in Data Cloud and we had this idea of Coworker and I ended up working on the admin side. And today I own the Coworker setup experience as well as search manager. Mike: Oh, wow. I mean, all roads lead through Data 360, literally and figuratively. So, Parth, let's talk about that. I mean, for anybody that hasn't heard, what is Agentforce Coworker and what is it there to help with? Parth Shah: Yeah. So, Agentforce Coworker, it is your autonomous AI teammate and it's available in Salesforce and it's also going to be available in a lot of different services like Microsoft Teams, desktop, mobile, ChatGPT, Claude, and a lot more. Fundamentally, what it is is it's an AI assistant that knows your business from day one. It's already connected to all of your enterprise data, whether it's structured, unstructured, your opportunities, your cases, your accounts, all of that context that you have within Salesforce and then what's connected to Salesforce. And of course, it respects all the permissions when you do connect those systems. So, it's grounded in your context from the first prompt that you ask. Number two is it can also orchestrate a lot of your agents. It can also execute a lot of complex tasks so that way, it moves your work forward. In other ways, it takes action on your behalf and you can actually update your CRM using Coworker. And then lastly, we built that headless. So, what's really cool about this is yes, it's available in Salesforce, but now you'll be able to take that Salesforce experience and that data and the context that you've spent so m

    How Do Admins Set Up Agentforce Coworker in Salesforce

  8. Jun 18

    What are Security Essentials for Salesforce Admins

    Today on the Salesforce Admins Podcast, we talk to Laura Pelkey, Director of Customer Security Communications and Engagement, and Sabrina Simeroth, Product Manager for Security Center at Salesforce. Join us as we chat about security essentials for the summer and how Salesforce is helping admins protect their data. You should subscribe for the full episode, but here are a few takeaways from our conversation with Laura Pelkey and Sabrina Simeroth. Why admins are a target Security doesn't take a summer vacation. And while AI is helping all of us do more things faster than ever before, it's also helping hackers deliver new types of targeted attacks at scale. And as privileged users, admins are finding themselves in the crosshairs. Luckily, Salesforce is rolling out key security enhancements over the summer to help you protect your org. I sat down with Laura Pelkey and Sabrina Simeroth to talk about what threats are out there and how you can be prepared. MFA requirements to protect your credentials Because AI makes it easier than ever to imitate someone's writing style or even their voice, the biggest threats that Laura and her team are seeing are different variations of phishing attacks. In the end, it's all about getting someone's credentials and then using that access to do damage. That's why Salesforce is requiring all customers to use multi-factor authentication (MFA), as opposed to the gentle nudging we've done in the past. However, MFA can still be vulnerable to man-in-the-middle attacks, so admins and other privileged users will need to use a stronger phishing resistant MFA. Finally, Salesforce will require step-up authentication for users attempting a sensitive or unusual action, like exporting a large file. I don't have to tell you that these kinds of changes can often be met with resistance. Laura recommends framing things in terms of what they protect your users from. Does a salesperson really want a hacker to email everyone on their contact list from their account? It's not about making you jump through hoops—it's about protecting you from real risks. Security Center Essentials and Health Check give admins a central view We also checked in with Sabrina about how her team is trying to make it easier to get a handle on essential security configurations across the platform and what settings are most critical. Coming in July, the new Security Center Essentials will let you see everything in one place instead of having to wade through a bunch of permissions and toggles. Health Check will help you prioritize which changes will get you the biggest bang for your buck, and help you track your security posture over time. "It's all about allowing admins to navigate the security space in a way that helps to reduce the complexity and provide some guidance," Sabrina says. There's a lot more from Laura and Sabrina about security on Salesforce and what's coming next, so make sure to listen to the full episode. And don't forget to subscribe to the Salesforce Admins Podcast to catch us every Thursday. Podcast swag Salesforce Admins on the Trailhead Store Learn more Salesforce Help: Security-Related Product Updates to the Salesforce Platform: User Identity, Data Protection, and Access Controls Trailhead: Use Health Check to Scan Your Security Configurations   Admin Trailblazers Group Admin Trailblazers Community Group Social Laura on LinkedIn Sabrina on LinkedIn Salesforce Admins on LinkedIn Salesforce Admins on X Mike on Bluesky social Mike on Threads Mike on X   Full show transcript Mike Gerholdt: This week on the Salesforce Admins Podcast, we're talking security with Laura Pelkey and Sabrina Simeroth. The threat landscape is moving fast and with AI in the mix, attackers are getting better at targeting privileged users like Salesforce Admins. But in this episode, it isn't about fear, it's about readiness, trust, and the systems admins can put in place to protect our orgs. We'll cover MFA enforcement, phishing-resistant MFA, step-up authentication, and how Security Center Essentials gives admins a clearer view of the settings that matter most because today's admin isn't just managing features. They're designing secure, trusted systems that help businesses move forward. So, let's move forward with this podcast and get Laura and Sabrina on. So, Laura and Sabrina, welcome to the podcast. Laura Pelkey: Hello? Sabrina Simeroth: Thank you. Thanks for having us. Mike Gerholdt: Absolutely. Well, it's always good to talk security. I feel like I was watching the news the other day and they talk about kids when they go to school and then they have the summer off and there's that summer slump of information. I feel like maybe over the summer we kind of have a security slump because we're taking time off and we're going to water slides and watching tornadoes in the Midwest, but maybe I'm just crazy thinking about that. Laura, why don't you catch us up and tell us what's going on with security and some of the newest things in summer 26? Laura Pelkey: I would love to. And I was just going to say our catchphrase, which I feel like I repeat every time we do a podcast together and that security never sleeps even in the summer. Mike Gerholdt: Oh, yes. Right. That could also be a fun summer action film. Laura Pelkey: Yes. I would see it. Mike Gerholdt: I would. Laura Pelkey: Yeah. So, I mean, we're halfway through the year, which is crazy already. And I'd say in the last year we have seen the security landscape and the threat landscape shift tremendously. And especially, I mean, I think a lot of people at Salesforce and a lot of people who are listening are very aware of and use on a day-to-day basis, AI nowadays, which is great. It's a very powerful tool. But what we're seeing in the security landscape is that AI-driven cyber threats have emerged and hackers have really up-leveled their ability to create and execute targeted cyber attacks faster than ever before. So, it's kind of crazy the speed at which this is happening. And unfortunately, I think we're going to see their capabilities get better and better as these tools evolve. Mike Gerholdt: Well, that's not fair. We're supposed to use AI for good. Laura Pelkey: Yeah. Well, the good news is, so yes, I agree. The good news is that providers are now using the same AI models or better AI models if you're in the lucky groups to enhance the security of their platforms and products. So, now the playing field has really been evened out. Mike Gerholdt: Well, that's good. Laura Pelkey: Yeah. But we're in a really interesting time right now with cybersecurity and AI. Mike Gerholdt: I mean, I feel like everybody's trying to figure out AI and now that kind of only muddies the water of impersonating other people or the speed at which it can replicate good or bad effective use of, I don't know, text messages or different spoofing. Can you walk us through how does Salesforce leverage AI to proactively block the type of threats that you're seeing today? Laura Pelkey: Yeah. So, there are some really common threats that just across the industry we're seeing that AI is being used for. So, account takeovers and this is a really common one. This is where attacker might use AI to create a phishing campaign, which targets users and tries to get access to their account. And then once they're inside a user account, they can then utilize all of the privileges that that user has to continue carrying out their attack. So, it's really about getting credentials, finding creative ways to get around our existing solutions to get those and then get that user profile and exploit it. Mike Gerholdt: Yeah. I think one thing that you've pointed out in the past is identity-based social engineering. So, I'd love for you to kind of expand on what makes admins and some privileged users such high-value targets for that. Laura Pelkey: Yeah, that's a great question. So, identity-based social engineering is when attackers create very highly personalized phishing campaigns and this can be phishing. Traditionally, we saw that with email five years ago it was primarily email. Now we're seeing phishing campaigns and especially with the help of AI, attackers are conducting these campaigns over voice calls. So that's called vishing or voice phishing. And admins are such a appealing target for these attackers because they're privileged users, they have such a high level of privilege and they can do almost anything within their Salesforce org. And so, that persona in general is highly targeted by attackers because of their level of access. Mike Gerholdt: What would you suggest an admin listening to this do today to start just being ready for if that phone were to ring and it was a malicious actor on the other end? Laura Pelkey: Well, I mean, we always say use common sense. So, there are a lot of built-in protections that I can talk about within the Salesforce platform that will help protect admins, which is great and I'll talk about those in a minute. But if that ever happens, if you are an admin and you get a call from a number that you don't know, from a person that you don't know claiming to be your help desk or claiming to be even Salesforce in some cases and they're asking you to log into your Salesforce account for them so that they can help you do something, that's typically how these things are positioned, that kind of scenario is never going to legitimately happen. No one's going to call you or email you and send you a link and ask you to log into your Salesforce account ever. That's just not something that we do. So, look for red flags like that. And in general, whenever you're suspicious about something from a cybersecurity perspective, the best thing to do is disengage with whoever is trying to speak with you or engage with you and get you to do something and then hang up the phone, don't email back whatever it is and then

    What are Security Essentials for Salesforce Admins
See All (100)

4.7
out of 5
203 Ratings

About

The Salesforce Admins podcast features real-life Salesforce Admins, product managers, and community leaders who transform businesses, careers, and community with clicks, not code. This 20min (sometimes a bit more) weekly podcast hosted by Mike Gerholdt feature episodes to empower Salesforce Admins who are implementing Enterprise CRM solutions. There may be some (digital) confetti. For more than our most recent episodes, go to https://admin.salesforce.com/salesforce-admin-podcast.

Information

You Might Also Like