Newer Version Available

This content describes an older version of this product. View Latest

Setting up Environment Hub

Available in: Enterprise, Performance, and Unlimited Editions

User Permissions Needed
To set up and configure the Environment Hub: “Manage Environment Hub”
Follow these steps to set up Environment Hub for the first time.
  1. Choose which organization you want to use as your hub organization. This should be the organization most employees log in to regularly.
  2. Optionally, set up and deploy My Domain for your hub organization.

    You can enable Environment Hub and use it to create new organizations, without using My Domain. However, My Domain deployment is required to enable Single Sign-On or connect existing organizations to the hub.

    Note

  3. Contact salesforce.com support to get Environment Hub enabled for your hub organization.
  4. Once the feature is enabled, log in to your hub organization via the new My Domain URL.
  5. Edit profiles or permission sets to assign users access to specific features of Environment Hub..
    1. From Setup, click Manage Users | Profiles.
    2. Click Edit next to the appropriate profile.
    3. Select the settings you want to enable, on the profile editing page.
    4. Click Save.
    This table summarizes the settings for Environment Hub in the profile editing page.
    Section of Profile Settings for Environment Hub
    Custom App Settings Enable the Environment Hub custom app, so it’s available in the Force.com App menu.
    Connected App Access The Environment Hub connected app is for internal use only, and doesn’t need to be enabled for any profiles.
    Service Provider Access A new entry appears here automatically here whenever single sign-on is enabled in a member organization. Enabling access to a service provider allows single sign-on login access to the corresponding member organization.  The service provider is named "[OrganizationID] Service Provider" where [OrganizationID] is the organization ID of the member organization. Users who don’t have access to the service provider may see this message when attempting to log in via single sign-on: "User [UserID] does not have access to sp [ServiceProviderID]."
    Administrative Permissions The "Manage Environment Hub" permission controls which profiles can enable, create, and edit single sign-on configuration for member organizations. It also controls which profiles can create new organizations from the hub (via the Create Organization button).
    General User Permissions The "Connect Organization to Environment Hub" permission controls which profiles can connect existing organizations to the Environment Hub.
    Standard Object Permissions The "Hub Members" settings are used to control access to the Environment Hub Member entities as follows:
    • Read: The ability to view existing Hub Member records.
    • Create: This setting has no impact on the ability to create Hub Member records. That’s because record creation is handled either by connecting an existing organization or creating a new organization from the Environment Hub.
    • Edit: The ability to edit various fields on existing Hub Member records (Organization, Description, etc.). Note that not all fields are editable, as most are managed internally.
    • Delete: The ability to "disconnect" an organization from the Hub, and delete its corresponding Environment Hub Member record and Service Provider record (if SSO was enabled on the Member).
    • View All: The administrative ability to read all Hub Member records, regardless of who created them.
    • Modify All: The administrative ability to read, edit and delete all Hub Member records, regardless of who created them.
    Also, the "Hub Invitations" settings are used to manage connecting organizations to the Environment Hub. When enabling the "Connect Organization to Environment Hub" permission, Create, Read, Update, and Delete should also be enabled for the "Hub Invitations" object. Otherwise, it can safely be disabled.
  6. Define user mappings to configure which users should have single sign-on access to specific member organizations. For details, see: Enabling Single Sign-On and Defining a SSO User Mapping.

Once you’ve completed the above steps, any user with the appropriate profile can access the Environment Hub by clicking Environment Hub in the App menu. The types of actions a user can perform in the Environment Hub will depend on the settings in that user’s profile.