Environment Hub Best Practices

These guidelines can help you use the Environment Hub effectively.

• The Environment Hub connected app is for internal use only. You don’t need to enable it for any profiles. Unless advised by Salesforce, don’t delete the connected app or adjust its settings.
• Choose the organization that most employees log in to regularly as your hub organization.
• Set up My Domain for each member organization, in addition to the hub organization.
• Edit profiles or permission sets to assign users access to specific features of the Environment Hub. Some key settings are listed below.
  • The Environment Hub custom app must be enabled for it to appear in the Force.com App menu.
  • “Manage Environment Hub” is required to create organizations or configure single sign-on (SSO) access. Assign this permission only to admin users, because it is powerful functionality.
  • “Connect Organization to Environment Hub” is required to add member organizations to the hub.
  • Service Provider Access must be enabled for each member organization to which you want to allow SSO access.
  For details of all the profile settings, see: Set Up the Environment Hub.
• Decide on a strategy for enabling SSO access based on your organization’s security requirements. You can then choose which combination of the three SSO methods (explicit mapping, Federation ID, or custom formula) to use for your specific needs. For more information, see Enabling Single Sign-On.
• Because each member organization is a standard object (of type EnvironmentHubMember), you can modify its behavior or access it programmatically. For example, you can create custom fields, set up workflow rules, or define user mappings and enable single sign-on using the API, for any member organization.
• SSO doesn’t work for newly added users or for SSO user mappings defined in a sandbox organization. Only add users, edit user information, or define SSO user mappings in the parent organization for the sandbox.