SlideShare a Scribd company logo
Architecting Multi-Org Solutions
Developers
Safe Harbor
 Safe harbor statement under the Private Securities Litigation Reform Act of 1995:

 This presentation may contain forward-looking statements that involve risks, uncertainties, and assumptions. If any such uncertainties materialize or if
 any of the assumptions proves incorrect, the results of salesforce.com, inc. could differ materially from the results expressed or implied by the forward-
 looking statements we make. All statements other than statements of historical fact could be deemed forward-looking, including any projections of
 product or service availability, subscriber growth, earnings, revenues, or other financial items and any statements regarding strategies or plans of
 management for future operations, statements of belief, any statements concerning new, planned, or upgraded services or technology developments
 and customer contracts or use of our services.

 The risks and uncertainties referred to above include – but are not limited to – risks associated with developing and delivering new functionality for our
 service, new products and services, our new business model, our past operating losses, possible fluctuations in our operating results and rate of growth,
 interruptions or delays in our Web hosting, breach of our security measures, the outcome of intellectual property and other litigation, risks associated
 with possible mergers and acquisitions, the immature market in which we operate, our relatively limited operating history, our ability to expand, retain,
 and motivate our employees and manage our growth, new releases of our service and successful customer deployment, our limited history reselling
 non-salesforce.com products, and utilization and selling to larger enterprise customers. Further information on potential factors that could affect the
 financial results of salesforce.com, inc. is included in our annual report on Form 10-Q for the most recent fiscal quarter ended July 31, 2012. This
 documents and others containing important disclosures are available on the SEC Filings section of the Investor Information section of our Web site.

 Any unreleased services or features referenced in this or other presentations, press releases or public statements are not currently available and may
 not be delivered on time or at all. Customers who purchase our services should make the purchase decisions based upon features that are currently
 available. Salesforce.com, inc. assumes no obligation and does not intend to update these forward-looking statements.
Rajesh Madhawarayan
Technical Solution Architect


Richard Vanhook
Senior Technical Solution Architect
Informal Poll

 Who currently works in a Multi-Org environment?
 Who’s an Architect?
 Administrator?
 IT Manager or Exec?
 Company has less than $500 mil revenue?
 Over $500 mil?
 Over $5 billion?
Agenda

 • Ingredients
 • Share
 • Cross Org Data
 • Integrate
 • Login
 • Just-in-Time (JIT) Provisioning
Multi-Org Ingredients




         Hub & Spoke     Share




            Login       Integrate
Agenda

 • Ingredients
 • Share
 • Cross Org Data
 • Integrate
 • Login
 • Just-in-Time (JIT) Provisioning
Sharing Data Across Orgs


            Hub                     Hub




     (1) Hub Broadcast     (2) Spoke Aggregation
Salesforce to Salesforce (S2S)




 • Replicates data from one org to another
 • Native to Force.com, data never leaves the platform
 • Originally designed to share data with partners (and still is)
 • Practical, cheap option to enable sharing across multiple orgs
 • No external middleware required
Easy, use
Moving data from one                           Salesforce to
org to another – how                            Salesforce.
   do we do that?




                           Bad Architect!
                       It’s not that simple!
Salesforce to Salesforce (S2S)

 • S2S is not for sharing data to an entity external to salesforce.com
   platform
 • Not a ‘true’ middleware substitute – It wont perform translations,
   transformations and validations. You still have to do them in Apex
 • Does not enrich data from 3rd party sources
 • Not a replacement for serious ETL use cases
 • S2S does not have an SLA. So latency must be accounted in your
   architecture for transferring & sharing parent – child records
Hub




                    Hub                                                Spoke
   Account Object                                                         Account Object
Name Phone                  After             S2S                      Name Phone
                                     S2S                S2S     Data
                           Insert            Connec-
Acme   (800) 123-4567               Config             Config          Acme    (800) 123-4567
                          Trigger              tion

                             1         2        3         4
Demo: Hub Broadcast
Hub




                   Spoke                                                    Hub
User Object                User Shadow                                            User Shadow
 Name           After       Name                   S2S                             Name
               Insert                     S2S                S2S     Data
                                                  Connec-
 Richard      Trigger       Richard      Config             Config                 Richard
                                                    tion


                  1            2           3         4         5
Demo: Spoke Aggregation
S2S replicates data
What if I don’t want to replicate data?
Agenda

 • Ingredients
 • Share
 • Cross Org Data
 • Integrate
 • Login
 • Just-in-Time (JIT) Provisioning
Cross Org Data (XOrg)

 •   Share data across orgs without replicating data!
 •   One org designated Hub; Spokes are invited (similar to S2S)
 •   Spokes contain “proxy” objects created from Hub “sync”
 •   Proxy objects (Foo__y) can be queried or referenced in Apex
 •   Pilot Spring ’13, GA Summer ’13 (Safe Harbor)
 •   Notable limitations: Custom Objects only; Unsupported field
     types: Currency, Geolocation (beta), Lookup Relationship, Picklist, Picklist (Multi-
     Select), Text Area (Encrypted), Text Area (Long), Text Area (Rich)
Demo: Cross Org Data
Agenda

 • Ingredients
 • Share
 • Cross Org Data
 • Integrate
 • Login
 • Just-in-Time (JIT) Provisioning
External System Integration

Not talking about “how” you integrate (the APIs, tools, etc)

 Most common issue: do you
 integrate with the Hub or each           Data      Hub

 individual Spoke?
                              Data
 Considerations
   Maintenance
   Data Stewardship
External System Integration


                                   Lead


                        REST API
                                          Hub
Demo: External System Integration
Agenda

 • Ingredients
 • Share
 • Cross Org Data
 • Integrate
 • Login
 • Just-in-Time (JIT) Provisioning
Login through Single Sign-On (SSO)
Term                    Definition
Identity Provider (IdP) Server that authenticates user and generates the
                        SAML assertion
Assertion               XML elements in a SAML token that contain user
                        credentials
Service Provider (SP) System that trusts the IdP user information and
                        provides access to the Service
My Domain               Custom URL for an org
Federation ID           Org unique user identifier
Single Sign-On (SSO)
                                                          Federation ID:
                                                          john.smith

                                   Hub
                                     IdP
                                                                                Federation ID:
                                                                                john.smith
                                                                           SP




             Reminder: IdP = Identity Provider, SP = Service Provider
Demo: Multi-Org SSO
That was simple…

You set up the Hub, Spokes and then
      create users in each org
How many of you think setting
up Multi-Org SSO was simple?
How about?


Create the user once in Hub, then
 automatically create in Spokes
Agenda

 • Ingredients
 • Share
 • Cross Org Data
 • Integrate
 • Login
 • Just-in-Time (JIT) Provisioning
Just-in-Time (JIT) Provisioning (Winter ‘13 GA)

 • Enable “Service Provider SAML Attributes”




 • Users can now be created on the fly (“lazy load”)
 • JIT existed prior to Winter ‘13, but not across orgs
 • User fields are mapped accordingly
Demo: Multi-Org JIT Provisioning
Agenda

 • Ingredients
 • Share
 • Cross Org Data
 • Integrate
 • Login
 • Just-in-Time (JIT) Provisioning
More at #DF12

Building an Enterprise MDM Strategy
Thursday 10:30am Moscone Center West 2007

Single or Multi-Org: What's Right for My Deployment?
Thursday 10:30am Moscone Center West 3024

Driving Multi-Org Collaboration with S2S
Thursday 11:30am Moscone Center West 3006/3008
Rajesh Madhawarayan                  Richard Vanhook
Technical Solution Architect   Senior Technical Solution Architect
Architecting Multi-Org Solutions

More Related Content

PPT
Salesforce Integration
PPTX
Salesforce integration best practices columbus meetup
PPTX
Salesforce Integration Pattern Overview
PPTX
Salesforce Integration Patterns
PPTX
Deep dive into Salesforce Connected App
PDF
A comprehensive guide to Salesforce Org Strategy
PPTX
Salesforce Cross-Cloud Architecture
PPTX
Introducing the Salesforce platform
Salesforce Integration
Salesforce integration best practices columbus meetup
Salesforce Integration Pattern Overview
Salesforce Integration Patterns
Deep dive into Salesforce Connected App
A comprehensive guide to Salesforce Org Strategy
Salesforce Cross-Cloud Architecture
Introducing the Salesforce platform

What's hot (20)

PDF
Lwc presentation
PDF
Introduction to the Salesforce Security Model
PPTX
Salesforce Pardot basics
PPTX
Dreamforce14 Multi Org Collaboration Architecture
PPTX
Salesforce Security Best Practices for Every Admin
PDF
Best Practices with Apex in 2022.pdf
PDF
Two-Way Integration with Writable External Objects
PPTX
Introduction to lightning Web Component
PPTX
Admin Webinar—An Admin's Guide to Profiles & Permissions
PPTX
Commerce Cloud 101
PPTX
Salesforce admin training 1
PPTX
Integrating with salesforce
PPTX
Salesforce Sharing Architecture
PDF
Lightning web components - Episode 1 - An Introduction
PDF
Salesforce overview
PDF
LWC Episode 3- Component Communication and Aura Interoperability
PDF
Replicate Salesforce Data in Real Time with Change Data Capture
PDF
Architect day 20181128 - Afternoon Session
PDF
Decluttering your Salesfroce org
PDF
Salesforce Admin 201-certification Notes
Lwc presentation
Introduction to the Salesforce Security Model
Salesforce Pardot basics
Dreamforce14 Multi Org Collaboration Architecture
Salesforce Security Best Practices for Every Admin
Best Practices with Apex in 2022.pdf
Two-Way Integration with Writable External Objects
Introduction to lightning Web Component
Admin Webinar—An Admin's Guide to Profiles & Permissions
Commerce Cloud 101
Salesforce admin training 1
Integrating with salesforce
Salesforce Sharing Architecture
Lightning web components - Episode 1 - An Introduction
Salesforce overview
LWC Episode 3- Component Communication and Aura Interoperability
Replicate Salesforce Data in Real Time with Change Data Capture
Architect day 20181128 - Afternoon Session
Decluttering your Salesfroce org
Salesforce Admin 201-certification Notes
Ad

Viewers also liked (20)

PDF
Salesforce.com Org Migration Overview
PPTX
Multiorg Collaboration Using Salesforce S2S
PDF
7 common problems with salesforce data migration
PDF
Blurring the Boundaries Between Salesforce Orgs
PPTX
SMS Magic for Salesforce Workflows - Key to Automated Business Communication
KEY
Amberbuzz
PPTX
Navi Mumbai Salesforce DUG meetup on integration
PPTX
Integrating The Cloud - How to integrate Salesforce
PDF
Strategies for Training End Users How To Use Salesforce
PDF
15 Tips on Salesforce Data Migration - Naveen Gabrani & Jonathan Osgood
PDF
Secure Salesforce: External App Integrations
PDF
Top 5 ETL Tools for Salesforce Data Migration
PDF
Environment Hub
PPT
Salesforce Data Structures
PDF
Technical App Innovators Webinar (January 18, 2017)
PDF
A Focus on Salesforce1 Platform: Customizing and Multi-org Architecture
PPTX
Enterprise Architecture Salesforce
PPTX
Salesforce Multitenant Architecture: How We Do the Magic We Do
PPTX
Data model in salesforce
PPTX
Salesforce com-architecture
Salesforce.com Org Migration Overview
Multiorg Collaboration Using Salesforce S2S
7 common problems with salesforce data migration
Blurring the Boundaries Between Salesforce Orgs
SMS Magic for Salesforce Workflows - Key to Automated Business Communication
Amberbuzz
Navi Mumbai Salesforce DUG meetup on integration
Integrating The Cloud - How to integrate Salesforce
Strategies for Training End Users How To Use Salesforce
15 Tips on Salesforce Data Migration - Naveen Gabrani & Jonathan Osgood
Secure Salesforce: External App Integrations
Top 5 ETL Tools for Salesforce Data Migration
Environment Hub
Salesforce Data Structures
Technical App Innovators Webinar (January 18, 2017)
A Focus on Salesforce1 Platform: Customizing and Multi-org Architecture
Enterprise Architecture Salesforce
Salesforce Multitenant Architecture: How We Do the Magic We Do
Data model in salesforce
Salesforce com-architecture
Ad

Similar to Architecting Multi-Org Solutions (20)

PDF
Standardizing Identity Provisioning with SCIM
PPTX
N2N - ERP Integration Services Showcase
PPTX
Connectivity for a Smarter Planet
PDF
What’s New in IBM Connections 4.5 and IBM Connections Content Manager
PPTX
20111031 KMWorld 2011 Applying the Social Business Roadmap to Your Organization
PDF
Single Sign-On Best Practices
PDF
Identity in an API Economy KuppingerCole Webinar Sponsored by Layer 7
PDF
We4IT LCTY 2013 - Social Girl - Social Communications Strategy and the IBM Sa...
PDF
03.09.10 Stn Event Intro
PDF
Taking a Pragmatic Look at the Salesforce Security Model
PPTX
Patterns of Cloud Applications Using Microsoft Azure Services Platform
PDF
ID301 - What’s Coming in IBM Connections
PPTX
Atlanta Salesforce UG 2/23/2012: Release overview deck (spring '12)
PPTX
Brasil Roadshow
PDF
Cloud Computing by Dindo Fernando
PDF
SIEM evolution
PDF
MS TechDays 2011 - Cloud Computing with the Windows Azure Platform
PDF
IBM Connect 2013 - AD405
DOCX
Srs sso-version-1.2-stable version
PPTX
SPS- Share Point 2010 and Windows Azure
Standardizing Identity Provisioning with SCIM
N2N - ERP Integration Services Showcase
Connectivity for a Smarter Planet
What’s New in IBM Connections 4.5 and IBM Connections Content Manager
20111031 KMWorld 2011 Applying the Social Business Roadmap to Your Organization
Single Sign-On Best Practices
Identity in an API Economy KuppingerCole Webinar Sponsored by Layer 7
We4IT LCTY 2013 - Social Girl - Social Communications Strategy and the IBM Sa...
03.09.10 Stn Event Intro
Taking a Pragmatic Look at the Salesforce Security Model
Patterns of Cloud Applications Using Microsoft Azure Services Platform
ID301 - What’s Coming in IBM Connections
Atlanta Salesforce UG 2/23/2012: Release overview deck (spring '12)
Brasil Roadshow
Cloud Computing by Dindo Fernando
SIEM evolution
MS TechDays 2011 - Cloud Computing with the Windows Azure Platform
IBM Connect 2013 - AD405
Srs sso-version-1.2-stable version
SPS- Share Point 2010 and Windows Azure

More from Salesforce Developers (20)

PDF
Sample Gallery: Reference Code and Best Practices for Salesforce Developers
PDF
Maximizing Salesforce Lightning Experience and Lightning Component Performance
PDF
Local development with Open Source Base Components
PPTX
TrailheaDX India : Developer Highlights
PDF
Why developers shouldn’t miss TrailheaDX India
PPTX
CodeLive: Build Lightning Web Components faster with Local Development
PPTX
CodeLive: Converting Aura Components to Lightning Web Components
PPTX
Enterprise-grade UI with open source Lightning Web Components
PPTX
TrailheaDX and Summer '19: Developer Highlights
PDF
Live coding with LWC
PDF
Lightning web components - Episode 4 : Security and Testing
PDF
Lightning web components episode 2- work with salesforce data
PDF
Migrating CPQ to Advanced Calculator and JSQCP
PDF
Scale with Large Data Volumes and Big Objects in Salesforce
PDF
Modern Development with Salesforce DX
PDF
Get Into Lightning Flow Development
PDF
Integrate CMS Content Into Lightning Communities with CMS Connect
PDF
Introduction to MuleSoft
PDF
Modern App Dev: Modular Development Strategies
PPTX
Dreamforce Developer Recap
Sample Gallery: Reference Code and Best Practices for Salesforce Developers
Maximizing Salesforce Lightning Experience and Lightning Component Performance
Local development with Open Source Base Components
TrailheaDX India : Developer Highlights
Why developers shouldn’t miss TrailheaDX India
CodeLive: Build Lightning Web Components faster with Local Development
CodeLive: Converting Aura Components to Lightning Web Components
Enterprise-grade UI with open source Lightning Web Components
TrailheaDX and Summer '19: Developer Highlights
Live coding with LWC
Lightning web components - Episode 4 : Security and Testing
Lightning web components episode 2- work with salesforce data
Migrating CPQ to Advanced Calculator and JSQCP
Scale with Large Data Volumes and Big Objects in Salesforce
Modern Development with Salesforce DX
Get Into Lightning Flow Development
Integrate CMS Content Into Lightning Communities with CMS Connect
Introduction to MuleSoft
Modern App Dev: Modular Development Strategies
Dreamforce Developer Recap

Architecting Multi-Org Solutions

  • 2. Safe Harbor Safe harbor statement under the Private Securities Litigation Reform Act of 1995: This presentation may contain forward-looking statements that involve risks, uncertainties, and assumptions. If any such uncertainties materialize or if any of the assumptions proves incorrect, the results of salesforce.com, inc. could differ materially from the results expressed or implied by the forward- looking statements we make. All statements other than statements of historical fact could be deemed forward-looking, including any projections of product or service availability, subscriber growth, earnings, revenues, or other financial items and any statements regarding strategies or plans of management for future operations, statements of belief, any statements concerning new, planned, or upgraded services or technology developments and customer contracts or use of our services. The risks and uncertainties referred to above include – but are not limited to – risks associated with developing and delivering new functionality for our service, new products and services, our new business model, our past operating losses, possible fluctuations in our operating results and rate of growth, interruptions or delays in our Web hosting, breach of our security measures, the outcome of intellectual property and other litigation, risks associated with possible mergers and acquisitions, the immature market in which we operate, our relatively limited operating history, our ability to expand, retain, and motivate our employees and manage our growth, new releases of our service and successful customer deployment, our limited history reselling non-salesforce.com products, and utilization and selling to larger enterprise customers. Further information on potential factors that could affect the financial results of salesforce.com, inc. is included in our annual report on Form 10-Q for the most recent fiscal quarter ended July 31, 2012. This documents and others containing important disclosures are available on the SEC Filings section of the Investor Information section of our Web site. Any unreleased services or features referenced in this or other presentations, press releases or public statements are not currently available and may not be delivered on time or at all. Customers who purchase our services should make the purchase decisions based upon features that are currently available. Salesforce.com, inc. assumes no obligation and does not intend to update these forward-looking statements.
  • 3. Rajesh Madhawarayan Technical Solution Architect Richard Vanhook Senior Technical Solution Architect
  • 4. Informal Poll Who currently works in a Multi-Org environment? Who’s an Architect? Administrator? IT Manager or Exec? Company has less than $500 mil revenue? Over $500 mil? Over $5 billion?
  • 5. Agenda • Ingredients • Share • Cross Org Data • Integrate • Login • Just-in-Time (JIT) Provisioning
  • 6. Multi-Org Ingredients Hub & Spoke Share Login Integrate
  • 7. Agenda • Ingredients • Share • Cross Org Data • Integrate • Login • Just-in-Time (JIT) Provisioning
  • 8. Sharing Data Across Orgs Hub Hub (1) Hub Broadcast (2) Spoke Aggregation
  • 9. Salesforce to Salesforce (S2S) • Replicates data from one org to another • Native to Force.com, data never leaves the platform • Originally designed to share data with partners (and still is) • Practical, cheap option to enable sharing across multiple orgs • No external middleware required
  • 10. Easy, use Moving data from one Salesforce to org to another – how Salesforce. do we do that? Bad Architect! It’s not that simple!
  • 11. Salesforce to Salesforce (S2S) • S2S is not for sharing data to an entity external to salesforce.com platform • Not a ‘true’ middleware substitute – It wont perform translations, transformations and validations. You still have to do them in Apex • Does not enrich data from 3rd party sources • Not a replacement for serious ETL use cases • S2S does not have an SLA. So latency must be accounted in your architecture for transferring & sharing parent – child records
  • 12. Hub Hub Spoke Account Object Account Object Name Phone After S2S Name Phone S2S S2S Data Insert Connec- Acme (800) 123-4567 Config Config Acme (800) 123-4567 Trigger tion 1 2 3 4
  • 14. Hub Spoke Hub User Object User Shadow User Shadow Name After Name S2S Name Insert S2S S2S Data Connec- Richard Trigger Richard Config Config Richard tion 1 2 3 4 5
  • 16. S2S replicates data What if I don’t want to replicate data?
  • 17. Agenda • Ingredients • Share • Cross Org Data • Integrate • Login • Just-in-Time (JIT) Provisioning
  • 18. Cross Org Data (XOrg) • Share data across orgs without replicating data! • One org designated Hub; Spokes are invited (similar to S2S) • Spokes contain “proxy” objects created from Hub “sync” • Proxy objects (Foo__y) can be queried or referenced in Apex • Pilot Spring ’13, GA Summer ’13 (Safe Harbor) • Notable limitations: Custom Objects only; Unsupported field types: Currency, Geolocation (beta), Lookup Relationship, Picklist, Picklist (Multi- Select), Text Area (Encrypted), Text Area (Long), Text Area (Rich)
  • 20. Agenda • Ingredients • Share • Cross Org Data • Integrate • Login • Just-in-Time (JIT) Provisioning
  • 21. External System Integration Not talking about “how” you integrate (the APIs, tools, etc) Most common issue: do you integrate with the Hub or each Data Hub individual Spoke? Data Considerations  Maintenance  Data Stewardship
  • 22. External System Integration Lead REST API Hub
  • 23. Demo: External System Integration
  • 24. Agenda • Ingredients • Share • Cross Org Data • Integrate • Login • Just-in-Time (JIT) Provisioning
  • 25. Login through Single Sign-On (SSO) Term Definition Identity Provider (IdP) Server that authenticates user and generates the SAML assertion Assertion XML elements in a SAML token that contain user credentials Service Provider (SP) System that trusts the IdP user information and provides access to the Service My Domain Custom URL for an org Federation ID Org unique user identifier
  • 26. Single Sign-On (SSO) Federation ID: john.smith Hub IdP Federation ID: john.smith SP Reminder: IdP = Identity Provider, SP = Service Provider
  • 28. That was simple… You set up the Hub, Spokes and then create users in each org
  • 29. How many of you think setting up Multi-Org SSO was simple?
  • 30. How about? Create the user once in Hub, then automatically create in Spokes
  • 31. Agenda • Ingredients • Share • Cross Org Data • Integrate • Login • Just-in-Time (JIT) Provisioning
  • 32. Just-in-Time (JIT) Provisioning (Winter ‘13 GA) • Enable “Service Provider SAML Attributes” • Users can now be created on the fly (“lazy load”) • JIT existed prior to Winter ‘13, but not across orgs • User fields are mapped accordingly
  • 33. Demo: Multi-Org JIT Provisioning
  • 34. Agenda • Ingredients • Share • Cross Org Data • Integrate • Login • Just-in-Time (JIT) Provisioning
  • 35. More at #DF12 Building an Enterprise MDM Strategy Thursday 10:30am Moscone Center West 2007 Single or Multi-Org: What's Right for My Deployment? Thursday 10:30am Moscone Center West 3024 Driving Multi-Org Collaboration with S2S Thursday 11:30am Moscone Center West 3006/3008
  • 36. Rajesh Madhawarayan Richard Vanhook Technical Solution Architect Senior Technical Solution Architect