Creating Salesforce sites

You can use Salesforce sites to create public websites that directly integrate with your Salesforce organization. This makes pages available in Sage People to users without signing in.

Sage People uses Salesforce sites for:

  • External feedback for performance management

  • External assessors for competency assessments

  • Remote sites for PDFs

  • US Tax Forms

  • HCM and Recruit forms

  • Agency portals and candidate portals

Resolution

  1. Go to the Sites setup page:

    Go to Setup. In Quick Find, enter Sites.

  2. Salesforce creates a site domain automatically. It uses your organization's custom domain. If you haven't already, read and accept the Salesforce Sites Terms of Use. Then select Register My Salesforce Site Domain.

  3. Select New.

  4. Salesforce displays the Site Edit page.

    Screenshot: Site Edit page

  5. Field Description
    Site Label

    The name of the site as you want it to appear to end users. Required.

    For example:

    • HCM Forms

    • PDF

    • Recruit

    • External Reviews

    • US Tax Forms
    Site Name

    The API name of the site the system uses for reference by the Sales Sites API. The system creates this from the Site Label automatically. Required.
    Site Description An optional description of the purpose of the site.
    Site Contact

    The Sage People User responsible for receiving site-specific communication from site visitors and from Salesforce. Auto-populated.

    To change the default, select Site Contact Lookup Icon: Salesforce lookup to find and select a user.
    Default Record Owner

    The Sage People User who will own all new records that guest users create. Defaults to the Site Contact. Auto-populated.

    To change the default, select Default Record Owner Lookup Icon: Salesforce lookup to find and select a user.

    Default Web Address

    The suffix the system uses to create the unique URL for the site. This needs to indicate the purpose of the site: for example: forms, pdf, feedback, or similar.

    The complete URL is the web address that visitors use to access the site, such as:

    https://myorg.my.salesforce-sites.com/mysite

    Note: for US Tax Forms, the address suffix must be symmetry.
    Active Checkbox. Check to activate the site. You need to activate the site before you can use it, When you check this, the site activates when you save your changes.
    Active Site Home Page

    The name of the Visualforce page to act as the site's home page when the site is active. Select Active Site Home Page Lookup Icon: Salesforce lookup to find and select the Visualforce page for the site. Required.

    Default Visualforce pages are available for many product areas, for example:

    Product area Visualforce page Namespace
    PDF templates PDF fHCM2
    US tax forms SymmetryPostbackPage spustaxforms
    External feedback ExternalFeedback spperfmgmt
    Competency assessments AssessmentExternal fHCM2
    HCM forms Forms fHCM2
    Recruit forms Forms fRecruit
    Candidate portals ApplyJobList fRecruit
    Agency portals AgencyJobList fRecruit
    Inactive Site Home Page

    The name of the Visualforce page that displays when the site is inactive.

    Preset to InMaintenance. Leave unchanged unless you create a substitute. InMaintenance displays a standard message. Select Preview to view the page.
    Site Template The name of the Visualforce page providing the page layout and stylesheet for your site. Preset to SiteTemplate. Leave unchanged unless you create a substitute.
    Site Robots.txt A plain text file. The system prepares as Visualforce page typically, controlling which parts of the site web spiders and other web robots can access. Leave blank.
    Site Favorite Icon An icon appearing in the browser's address field when you visit the site. Leave blank.
    Analytics Tracking Code The tracking code for your site. Analytics services use this to track page request data. Leave blank.
    URL Rewriter Class The name of an Apex Class the system uses to rewrite URLs for your site. It substitutes user-friendly URLs for Salesforce URLs. Leave blank.
    Enable Feeds Checkbox. If you check this, the Syndication Feeds Related List displays. This lets you create and manage syndication feeds for users on your sites. Leave unchecked.
    Clickjack Protection Level

    The level of protection to apply to the content of your site. Controls the ability to hide malicious hyperlinks beneath legitimate selectable content.

    Defaults to Allow framing by the same origin only (we recommend this). Same-origin framing allows pages on the same domain, using the same protocol, to frame the site’s pages.

    Leave at the default setting unless you have a good reason to change it.

    Lightning Features for Guest Users

    Checkbox. If you check this, Guest Users can view features you made available exclusively through the Salesforce Lightning Experience interface. Candidate/Agency Sites don't require Lightning features. This setting opens a public API endpoint unnecessary for our sites. Uncheck.
    Enable Content Sniffing Protection Checkbox. Checking this forces the browser to use the information in the HTTP header Content-Type field, not the actual content of the response. Leave checked.
    Enable Browser Cross Site Scripting Protection

    Checkbox. Checking this enables the cross-site scripting filter built in to browsers (x-xss protection: 1) to stop pages from loading when it detects a cross-site scripting (XSS) attack. Leave checked.
    Referrer URL Protection

    Checkbox. If you check this, when loading assets or navigating outside Salesforce, the referrer header shows a truncated url, not the complete URL. This feature stops a referrer header revealing sensitive information like an org identifier that can be present in a full URL.
    Allow only required cookies for this site

    Checkbox. If you don’t enable the setting, the site allows all cookies, including required, functional, and advertising types. To allow required Salesforce-supplied cookies for the site only, select the checkbox. Leave unchecked unless you have a reason to change it.
    Redirect to custom domain

    Checkbox. If multiple custom domains serve the site, the system routes requests to the site’s primary custom URL. It does this only if it’s an HTTPS custom domain. Otherwise, it redirects requests to the first HTTPS custom domain associated with this site, in alphanumeric order. If no HTTPS custom domain serves the site, this option has no effect. Leave checked.
    Cache public Visualforce pages Checkbox. Caches your site’s Visualforce pages in the user's browser to reduce page load times. Leave checked.
    Guest Access to the Support API Checkbox. If you check this, the Support API is accessible to guest users. Leave unchecked.

  6. Select Save.

For more information about these sites, see the Salesforce help article: Salesforce help: Salesforce Sites.

Depending on the product area and site function, the site can require further configuration. This is to enable site functionality and public access.

Configuration step Forms PDF Feedback External assessors US Tax Forms Agency or candidate portals
Configure Visualforce page access Yes Yes Not required Yes Yes Yes
Configure Apex class access Yes Not required Not required Not required Yes Not required
Configure guest user access Yes Yes Yes Yes Not required Yes
Add a Remote Site Not required Yes Not required Not required Not required Not required
Add the site URL to the package configuration page Not required Yes Yes Not required Yes Not required

 

Refer to the related setup topics for each product area for further information about these steps.