Product Notice: Preparing for Salesforce's Change to Content Security Policy [Effective Starting May 17, 2024]

Summary

Salesforce’s upcoming Summer ‘24 release will introduce a breaking change that will impact Talkdesk functionality for accounts using the Talkdesk for Salesforce and Talkdesk for Service Cloud Voice (T4SCV) Connectors. This impact is caused by adjustments to the Content Security Policy (CSP) that will impede how Talkdesk Connectors are loaded when sourced externally from Salesforce. More details from Salesforce here.

Without immediate intervention, this upcoming Salesforce upgrade will make the following Talkdesk functionalities inoperable:  

  • Embedded Talkdesk Workspace in Talkdesk for Salesforce
  • Talkdesk CTI on Talkdesk for Salesforce
  • T4SCV Connector

Salesforce Summer ‘24 release schedule has this change set for the weekends of May 17, June 7, and June 14.

Why is this change being made?

Salesforce is updating CSP directives for Lightning pages, which controls what resources Lightening components, third-party APIs, and WebSocket connections can load. This change is being introduced with their Summer ’24 release to help prevent cross-site scripting (XSS) and other code injection attacks.

To know more about this change, check Salesforce Release Notes here.

Time & Duration

  • Salesforce will introduce the CSP adjustments with their Summer ‘24 Release (see here: Salesforce Summer '24 Release Notes). 
  • This will be a cohort rollout addressed on the following weekends: May 17, 2024, June 7, 2024 and June 14, 2024. More info here.

Impact

This impacts the integration functionality in different ways described below:

  • Talkdesk for Salesforce: The CTI will not be able to load, impacting all CTI-related capabilities;
  • Talkdesk for Salesforce: Talkdesk Embedded in Salesforce: the CTI nor the Workspace embedded will be able to load, impacting all Talkdesk functionality;
  • Talkdesk for Service Cloud Voice: The Talkdesk connector will not be able to load, impacting all Talkdesk functionality.

Action Required

To mitigate these impacts, Talkdesk URLs need to be added to the Trusted URLs list in Salesforce before June 3, 2024. To manually add the Trusted URLs to the Salesforce account: See Knowledge Base article.

If you've already included the Talkdesk Trusted sites in your Trusted URLs list within Salesforce, no further action is required.

Key Dates:

  • On May 20, 2024: Talkdesk will push the trusted URLs to all active sandboxes to allow customers to test and verify all is working correctly.
  • Before June 3, 2024: Customers should manually add the trusted URLs to the Salesforce account.
  • Between June 3 and June 6, 2024: Talkdesk will remotely push the trusted URLs to all the remaining production accounts before the Salesforce release dates to avoid any potential disruption.

Resources

We recommend following the Talkdesk Weekly Digest to stay informed on critical Talkdesk product alerts (learn more here).

All Articles ""
Please sign in to submit a request.