7/10/2026 · 6 min read
salesforceprofilespermission-setssecurityadminroadmap
Salesforce has unexpectedly canceled the planned retirement of permissions in profiles, originally slated for Spring '26. This backflip, attributed to customer feedback and lingering feature gaps, underscores the ongoing importance of Permission Sets for robust security architecture.
Salesforce's recent security strategy, marked by a rapid succession of mandatory updates and changing requirements, has caused significant frustration and confusion among its customer and partner community. The article explores why this critical security push feels so disjointed and its impact on user trust and operational planning.
Salesforce has officially halted multi-factor authentication (MFA) enforcement for all employee users until further notice, a significant pause in a major security mandate. The reason for this unexpected delay, which comes after some sandbox enforcement had already begun, remains undisclosed.
The article reveals that nearly 80% of Salesforce organizations have not fully transitioned from Profiles to a Permission Set-led security model, according to a recent survey. It delves into the persistent challenges and reasons why many orgs remain stuck in this legacy approach.