Organizations have several methods of accessing the Salesforce CRM application. Access can be gained from either the UI (using a web browser), the API (for example, using an integrated client application or the Apex Data Loader), a desktop client (for example, Salesforce for Outlook), or from a mobile client application.
Whenever a login attempt is made to Salesforce using any of these methods, the user's login request is authorized by the system using the following sequence of checks:
- Does the user's profile have any login restrictions?
- Is the user's IP address present in the list of trusted IP addresses?
- Has the user record previously been activated from this IP address?
- Does the user's web browser have a valid browser cookie from Salesforce stored?
The user is denied access to Salesforce CRM if their login attempt is not from...