My Domain login policies
Key Takeaway
To require production users to log in through your My Domain login URL, select "Prevent login from https://login.salesforce.com and https://welcome.salesforce.com" in the "Routing and Policies" section of the My Domain Setup page. The same option also blocks logins through the org's instanced URL, such as https://usa77.salesforce.com.
My Domain gives your org its own login URL, such as https://MyDomainName.my.salesforce.com. By default, users can also log in through other URLs, such as https://login.salesforce.com. The My Domain login policy lets an admin require that users and SOAP API integrations log in through the My Domain login URL instead. Requiring it adds a layer of security, because each company's My Domain name is unique.
Ways to log in to an org
All orgs get a My Domain by default. The My Domain name becomes the subdomain in the org's login URL. In a production org, the My Domain login URL has the format https://MyDomainName.my.salesforce.com.
Unless an admin restricts it, users can log in with any of these URLs:
- The My Domain login URL
https://login.salesforce.com, one of the default Salesforce login URLs- The org's instanced URL, such as
https://InstanceName.salesforce.com