What is the trusted IP ranges?

Inside the range, no identity verification challenge; outside, challenged.

What is the profile login IP ranges?

Logins from any other IP address are denied.

Set per profile, per day of the week.

User can view the current page but can't take further action.

Helps prevent session hijacking.

Redirects the browser to the login page at timeout.

Org security controls, login restrictions and sessions | Platform Administrator Study Guide

Fact	Detail	Source
Trusted IP ranges	Inside the range, no identity verification challenge; outside, challenged	Trusted IP Ranges (opens in a new tab)
Profile login IP ranges	Logins from any other IP address are denied	Trusted IP Ranges (opens in a new tab)
Change network access	Requires Manage IP Addresses	Trusted IP Ranges (opens in a new tab)
Login hours	Set per profile, per day of the week	Login Hours (opens in a new tab)
Login hours end mid-session	User can view the current page but can't take further action	Login Hours (opens in a new tab)
Lock sessions to originating IP	Helps prevent session hijacking	Session Settings (opens in a new tab)
Force logout on session timeout	Redirects the browser to the login page at timeout	Session Settings (opens in a new tab)
Setup Audit Trail on screen	20 most recent setup changes	Setup Audit Trail (opens in a new tab)
Setup Audit Trail download	Complete history for the past 180 days	Setup Audit Trail (opens in a new tab)
MFA per user	Multi-Factor Authentication for User Interface Logins permission	MFA Enforcement (opens in a new tab)
Lost verification method	Admin generates a temporary verification code	MFA Enforcement (opens in a new tab)
Agent user access	Profile, permission sets, field-level security and sharing	Service Agent Access (opens in a new tab)