It’s that time again - Summer has sprung for our northern hemisphere neighbours, and so has the Salesforce Summer '25 Release! If you want the handpicked most exciting features for business users and admins, check out our recent blog, where we break down the highlights and what they mean for you!
But today we've curated our pick of the Summer '25 Enforced Updates you can't miss.
Need help navigating these updates or have questions about how they’ll impact your system? Contact us today for expert guidance and support!
Enforced Updates in Salesforce Summer ’25 Release
The following items may impact some clients. For those who are impacted, please check the date by which they will need to be reviewed and rectified. Enrite recommends creating a sandbox to enable the relevant changes and performing the necessary regression tests.
Enable Secure Roles Behavior and Update Sharing Group References in Sandboxes
What’s Changing?
Salesforce is tightening record access rules in sandbox environments when digital experiences are enabled. The sharing group once known as "Roles and Subordinates" is now called "Roles and Internal Subordinates", and it no longer includes external users by default. This means records are automatically secured from unintended access.
This change applies to Lightning Experience and Salesforce Classic (not available in all orgs) in Enterprise, Performance, Unlimited, and Developer editions.
What Does This Mean?
This update protects your data from accidental exposure to the wrong audience. It also simplifies the process, no more manual updates or using the Convert External User Access wizard. But it does require dev/admin effort to find and fix any outdated references before this becomes mandatory.
➡️For technical details, see this link.
Review and Update Settings to Capture Leads from LinkedIn
What’s Changing?
LinkedIn is retiring the legacy Ads Lead Sync APIs, which many teams use to automatically sync leads from LinkedIn Lead Gen Forms into Salesforce. To keep this integration working, you’ll need to disconnect your LinkedIn account, enable the setting to use LinkedIn Lead Sync APIs with Lead Forms, and then reconnect your account.
This applies to Lightning Experience in all editions with Sales Cloud.
What Does This Mean?
If this isn’t done by May (Summer ’25), LinkedIn leads will stop syncing to Salesforce. Any leads submitted during downtime won’t be captured automatically, you’ll need to import them manually.
The new sync method also requires two-factor authentication, so make sure your LinkedIn admin is ready to help during the setup.
➡️For technical details, see this link.
Verify SAML Integrations
What’s Changing?
Salesforce is upgrading its SAML framework, the technology that supports single sign-on (SSO) and single logout features. This affects how users log in using identity providers like Okta, connected apps, or through Experience Cloud.
Salesforce will enforce this change in Summer ’25, applying it to Lightning Experience and Salesforce Classic (not available in all organisations).
What Does This Mean?
If your SSO setup isn’t ready for the upgrade, users might be unable to log in once it’s enforced. That could lead to unexpected service interruptions.
Upgrade your sandbox to Summer ’25 and test your SAML integrations to avoid issues. Use this time to verify that your login flows still work as expected. If problems come up, contact Salesforce Support and resolve them before your production instance is upgraded.
➡️For technical details, see this link.
Salesforce Platform API Versions 21.0 Through 30.0 Retirement
What’s Changing?
Salesforce is retiring API versions 21.0 to 30.0 for SOAP, REST, and Bulk APIs in Summer ’25. Any app or integration calling those versions will fail with an error saying the endpoint is deactivated.
This applies to all API-enabled orgs, including Professional (with API access), Enterprise, Performance, Unlimited, and Developer editions, across both sandboxes and scratch orgs.
What Does This Mean?
If your apps are still using any version from 21.0 to 30.0, they’ll stop working when Summer ’25 hits. To avoid disruption, upgrade all your apps and integrations to a current API version before then.
Go to Setup > Release Updates, look for Salesforce Platform API Versions 21.0 Through 30.0 Retirement, click Get Started, and then choose Enable Test Run to reject calls to the API versions scheduled for retirement. To disable the enforcement, click Disable Test Run.
➡️For technical details, see this link.
Auto-Enabled Changes in Salesforce Summer ’25 Release
These updates are automatically enabled. No setup needed, but it’s worth knowing what’s changed.
Enable ICU Locale Formats
What’s Changing?
Salesforce is replacing the old Oracle JDK locale formats with the newer ICU locale formats. This affects how dates, times, currencies, addresses, names, numbers, and the start day of the week display in your org. Organisations with Apex code and Visualforce pages using API version 45 or higher will automatically have the change enabled in Summer ’25.
What Does This Mean?
You’ll get a more consistent and internationally standard experience across Salesforce, making it easier to work globally and integrate with other apps that use ICU standards. If your org hasn’t switched yet, you can enable this manually to get ahead of the change.
➡️For technical details, see this link.
Update References to Legacy Host Names
What’s Changing?
Legacy host name redirections (for non-enhanced *.force.com URLs) are being retired. Redirects already ended in most orgs in Winter ’25, and they will be disabled in production and demo orgs in Winter ’26 unless you opt out. This update becomes mandatory in Spring ’26, when redirects will be turned off permanently.
What Does This Mean?
If you’re still using legacy host names, now’s the time to update them to prevent disruptions. You can temporarily maintain redirections during the Winter ’26 upgrade by adjusting your My Domain settings, but this won't delay final enforcement in Spring ’26.
➡️For technical details, see this link.
Key Salesforce Change to Know About
This update isn’t part of the Salesforce Summer ’25 release but is important for you to be aware of.
Microsoft Updates Salesforce Outlook Integration 2024/2025
What’s Changing?
Microsoft is making security updates that will affect the Salesforce Outlook integration. They’re phasing out older authentication methods (like the Exchange token) and moving to a newer standard called Nested App Authentication (NAA). If users do not take action, they may lose access to the integration.
What Does This Mean?
Your team must take action to keep the Salesforce Outlook integration working.
- Microsoft 365 Admins (not Salesforce Admins) need to make a few changes.
- The easiest way is to use something called the Admin Consent Flow, which updates access for all users automatically.
- If nothing is done, users might lose access, and they'll see a warning banner in Outlook that can't be turned off.
We suggest reaching out to your M365 Admin soon to get this sorted before Microsoft fully rolls out the changes.
➡️For technical details, see this link.
How to Move Forward?
If you think the Summer '25 release may affect your setup or wish to get ahead, reach out to us as soon as possible. We can review your environment and take action or provide advice to address any issues. To contact us, please raise a ticket in our portal.
Also, consider joining the Release Readiness Trailblazers group for more information, or sign up for the Salesforce Release Readiness Live Webinars to stay updated.
📢 Make the Most of Your Remaining Budget
As the end of the financial year approaches, some departments may find themselves with a remaining budget to allocate. If that’s the case, now’s the time to act as unused funds often don’t carry over and can impact next year’s allocation. It’s a great time to consider pre-purchasing Customer Success hours or partnering with us for a project.
It’s a smart way to make the most of this year’s budget while securing valuable support for the year ahead.
Support the Ride for Education for Refugees
We’d love to share a cause close to our hearts: Muzafar Ali has just begun a 4,000km ride from Maleny to Adelaide to raise awareness and support for refugee-led education through Cisarua Learning. This incredible charity now supports 8 schools, 130 teachers, and over 2,000 students across Afghanistan, Indonesia, and Thailand.
You can follow his journey or lend your support here:
👉 rideforeducation.com
👉 cisarualearning.com