Salesforce runs one-hour global login cutover to Hyperforce today, August 3
The main development is that Salesforce is running a one-hour global login cutover to Hyperforce today, August 3, 2026, as part of a staged migration of login services. The company’s published cutover schedule shows today’s window expanding to 60 minutes per region, with permanence targeted later in August. Details are laid out in Salesforce’s global login cutover plan.
Hyperforce login migration hits a one-hour window on August 3
Today’s change is the third phase of the rollout, escalating from 15 and 30 minutes in July to one hour on August 3, before longer tests and a permanent switch later in the month. During each regional window, orgs that still authenticate via the global endpoints (login.salesforce.com and test.salesforce.com) will be routed through Hyperforce. Salesforce outlines the dates, durations, and regional local times in the login cutover schedule.
Who is most likely to feel the impact
Admins using Salesforce Express Connect (SEC) or strict IP allowlists that only trust first‑party instance traffic are the ones who typically notice these windows. If users still initiate SSO at the global login URLs rather than your org’s My Domain, the cutover can break the chain unless network rules permit the Hyperforce path. In practice, the fastest fix is to standardize sign‑in on your My Domain and confirm the right callbacks in your identity provider, as the cutover guidance recommends.
Immediate checks for SSO, integrations, and firewalls
What typically trips teams up are hard‑coded login URLs in legacy integrations, narrowly scoped firewall rules, and identity providers that only whitelist the pre‑migration callback path. Before and during today’s hour:
- Test user and SP‑initiated SSO flows from My Domain, not the global login page.
- Verify IdP redirect/ACS URLs and allowlists that reference login.salesforce.com or test.salesforce.com.
- Confirm SEC/IP‑allowlist policies permit Hyperforce login traffic during the window.
If anything fails only during the cutover and then clears, you’re almost certainly hitting a dependency on the global endpoints rather than your My Domain.
Email‑based login becomes default this month
Today’s cutover also connects to a broader set of login experience updates rolling out in August. Salesforce’s Summer ’26 notes confirm that “login with email” becomes the default experience at the global endpoints in August, which can affect saved credentials, automations, and browser‑assisted logins. The change is documented in the login experience updates, and it’s worth validating user communications and password manager guidance alongside your SSO posture.
Why this matters for reliability and incident response
In practice, moving authentication to Hyperforce reduces cross‑region dependencies and simplifies how Salesforce scales the login plane. For enterprise IT, the near‑term win is fewer surprises when traffic patterns shift under load. The trade‑off is short, scheduled disruption windows during August and the need to root out brittle assumptions-like scripts that hit the global login URLs directly or firewall rules that only trust historical paths-before the permanent switch later this month.
Share With Others
Platinum
