- [Bug]: Resolved an issue where a sync fails to execute due to the integration user missing the permission to read the DataStorageMB resource limit.
Salesforce Spring '26 Release
The enosix team has completed testing to ensure compatibility of the latest enosix apps with the Salesforce Spring ‘26 release. Below are the key details of the testing process and outcomes:
Testing Highlights
-
Regression Testing:
- Tests were executed to validate functionality and compatibility.
-
Products Tested:
- Sync for Salesforce v1.3.4
- Surface v2.8.1
- SDK v1.7, including the Cloud-UI
- Link v6.1.0
-
Mobile App Compatibility:
- The Surface app was tested in the latest version of the Salesforce Mobile app.
Testing Scope and Outcomes
-
- Validated real-time data synchronization between Salesforce and SAP.
- Ensured consistent performance across core use cases, including object synchronization and data accuracy.
-
- Confirmed compatibility with Sales app.
- Verified Lightning components function in the Salesforce Mobile app.
-
- Verified ability to configure a material/product and update price on quote line item using Cloud-UI in CPQ.
Results
- Compatibility Confirmed: All tested products are fully compatible with Salesforce Spring ‘26.
- No Critical Issues Identified: Testing revealed no blockers or critical issues.
The enosix team remains committed to ensuring our solutions deliver seamless integration and superior performance. For any questions or support, please contact our team.
Salesforce Root Certificate & TLS Certificate Changes (2026)
Salesforce has announced several certificate-related changes in 2026 that may generate questions from customers. enosix has reviewed these changes and assessed the impact across our product line. No customer-facing disruptions have been observed to date, and our architecture minimizes exposure to these changes. Below is a summary of each change and how it relates to enosix products.
1. Root Certificate Transition to DigiCert Global Root G2 (Effective February 5, 2026)
Salesforce has transitioned to issuing certificates chained from the DigiCert Global Root G2. Any certificate issued by Salesforce after February 5, 2026 will be chained to this new root in most environments. Salesforce recommends that organizations adopt the Mozilla Root Certificate Set to future-proof their trust stores.
Impact on enosix Products
-
Salesforce Apps (Surface, Transact, Commerce, SDK, Sync): enosix integrations with SAP are built on Named Credentials and Callouts, not direct API client connections. Salesforce manages the outbound TLS trust chain for Named Credential callouts, so no customer action is required for these products. Self-signed certificates and CA-signed certificates that you upload to your org are not in scope for this change.
-
enosix Link: The enosix Link appliance has been patched to include the latest root certificate updates, including DigiCert Global Root G2. Customers should review the Link release announcements and ensure they are running the latest version. Customers not using the stable (automatic update) channel should update to the latest release to ensure continued compatibility.
-
enosix Connect: The enosix Connect appliance has been patched to support the latest root certificate updates. Customers should review the Connect release announcements and ensure they are running the latest version. Customers not using the stable (automatic update) channel should update to the latest release to ensure continued compatibility.
2. Deprecation of Dual-use Certificates (Effective June 15, 2026)
Effective June 15, 2026, Chrome will mandate a strict separation between server and client authentication certificates ("dual-use" ban). This impacts customers using mutual TLS (mTLS) with Salesforce, requiring that client certificates are not sourced from the same public roots used for website trust.
Impact on enosix Products
enosix products do not use mTLS for connectivity between Salesforce and SAP. This change has no impact on enosix integrations. Customers who have implemented custom mTLS configurations outside of enosix products should review the Salesforce-supported CAs for Client Auth EKUs and audit their mTLS usage independently.
3. Certificate Lifespan Reductions (Starting March 15, 2026)
To align with industry standards, Salesforce is reducing maximum TLS server certificate lifespans in phases:
| Date | Maximum Lifespan |
|---|---|
| March 15, 2026 | 200 days |
| March 15, 2027 | 100 days |
| March 15, 2029 | 47 days |
This means certificates will be renewed more frequently. Some CA vendors have already begun issuing 200-day certificates.
Impact on enosix Products
-
Salesforce Apps (Surface, Transact, Commerce, SDK, Sync): Certificate renewal is managed entirely by Salesforce for Named Credential connections. No customer action is required.
-
enosix Link & Connect: Appliance updates include support for more frequent certificate rotations. Customers should stay current on the latest releases to ensure their appliances handle renewed certificates seamlessly. Customers not using the stable (automatic update) channel should regularly check for and apply the latest updates.
Summary
| Change | Effective Date | enosix Impact | Customer Action |
|---|---|---|---|
| Root Certificate → DigiCert Global Root G2 | Feb 5, 2026 | No disruption observed | Link & Connect: update to latest release if not on stable channel |
| Dual-use Certificate Ban (mTLS) | June 15, 2026 | No impact (enosix does not use mTLS) | None for enosix products |
| Certificate Lifespan → 200 days | March 15, 2026 | No impact for Named Credential integrations | Link & Connect: stay current on releases |
Additional Resources
- Salesforce Certificate Rotation FAQ
- DigiCert Root Certificates
- Impact on MuleSoft Applications — for customers using the enosix MuleSoft Connector, review this Salesforce article regarding trust store updates for MuleSoft.
For any questions or support, please contact the enosix team.
Connect 1.5.0
Addressing issues from G5 root certificate updates in SAP BTP, See : 3566727 - Root Certificate Replacement in the SAP BTP, Cloud Foundry Environment SAP note. As part of the rollout it was identified that the new G5 root certificates were not trusted by the Connect Console or Connect Application base image. This update addresses the certificate issues preventing authenticating to Cloud Foundry subaccount instances for deployment and Connect instances from reading destinations from environments with the G5 certificate update.
It is REQUIRED to re-build there packages to incorporate the 1.5.0.5001 Base Version patch into the latest package version and re-deploy. If you need assistance please contact support for help in upgrading your instances.
- [Update]: Fixed issues with new BTP G5 certificates that were effecting deployments and accessing destinations.
Note: The G5 certificate update can also effect the SAP Cloud Connector, See: 3583377 - Cloud Connector will fail to connect to subaccount SAP note for details.
Link 6.1.0
This release combines the improvements and corrections of multiple internal versions into a single public release. The following new features and bug fixes are now available:
Enhancements
- Delegated Authorization Expiration Control
The Delegated Authorization Token feature now allows you to specify how long a delegated authorization token should remain valid using the newexpirationSecondsquery parameter. This provides more control for testing and for environments with stricter security requirements. By default, tokens will expire after one hour if a duration is not set. For full usage details, see the delegated authorization documentation. - Enhanced SAML2 Configuration Handling
You can now disable SAML2 for specific backend connections by setting the propertysaml2=disabledin your destination configuration. This is an improvement over previous workarounds that required URL parameters. See the destination configuration documentation for more information.
Bug Fixes
- Improved Error Handling When Processing Backend Data
Addressed an issue where Link could encounter an error if it attempted to process incomplete or malformatted backend data. With this release, error handling is more robust and will log appropriate debug information, ensuring uninterrupted operation. - Billing Plan Retrieval via API Proxy
Resolved a problem with calls for RFCs that prevented successful retrieval of billing plan information (the SD_GET_PERIO function) when called through the API Proxy.
enosix Cloud UI 3.1.7 (Initial Release)
enosix Cloud UI is an embedded iframe React application framework for delivering SAP-driven user experiences inside any host application. enosix Cloud UI enables customers to embed Variant Configuration (VC) in external applications while keeping the UI modular, maintainable, and aligned with enosix integration patterns.
Highlights
- Provides a consistent, embedded VC experience across host applications
- Improves implementation speed through standardized UI and integration patterns
- Delivers iterative enhancements through versioned releases
Get it here: v3.1.7
Surface 2.8.1
Bug Fix
- Corrected defect where custom fields were not being displayed.
Instructions for configuring custom fields can be found here
Link 6.0.2
Bug Fix
- Corrected defects on the landing page.
Instructions on disabling the landing page are found here
enosix @arnold AI Agent for Salesforce 1.1.0
enosix @arnold AI Agent for Salesforce 1.1.0
📦 DOWNLOAD NOW: Get the enosix @arnold AI Agent for Salesforce directly from the Salesforce AppExchange 👉 https://go.enosix.com/agentforce-app 📦
-
[Feature]: Enhanced Sales Order Status Search By Purchase Order(PO)
-
If a Purchase Order (PO) is linked to multiple sales orders, the system will display a list of all related sales documents. You can click on any sales document link to open it in Surface and view details.
-
If the PO is linked to a single sales order, the system will automatically display all order item details for that document.
-
You can also search directly by sales order number to view specific order item details.
-
Salesforce Winter '26 Release
Salesforce Winter '26 Compatibility Testing
The enosix team has completed extensive testing to ensure compatibility of the latest enosix apps with the Salesforce Winter ‘26 release. Below are the key details of the testing process and outcomes:
Testing Highlights
-
Regression Testing:
- A total of 140 regression scenarios were executed to validate functionality and compatibility.
-
Products Tested:
- Sync for Salesforce v1.3.4
- Surface v2.8
- SDK v1.7, including the Apex code generator and Cloud-UI
- Agentforce v1.0
- Link v6.0.1
-
Mobile App Compatibility:
- The Surface app was tested in the latest version of the Salesforce Mobile app.
Testing Scope and Outcomes
-
- Validated real-time data synchronization between Salesforce and SAP.
- Ensured consistent performance across core use cases, including object synchronization and data accuracy.
-
- Confirmed compatibility with Sales, Service and Console apps.
- Verified Lightning components function in the Salesforce Mobile app.
- Validated Lightning components work in experience sites.
-
SDK v1.7 + Apex Code Generator + Cloud-UI:
- Verified code generation capabilities and deployment to Salesforce Winter ‘26 orgs.
- Verified ability to configure a material/product and update price on quote line item using Cloud-UI in CPQ.
Results
- Compatibility Confirmed: All tested products are fully compatible with Salesforce Winter ‘26.
- No Critical Issues Identified: Testing revealed no blockers or critical issues.
The enosix team remains committed to ensuring our solutions deliver seamless integration and superior performance. For any questions or support, please contact our team.