Assigning an App to an Organiztation
Overview
OverviewThe Global Settings app allows centralized management of which Flosum Cloud Apps are assigned to your Organizations. When a Salesforce org is linked, you can select the apps to assign to it. This article shows you how to assign an app to an Organization.
Backup and Archive App
When assigning the Backup and Archive app, you also have to specify the storage and encryption key to use with it. See the Encryption Keys section below for more information about how Flosum uses encryption keys to protect your data.
Assigning an App
Access Global Settings
From any Flosum Cloud App, click the App Switcher icon at the top of the left sidebar menu.
Click Global Settings.
The Global Settings app will open in a new tab.
Global Settings can also be accessed by directly logging in using your region's Global Settings URL. See the following article for login instructions.
Assign Apps
Unchecking apps in the Assign Apps dialog will not remove them. To remove an assigned app, use the Remove App option. See the following article for instructions.
Click Organizations from the left sidebar.
Click the Three Vertical Dots menu at the right end of the Organization you wish to assign apps to.
Click Assign Apps.
Check the checkbox next to the Apps you want to assign.
Backup and Archive Storage and Encryption
The Backup and Archive app requires you to specify a storage device for the organization's backup and archive data. If you check the Backup and Archive app to be added, the Assign Apps dialog will display a Storage selection and an Encryption Key field.
Storage
Flosum provides secure, built-in storage for every tenant. For customers with specific requirements or existing cloud infrastructure, you can also connect your own AWS S3 or Azure Blob storage, giving you control over where your data resides. Refer to the following articles for instructions on connecting storage.
Encryption Key
See the Encryption Keyssection below for more information about how Flosum uses encryption keys to protect your data.
Reassigning Backup and Archive
When reassigning the Backup and Archive app to an organization previously associated with it, you cannot specify a new Storage or Encryption Key. The app will use the existing settings. To use a different storage or encryption key, delete the organization and add it again.
Click the Backup and Archive checkbox.
The Storage dropdown and Encryption Key textbox will be displayed.
Click the Storage dropdown.
Select the storage to use for this organization.
The Encryption Key is generated automatically.
(Optional) Click the Refresh icon next to the textbox to generate a new key, or enter your own, using a combination of uppercase and lowercase letters, numbers, and special characters up to 16 characters long.
Store the Encryption Key in a secure location.
Store the encryption key securely, as it cannot be retrieved later.
Encryption Keys
Flosum ensures that all data stored by the Backup & Archive app for each Salesforce organization is securely encrypted with a unique Encryption Key. This key can be up to 16 characters long and is automatically generated when the Backup & Archive app is first added to an organization. Clicking the Refresh icon generates a new key, although users can also input their own. For optimal security, use a random mix of the following characters:
Uppercase letters (A-Z)
Lowercase letters (a-z)
Digits (0-9)
Special symbols (!, @, #, $, %, ^, &, *, +, etc.)
Data Protection
All data is protected in transit using TLS encryption, ensuring secure communication. Once stored, AES-256 encryption safeguards data at rest, providing robust security. Backup files and associated metadata are encrypted to the same level, maintaining their confidentiality and integrity. This comprehensive approach ensures end-to-end data security across the entire pipeline.
Flosum Hosted Tenants
The encryption key in your Flosum Cloud App database is securely stored and protected by AWS Key Management Service (KMS). This service uses a 32-byte (256-bit) AES-256 key, ensuring that the encryption key itself is protected before any encryption operations take place. This method provides an extra layer of defense against key exposure.
Self-Hosted Tenants
With the recent Summer 2025 update to Flosum Cloud Apps, encryption keys are now securely stored in your self-hosted database using a 32-byte (256-bit) AES-256 key.
When migrating to the new Flosum app version, you will need to create a key by following these steps.
Generate 32-byte base64 key:
openssl rand -base64 32Add key to Docker Compose:
LOCAL_ORGANIZATION_ENCRYPTION_KEY=<key>Update the Flosum app to complete the migration.
Last updated
Was this helpful?