Hello,

Salesforce communicated on the following release update, that will be enforced in the Winter 25 release: Adopt Updated Content Security Policy (CSP) Directives (Release Update)

The consequence is that the Genesys Cloud for Salesforce embedded client stops working when the release update is activated: the solution is, on Salesforce side, to add a new "Trusted URLs", with the URL that matches your region, like "*.mypurecloud.de"

Will Genesys communicate on this, and update the package to add the trusted URLs by default?

Thanks for posting this Bertrand.  Will be keen to see what feedback Genesys gives.  It sounds like SF admins can enable this now so curious if any org has had this done and what it's actually done to the widget.

Hello,

Salesforce communicated on the following release update, that will be enforced in the Winter 25 release: Adopt Updated Content Security Policy (CSP) Directives (Release Update)

The consequence is that the Genesys Cloud for Salesforce embedded client stops working when the release update is activated: the solution is, on Salesforce side, to add a new "Trusted URLs", with the URL that matches your region, like "*.mypurecloud.de"

Will Genesys communicate on this, and update the package to add the trusted URLs by default?

Hello,

Salesforce communicated on the following release update, that will be enforced in the Winter 25 release: Adopt Updated Content Security Policy (CSP) Directives (Release Update)

The consequence is that the Genesys Cloud for Salesforce embedded client stops working when the release update is activated: the solution is, on Salesforce side, to add a new "Trusted URLs", with the URL that matches your region, like "*.mypurecloud.de"

Will Genesys communicate on this, and update the package to add the trusted URLs by default?

Did Genesys ever respond to this?

We have the same issue and need it resolved

Hello,

Salesforce communicated on the following release update, that will be enforced in the Winter 25 release: Adopt Updated Content Security Policy (CSP) Directives (Release Update)

The consequence is that the Genesys Cloud for Salesforce embedded client stops working when the release update is activated: the solution is, on Salesforce side, to add a new "Trusted URLs", with the URL that matches your region, like "*.mypurecloud.de"

Will Genesys communicate on this, and update the package to add the trusted URLs by default?

Hello Dan,

I created a ticket to Genesys, they said they will come back with an update on this.

In the meantime, I found by accident that the documentation has been updated already.

Here: https://help.mypurecloud.com/articles/about-genesys-cloud-for-salesforce/

• Salesforce has updated the delivered CSP directives for Lightning pages, which can prevent the externally hosted fonts and images from loading. It can also prevent external websites from loading within an iframe on your Lightning pages. To prepare for this change, update your trusted URLs in Salesforce. For more information, see Adopt Updated Content Security Policy (CSP) Directives (Release Update). To successfully embed the client within Salesforce, administrators must add the Genesys Cloud region domains as the trusted URLs in Salesforce. For more information, see Change the region of your Genesys Cloud organization.

And here: https://help.mypurecloud.com/articles/change-the-region-of-your-genesys-cloud-organization/

They added some new details to "Add your Genesys Cloud region domains as trusted URLs in Salesforce".

You can follow the steps from this documentation and it should be enough.

Did Genesys ever respond to this?

We have the same issue and need it resolved

Hello,

Salesforce communicated on the following release update, that will be enforced in the Winter 25 release: Adopt Updated Content Security Policy (CSP) Directives (Release Update)

The consequence is that the Genesys Cloud for Salesforce embedded client stops working when the release update is activated: the solution is, on Salesforce side, to add a new "Trusted URLs", with the URL that matches your region, like "*.mypurecloud.de"

Will Genesys communicate on this, and update the package to add the trusted URLs by default?

Hello Dan,

I created a ticket to Genesys, they said they will come back with an update on this.

In the meantime, I found by accident that the documentation has been updated already.

Here: https://help.mypurecloud.com/articles/about-genesys-cloud-for-salesforce/

• Salesforce has updated the delivered CSP directives for Lightning pages, which can prevent the externally hosted fonts and images from loading. It can also prevent external websites from loading within an iframe on your Lightning pages. To prepare for this change, update your trusted URLs in Salesforce. For more information, see Adopt Updated Content Security Policy (CSP) Directives (Release Update). To successfully embed the client within Salesforce, administrators must add the Genesys Cloud region domains as the trusted URLs in Salesforce. For more information, see Change the region of your Genesys Cloud organization.

And here: https://help.mypurecloud.com/articles/change-the-region-of-your-genesys-cloud-organization/

They added some new details to "Add your Genesys Cloud region domains as trusted URLs in Salesforce".

You can follow the steps from this documentation and it should be enough.

Did Genesys ever respond to this?

We have the same issue and need it resolved

Hello,

Salesforce communicated on the following release update, that will be enforced in the Winter 25 release: Adopt Updated Content Security Policy (CSP) Directives (Release Update)

The consequence is that the Genesys Cloud for Salesforce embedded client stops working when the release update is activated: the solution is, on Salesforce side, to add a new "Trusted URLs", with the URL that matches your region, like "*.mypurecloud.de"

Will Genesys communicate on this, and update the package to add the trusted URLs by default?

Hello Dan,

I created a ticket to Genesys, they said they will come back with an update on this.

In the meantime, I found by accident that the documentation has been updated already.

Here: https://help.mypurecloud.com/articles/about-genesys-cloud-for-salesforce/

• Salesforce has updated the delivered CSP directives for Lightning pages, which can prevent the externally hosted fonts and images from loading. It can also prevent external websites from loading within an iframe on your Lightning pages. To prepare for this change, update your trusted URLs in Salesforce. For more information, see Adopt Updated Content Security Policy (CSP) Directives (Release Update). To successfully embed the client within Salesforce, administrators must add the Genesys Cloud region domains as the trusted URLs in Salesforce. For more information, see Change the region of your Genesys Cloud organization.

And here: https://help.mypurecloud.com/articles/change-the-region-of-your-genesys-cloud-organization/

They added some new details to "Add your Genesys Cloud region domains as trusted URLs in Salesforce".

You can follow the steps from this documentation and it should be enough.

Did Genesys ever respond to this?

We have the same issue and need it resolved

Hello,

Salesforce communicated on the following release update, that will be enforced in the Winter 25 release: Adopt Updated Content Security Policy (CSP) Directives (Release Update)

The consequence is that the Genesys Cloud for Salesforce embedded client stops working when the release update is activated: the solution is, on Salesforce side, to add a new "Trusted URLs", with the URL that matches your region, like "*.mypurecloud.de"

Will Genesys communicate on this, and update the package to add the trusted URLs by default?