Source Namespace Prefix in Setup Audit Trail unintelligible

[René Görgens]

Hi Scott,

Can I request your help with understanding Setup Audit Trail Source Namespace Prefix for deployments made via IC/IntelliJ on:

27/02/2020 14:44:38 CET, Source Namespace Prefix: SocieteInfo (recent versions)

01/04/2020 11:33 CEST, Source Namespace Prefix: OCE (IntelliJ 2019.3, IC 2.0.9.5) (screenshot attached)

These were the only deployments I did in this period, not anomalies in a larger set.

I’m confused as to the meaning of these values, by what are they influenced?

Thanks a lot,

René

[Scott Wells]

Hi, René. I'm not 100% sure, but based on the following:

https://help.salesforce.com/articleView?id=c360config_using_the_audit_trail.htm&type=0

it sounds like perhaps that's the client identifier for the application which submitted the deployment request that effected those changes. For native Illuminated Cloud connections, the client ID is always "IlluminatedCloud2". I'm not 100% sure, but perhaps "OCE" is something derived from oclif, the CLI framework upon which the Salesforce CLI is based? If this project is configured to use an OAuth connection and a source format directory structure, all deployments would occur using the Salesforce CLI's force:source:deploy command, so that would explain it.

[René Görgens]

Hi Scott,

Thanks

The thing is, there is nothing special to what I do, these were native Illuminated Cloud connections (frankly I have no need of anything else at the moment). That’s why I’m wondering about these seemingly arbitrary values of Source Namespace Prefix.

How can my deployment on 27/02/2020 14:44:38 be related to ‘SocieteInfo’?

https://appexchange.salesforce.com/listingDetail?listingId=a0N3A00000FP1F8UAL

Of course I can test some more, I’ll do a deployment this week for sure, but these arbitrary values with native connections seem strange to me. Btw Salesforce security support couldn’t contribute any insights.

[René Görgens]

I did a quick test and it’s ‘OCE’ again instead of 'IlluminatedCloud2' (native IC)

‌

[Scott Wells]

I apologize but I'm honestly not sure then. I just ran some deployments against my own orgs and there's no value in that column for any of the deployment activity. This might be a question for Salesforce.

[René Görgens]

Thank you Scott

I was following up because I was uneasy not being able to explain these values in the Setup Audit Trail of a customer org. Will monitor this further and possibly raise again to SF security support.

[Scott Wells]

Okay, I'm going to resolve this from the IC side. If you do hear from Salesforce that it's something that IC is doing, don't hesitate to let me know.