Salesforce Spring '26 Highlights

Spring '26 is two stories at once. The Agentic Enterprise rebrand makes the new naming official. Sales Cloud becomes Agentforce Sales, Service Cloud becomes Agentforce Service, Field Service becomes Agentforce Field Service, and Salesforce ships net-new agents across every cloud to back it up. Underneath the brand work, the platform pushes through a long list of infrastructure cutovers: mandatory email-domain verification, shorter TLS certificate lifespans, the end of legacy host-name redirections, and IPv6 rolling out behind the scenes. The functional surface looks tactical. The readiness work is strategic.

What's new across the platform

• Setup with Agentforce (Beta). A conversational agent inside Setup creates custom objects, troubleshoots user access from the Setup Audit Trail, builds flows directly in Flow Builder, and surfaces Health Check scores. Beta in 12 languages. Requires the Use Setup with Agentforce and Execute Prompt Templates permissions.
• Sales, Service, and Field Service rename to Agentforce. Functionality is unchanged on day one, but UI strings, docs, and licensing artifacts switch over throughout the release. Every customer deck, SOW, and training asset that names the old clouds needs an audit.
• Agentforce Sales agents go broad. Inbound Lead Generation, Qualification, Lead Nurturing, and Sales Management ship across the cloud. Prospecting Agents support multiple agents per org. The Agentforce Sales App appears in ChatGPT (Beta) and Gemini (Beta) so sellers can update records from outside Salesforce.
• Service picks up SIP voice and the Agentforce Service Assistant. Salesforce Voice now routes calls over SIP instead of PSTN only. The Service Assistant drafts service plans grounded in messaging-session and voice-call records, in the rep's preferred language. Agentforce IT Service adds CMDB-based change conflict detection.
• Agentforce Vibes for developers. The Vibes IDE and the VS Code extension support agent projects, Lightning apps, and React apps (Multi-Framework Beta) from templates or natural-language prompts. Data SDK + GraphQL handle record I/O. Content Read-Only and Metadata Experts MCP servers preload guardrails.
• Apex: `RunRelevantTests` Beta, cursors GA, agent actions GA. Deployments run only the tests that touch the changed code. Annotate test classes with @IsTest(critical=true) to force-run regardless. Cursor.fetch() lets queueable jobs do batch-Apex-class workloads with variable batch sizes, capped at 100 million cursor rows per 24 hours. Annotated Apex REST and @AuraEnabled methods register as agent actions.
• Lightning Web Components catch up. Complex template expressions are GA (ternaries, member access, method calls). Lightning Types lets you declare structured data that drives both LWC and Agentforce-rendered UI. Screen flows invoke LWC local actions without a server round-trip. The TypeScript rollout is complete.
• API version 66.0 lands. DataWeave supports nested SOQL. WITH USER_MODE queries can run as the Automated Process User. Apex classes used as invocable-action parameters now require a public no-arg constructor.
• Pipeline Inspection adds Sales Methodology (March 2026). A configurable sales methodology so reps qualify deals consistently and ops can report on win-rate by methodology stage.
• MuleSoft for Flow upgrades. Natural-language flow building, AI-built templates GA, named-credential auth for third-party connectors, and MuleSoft for Flow: IDP GA for unstructured document processing.
• Salesforce Foundations ships Email Builder Lite (batch sends to Sales contacts and leads), audience-segment definition from list views, and Tableau dashboards in the Marketing app.
• Backup & Recover Next is now a native app with daily automated backups and in-org restore.

What's new for the infrastructure team

• TLS certificate lifespans shrink in three steps. From the current 398-day cap to 200 days on Mar 15, 2026, 100 days on Mar 15, 2027, and 47 days on Mar 15, 2029. Stop using certificate pinning, audit every mTLS endpoint, and switch to automated rotation.
• Email-domain verification is mandatory. Every sending domain requires an active DKIM key or an Authorized Email Domains entry. New domains added after Feb 25, 2026 verify immediately. Sandboxes enforce on Apr 14, 2026. Production enforces on May 4, 2026.
• Legacy host-name redirections end. The Update References to Legacy Host Names Release Update is enforced. Replace any hard-coded legacy URLs with your My Domain URL.
• Instanced URLs in API traffic end in Winter '27. Start the cutover plan now.
• IPv6 rolls out. Government Cloud first in early 2026, with at least 60 days advance notice for each subsequent stage. Plan dual-stack allowlists or move to domain allowlists / SNI.
• Hyperforce expands to 17 countries. New Data 360, Marketing Cloud, Platform, MuleSoft, and Tableau regions in Italy and Sweden. Hyperforce public IP ranges now include inbound addresses. Hyperforce Assistant updated to find hard-coded references.
• Database Encryption is GA in all regions. Real-Time Event storage is on by default. Field Audit Trail tracks 60 to 200 fields. Data Detect scans 100 objects with unlimited fields.

What's deprecated

• Salesforce Functions is no longer available for new purchase or renewal. Plan the exit to Heroku, MuleSoft, External Services, or Apex callouts.
• Salesforce for Outlook retires December 2027. Move teams to Outlook Integration plus Einstein Activity Capture.
• Microsoft EWS retirement affects Lightning Sync, Outlook Integration, and Salesforce for Outlook.
• Connected app creation is disabled by default in all new orgs. SAML connected apps must migrate to External Client Apps. AppExchange partners must follow new security requirements for both.
• Open CTI is scheduled for retirement. Service Cloud Voice replaces it.
• Legacy Chat is being retired. Move to Enhanced Chat or Messaging.
• Public TLS certificate rotation announcements via the Certificate Changes Trailblazer Community will stop for first-party production orgs (90+ day notice when the date is set).
• Connect Your Companion Org Data to Agents via the Agentforce Data Library has been removed.
• Work Summaries for Case (Beta) is being retired.

What's still in beta

• Setup with Agentforce.
• Salesforce Multi-Framework for React apps inside Salesforce (sandbox and scratch orgs only, English default).
• Content Read-Only MCP Server and Metadata Experts MCP Server.
• `RunRelevantTests` test level.
• LWC base components for empty states and illustrations.
• Agentforce Sales App in ChatGPT and Gemini.
• Agentforce Builder (the new agent IDE).
• Voicemail Drop for Outbound Calls.

Write the Spring '26 readiness memo now. Plot the certificate, email-verification, IPv6, and legacy-URL timelines across 2026, name an owner for each, and circulate it before Feb 25, 2026 so nothing catches you in production.