Salesforce.com is one of the most successful, business critical on-demand applications, which makes securely managing access to it of paramount importance.  Yet, unlike on-premise applications, Salesforce.com does not natively plug into traditional directories or identity and access management products, which introduces challenges for end-users, application administrators and IT. This paper focuses on the challenges of…