Salesforce Spring '26: The 10 Features That Actually Matter
I spent the last few weeks digging through the Spring '26 release notes so you don't have to. Here are the 10 features that will actually change how you work.
Another release cycle, another wave of features to sift through. Salesforce Spring '26 landed in sandbox previews on January 9, with production rollouts hitting orgs between January 16 and February 20, 2026. Pre-release dev editions have been available since December 18, 2025, so some of you have already been poking around.
I spent the last few weeks digging through the release notes (yes, all of them) so you don't have to. Here are the 10 features from Spring '26 that I think will actually change how you work. No filler, no fluff. Just the stuff that matters.
1. Agentforce Builder with Canvas View (Beta)
This is probably the biggest single change in the release. Salesforce has consolidated the entire Agentforce building experience into one workspace. Previously, if you were building an agent, you were bouncing between Setup menus, testing tools, and deployment screens. Now it all lives in a single conversational workspace.
You can draft your agent using AI guidance, then switch to a document-like editor with autocomplete. If you prefer visual building, there's a low-code canvas. If you're a code-first person, there's a pro-code script view. All three approaches live in the same builder. You pick your style, and you can switch between them as you work.
Why you should care: If you've been putting off Agentforce because the building experience felt scattered, this removes that excuse. The unified workspace makes the whole process feel more natural. It's in Beta, so expect some rough edges, but the direction is clear.
2. Agentforce MCP Support (Beta)
Model Context Protocol (MCP) support is here, and it's a big deal for anyone building agents that need to talk to external systems. MCP is an open standard that lets AI agents connect to third-party tools in a standardized way. Think of it as a universal adapter for your agents.
The setup is straightforward. Go to Setup, register a new MCP server, and use the allowlist to pick which tools your agent can access. Admins have full control over what servers connect to the registry, which is exactly what you want in a production environment.
Why you should care: This opens the door to connecting Agentforce to practically anything. Internal tools, third-party APIs, custom services. Instead of building custom integrations from scratch, you register an MCP server and your agent can use it. If you're building anything beyond basic Salesforce-only agents, put this on your evaluation list.
3. Agentforce for Flow (GA)
This one moved from Beta to Generally Available, which means Salesforce is confident enough to stand behind it fully. AI can now draft record-triggered flows, scheduled flows, and screen flows for you. You describe what you want, and it generates a working flow.
I want to be clear about expectations here. This isn't going to replace your flow architects. What it does well is handle the boilerplate. Need a basic record-triggered flow that updates a field when certain criteria are met? Describe it in plain language and let the AI do the first draft. You'll still want to review and refine, but it cuts the initial build time significantly.
Why you should care: The GA status means you can use this in production without worrying about it disappearing in the next release. For admins who build a lot of similar flows, this is a real time saver. For consultants, it speeds up the discovery-to-delivery pipeline.
4. Complex Template Expressions for LWC (Beta)
LWC developers, this one's for you. Starting with API version 66.0, you can write JavaScript expressions directly in your LWC templates. If you've ever written a getter method just to concatenate two strings, you know exactly why this matters.
Previously, even something as simple as displaying a full name required a getter in your JS file. Now you can write that logic inline in the template. It's a small change on paper, but it adds up fast when you're building component-heavy pages.
Why you should care: Less boilerplate code means fewer files to maintain and fewer opportunities for bugs. Your JS files get cleaner because they only contain actual business logic, not trivial display formatting. This is Beta, so test thoroughly before rolling it into production components, but start building with it now to be ready when it goes GA.
5. Lightning Out 2.0 Enhancements
Lightning Out lets you embed Lightning components in external applications, and the 2.0 update fixes a pain point that's been bugging developers for a while. Complex namespaces with mixed casing now work properly. If you've ever tried to use a component like complexNs/lwcComponent in Lightning Out and hit cryptic errors, this release fixes that.
Why you should care: If you're embedding Salesforce components in external portals or applications, this removes a frustrating limitation. It's one of those fixes that affects a smaller audience, but for the people it affects, it's been a blocker.
6. The New Error Console
Salesforce has added a new Error Console that handles non-fatal errors in the background. Instead of stopping your work with a popup every time something goes wrong, errors get logged quietly. You can keep working and review them when you're ready. Fatal errors also get logged, which gives you a debugging history you didn't have before.
This is a quality-of-life improvement that sounds minor but changes the daily experience. Anyone who's been interrupted mid-flow by an error dialog that didn't even require immediate action will appreciate this.
Why you should care: For end users, fewer interruptions. For admins and developers, better error visibility. Having a persistent error log means you can spot patterns that individual error popups would never reveal. "Oh, that same component throws a non-fatal error every time someone opens the Opportunity page" is the kind of insight you'll actually get now.
7. Shield Experience Enhancements
If you're working with Salesforce Shield, the administration experience just got a lot better. All Shield products (Event Monitoring, Platform Encryption, Field Audit Trail, and Data Detect) are now accessible from a single, unified location. Before this, you were navigating to different Setup pages for each product. Now there's a guided setup with progress indicators that walks you through configuration.
Why you should care: Shield administration has historically been scattered and confusing, especially for admins who don't touch it every day. The unified interface reduces mistakes and makes it easier to ensure you've configured everything correctly. If you have Shield licenses and haven't fully set up all the features, this is a good time to revisit that.
8. Next-Gen Malware Scanning (Beta)
This one is especially relevant if you're running Experience Cloud portals. Files uploaded through the UI are now scanned for malware before the upload completes. Files uploaded through the API get scanned asynchronously and flagged if they're problematic. Downloads of flagged files are blocked entirely.
If you have a portal where external users upload documents (think customer support portals, partner communities, or application forms), this adds a layer of protection that was previously handled by third-party tools or custom solutions.
Why you should care: Security teams will love this. It's native, it doesn't require additional licenses beyond the Beta program, and it addresses a real risk. Experience Cloud portals that accept file uploads are an attack surface, and this closes it without bolt-on solutions. Get it enabled in your sandbox and test it with your file upload flows.
9. Flow Logging with Data Cloud
Flow troubleshooting just got a major upgrade. This new native capability lets you monitor, analyze, and troubleshoot flow executions using detailed runtime metrics. The data goes into Data Cloud, which means you can build dashboards, set up alerts, and do the kind of analysis that was impossible with the old debug logs.
One important caveat: this consumes Data Cloud credits. So you'll want to be strategic about which flows you monitor and how long you retain the data. Don't just turn it on for everything and forget about it.
Why you should care: If you've ever tried to debug a complex flow using the standard debug log, you know the pain. Logs that get truncated. Events that fire in unexpected orders. Variables that change in ways you can't trace. Flow Logging with Data Cloud gives you persistent, queryable execution data. Just watch your credit consumption.
10. Data 360 Connect REST API
Data Cloud gets new REST API endpoints for managing external connections, defining Data Model Objects (DMOs) and mappings, orchestrating ML model setups, and managing private network routes and OAuth credentials. This is a developer-focused feature that brings programmatic control to Data Cloud configuration.
If you're managing Data Cloud across multiple environments or automating your setup process, these APIs let you script what was previously point-and-click work. Think of it as the metadata API equivalent for Data Cloud configuration.
Why you should care: For orgs that are scaling their Data Cloud implementation, manual configuration doesn't cut it. These APIs enable CI/CD pipelines for Data Cloud, automated environment setup, and programmatic management of connections and mappings. If Data Cloud is part of your roadmap, start exploring these endpoints now.
What Should You Do Next?
Here's my recommended action plan for the next few weeks:
- Get into your sandbox. If your sandbox hasn't been upgraded yet, check the Salesforce Trust site for your instance's upgrade window. Don't wait for production to start testing.
- Prioritize what affects your users. The Error Console and Shield enhancements are quick wins that improve the daily experience. Agentforce features need more planning but have bigger long-term payoff.
- Test LWC template expressions if you have active LWC development. Start with non-critical components to get a feel for the syntax.
- Review your security posture. If you run Experience Cloud portals, enable the malware scanning Beta. If you have Shield, check out the new unified setup.
- Plan your Data Cloud strategy. Both Flow Logging and Data 360 Connect APIs point toward Data Cloud becoming more central to the platform. If you're not on Data Cloud yet, it's worth understanding why Salesforce keeps investing there.
Spring '26 isn't a flashy release. There's no single headline feature that changes everything overnight. But it's a solid, practical release that addresses real pain points. The Agentforce improvements make AI more accessible, the developer tools reduce boilerplate, and the security and administration features close gaps that have been open for too long.
The best releases are the ones that make your existing work easier. Spring '26 does that.