{"id":20360,"date":"2021-10-08T01:20:42","date_gmt":"2021-10-08T01:20:42","guid":{"rendered":"https:\/\/test.twopurpose.com\/?p=20360"},"modified":"2024-05-22T06:58:39","modified_gmt":"2024-05-22T06:58:39","slug":"salesforce-multifactor-authentication-faq","status":"publish","type":"post","link":"https:\/\/test.twopurpose.com\/en\/blog\/2021\/salesforce-multifactor-authentication-faq\/","title":{"rendered":"Salesforce multifactor authentication - FAQ"},"content":{"rendered":"
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

From 1 February 2022, Salesforce is going to make multifactor authentication mandatory to access the application. In this article, we answer the most frequently asked questions so that you are well prepared for this important change.<\/strong><\/p>\n

 <\/strong><\/p>\n

Why does Salesforce choose multifactor authentication?<\/b><\/h4>\n

As the number of digital threats increases, so does the focus on security. And that is a good thing!<\/span><\/p>\n

A first step in security is preventing unauthorised access to IT systems. Using only a username and password is actually no longer possible anno 2021. Passwords are too often shared, 'leaked' or easily guessed by powerful computers. That is why Salesforce is going to make multifactor authentication mandatory from 1 February 2022. That means you have to identify yourself in at least two ways before you are logged in. For example, think of entering a password as well as a code from an authentication app on your mobile phone.<\/span><\/p>\n

 <\/span><\/p>\n

What does multifactor authentication mean?<\/b><\/h4>\n

This means proving in more than one way that you are really the one trying to log in. A password is the first 'factor' (something you <\/span>knows<\/b>), a numerical code via your mobile phone is a second 'factor' (something you <\/span>has<\/b>). This is also known as two-step verification.<\/span><\/p>\n

 <\/span><\/p>\n

As a Salesforce customer, am I required to use multifactor authentication?<\/b><\/h4>\n

Salesforce is going to enforce this from 1 February 2022. So yes. It would be wise to activate and communicate this to users before 1 February 2022. Activation can be done incrementally if desired, for example by profile.<\/span><\/p>\n

 <\/span><\/p>\n

Are there any alternatives?<\/b><\/h4>\n

You could use Single Sign On. That means that with a valid login to Microsoft or Google, you can also immediately access Salesforce without being asked for an additional login. Single Sign On can be set up fairly quickly by a Salesforce administrator in consultation with the administrator of the Microsoft or Google environment. Make sure that logging in to this environment is also really secure by setting up multi-factor authentication there too, otherwise the backdoor will still be open!<\/span><\/p>


<\/span><\/p>\n

Does multifactor authentication apply to all Salesforce accounts?<\/b><\/h4>\n

No, this only applies to users who want to work in the Salesforce application via a browser. Accounts used for an integration (e.g. with website or financial system) are excluded. It also excludes users of a community (Experience Cloud).<\/span><\/p>\n

 <\/span><\/p>\n

What ways for authentication are there?<\/b><\/h4>\n

Salesforce offers three options for the additional authentication:<\/span><\/p>\n