Salesforce: Multi-factor authentication

Updated on
January 13, 2023

Get a free security audit today

I accept the terms and conditions

Review and enable Salesforce MFA options:

a. In Salesforce Setup, navigate to "Security" and select "Multi-Factor Authentication"

b. Review the available MFA options, such as Security Token, SMS-based authentication, or third-party authentication apps.

  1. c. Enable the MFA options that are appropriate for your organization.

Set up and configure your MFA options:

a. For Security Token: distribute the security tokens to all users and ensure they know how to use them.

b. For SMS-based authentication: configure the settings for sending authentication codes to users' mobile phones.

  1. c. For Third-party authentication apps: follow the instructions provided by the app to configure the settings and ensure that the users have the app installed on their mobile devices.

Assign MFA to Users:

a. In Salesforce Setup, navigate to "Users" and select "Manage Users"

b. Find the user for whom you want to set up MFA

c. Edit the user record, and assign the appropriate MFA method

  1. d. Repeat this process for all users who need to have MFA enabled

Test MFA for all Users:

a. Log in to Salesforce with a user account that has MFA enabled

b. Verify that the user is prompted to complete the MFA process.

c. Complete the MFA process using the method assigned to the user

  1. d. Repeat this process for all users who have MFA enabled

Monitor MFA usage:

a. In Salesforce Setup, navigate to "Security" and select "Multi-Factor Authentication"

b. Review the available MFA usage reports and check for any suspicious activity

  1. c. Take action as needed, such as disabling a user's MFA or revoking their security token

By following this guide, you have set up multi-factor authentication in Salesforce, which will provide an additional layer of security for your organization's data and functionality. It is important to regularly review and monitor user access and MFA activity, to ensure that the MFA is working as expected and to identify any suspicious activity. Additionally, it is recommended to conduct regular security reviews, to ensure that your multi-factor authentication configuration is adequate and meet the business requirements.

More Technical Guides

Follow along with one of our reference guides to start securing your Salesforce instance

No items found.