Loading
Salesforce now sends email only from verified domains. Read More
Identify Your Users and Manage Access
Table of Contents
Filter by (0)Add
Select Filters

          No results
          No results
          Here are some search tips

          Check the spelling of your keywords.
          Use more general search terms.
          Select fewer filters to broaden your search.

            Search all of Salesforce Help
            Search all of Salesforce Help
            Turn On MFA for Single Sign-On (SSO) to Salesforce Orgs

            You are here:

            1. Salesforce Help
            2. Docs
            3. Identify Your Users and Manage Access

            Turn On MFA for Single Sign-On (SSO) to Salesforce Orgs

            Customers are contractually required to use multi-factor authentication (MFA) when accessing Salesforce. If your users log in to your Salesforce org via single sign-on (SSO), you have the choice of turning on your SSO provider’s MFA service or implementing the free MFA functionality provided by Salesforce.

            Required Editions

            Available in: both Salesforce Classic and Lightning Experience
            Available in: all editions
            Note
            Note

            For full details about the MFA requirement, see the Salesforce Multi-Factor Authentication FAQ.

            • Use Your SSO Identity Provider’s MFA Service for Salesforce Orgs
              To help prevent unauthorized access to Salesforce accounts, customers are contractually required to use multi-factor authentication (MFA) when logging in via single sign-on (SSO). You can use your third-party identity provider’s MFA service to satisfy this requirement. This approach includes the benefit of providing MFA to external apps that integrate with the identity provider.
            • Use Salesforce MFA for SSO (Salesforce Orgs)
              To help prevent unauthorized access to Salesforce accounts, customers are contractually required to use multi-factor authentication (MFA) when logging in via single sign-on (SSO). You can use the free MFA service included in Salesforce to satisfy this requirement. With this approach, when users log in to Salesforce, they’re prompted to provide an MFA verification method to confirm their identity.
             
            Loading
            Salesforce Help | Article