Loading
Prepare for Email to Become the Default Login ExperienceRead More
Secure Your Salesforce Org
Multi-Factor Authentication (MFA) for Single Sign-On (SSO)

You are here:

  1. Salesforce Help
  2. Docs
  3. Secure Your Salesforce Org

Multi-Factor Authentication (MFA) for Single Sign-On (SSO)

With single sign-on (SSO), users log in to Salesforce from another site, like Google (the SSO provider). To secure these logins, Salesforce requires users to prove their identity with multi-factor authentication (MFA). You can satisfy MFA requirements by using your SSO provider's MFA service, provided that your SSO provider sends the right authentication signals to Salesforce. Alternatively, you can use the MFA functionality provided by Salesforce.

Required Editions

Available in: both Salesforce Classic and Lightning Experience
Available in: all editions
  • MFA with an SSO Identity Provider
    With single sign-on (SSO), users log in to Salesforce from another site, like Google (the SSO identity provider). To help prevent unauthorized access to Salesforce accounts, you're required to use multi-factor authentication (MFA) when logging in via SSO. You can set up an SSO flow where users log in to the identity provider and complete MFA before they're redirected to Salesforce. To use this option, Salesforce requires your identity provider to send specific authentication signals that indicate the MFA method.
  • Set Up MFA with an SSO Identity Provider
    With single sign-on (SSO), users log in to Salesforce from another site, like Google (the SSO identity provider). Salesforce requires multi-factor authentication (MFA) when logging in via SSO. Here's how you can use your SSO identity provider's MFA service to satisfy the requirement. With this SSO flow, users log in to the identity provider and complete MFA before they're redirected to Salesforce.
  • Use Salesforce MFA for SSO (Salesforce Orgs)
    To help prevent unauthorized access to your account, Salesforce requires multi-factor authentication (MFA) when users log in via single sign-on (SSO). You can use the MFA service included in the Salesforce platform to satisfy this requirement. With this approach, when users log in to Salesforce, they're prompted to provide an MFA verification method to confirm their identity.
 
Loading
Salesforce Help | Article