Identity Verification

Identity verification is when a user provides evidence, called a verification method, to confirm they’re the true owner of an account. Users verify their identity to gain certain access privileges in Salesforce, such as logging in, activating a new device, or viewing a sensitive resource. Define how and when users verify their identity.

• Identity Verification Overview
  Identity verification is when a user provides evidence, called a verification method, to confirm they’re the true owner of an account. Users verify their identity to gain certain access privileges in Salesforce, such as logging in, activating a new device, or viewing a sensitive resource. Depending on the use case, identity verification is referred to as multi-factor authentication (MFA), device activation, or step-up authentication.
• Define Identity Verification Settings for Your Orgs and Experience Cloud Sites
  Define how and when users verify their identity for an entire org or Experience Cloud site.
• One-Time Password (OTP) Behavior
  Salesforce sends one-time passwords (OTPs) to verify identity for multiple use cases, such as passwordless login, device activation, multi-factor authentication (MFA) for Experience Cloud sites, and more. Learn about expiration time, limits, and generation behavior for OTPs for different use cases.
• SMS Identity Verification
  Understand how and when users can verify their identity with one-time passcodes sent via text messages (SMS).
• Device Activation
  By adding extra verification to unfamiliar login attempts, device activation keeps your orgs and Experience Cloud sites secure.