Enable Lightning Login
Enable Lightning Login to give your users the enhanced speed, convenience, and security of password-free logins. After enabling Lightning Login and assigning the required permission to your users, encourage them to individually enroll in this password-free login feature.
Required Editions
| Available in: both Salesforce Classic and Lightning Experience |
| Available in: Essentials, Contact Manager, Database.com, Developer, Enterprise, Group, Performance, Professional, and Unlimited Editions |
| User Permissions Needed | |
|---|---|
| To edit system permissions in profiles: | Manage Profiles and Permission Sets |
| To enable Lightning Login: | Customize Application |
Consider these points about how Lightning Login relates to other login, identity verification, and multi-factor authentication (MFA) features.
- You can monitor your users’ Lightning Login activity using Login History or Identity Verification History tools.
- Any time device activation is required, users who are enrolled in Lightning Login are directed to log in with their username and password and to complete identity verification. For more information about device activation requirements see Device Activation for Salesforce Orgs.
- If an enrolled user previously logged in from a browser and selected Remember me, login hints on the login page show a lightning bolt next to past usernames that are Lightning Login–enabled.
- The Lightning Login method satisfies the contractual requirement to use multi-factor authentication (MFA) for an additional factor beyond a user’s username and passwords.
- If your org has defined a transaction security policy that requires MFA, Lightning Login isn’t supported. Enrolled users who attempt a Lightning Login must use log in with username and password instead.
Follow these steps to enable Lightning Login.
- From Setup, enter Session Settings in the Quick Find box, then select Session Settings.
-
Review the default settings for Lightning Login.
-
Make sure that Allow Lightning Login is enabled.
You can disable Allow Lightning Login at any time to switch users back to username and password logins.
-
Decide if you want to make Lightning Login available to all users or only users
with the Lightning Login User permission.

-
Confirm that a Standard session security level is appropriate for this login
method.
Lightning Login establishes a Standard security level for the user’s session. Standard is the default security level for the Username Password method that Lightning Login typically replaces. If needed, you can change the security level to High Assurance.
-
Make sure that Allow Lightning Login is enabled.
- Assign the Lightning Login User permission to users in the user profile (for cloned or custom profiles only) or permission set. Lightning Login isn’t supported for external users.
Did this article solve your issue?
Let us know so we can improve!

