Loading
Salesforce now sends email only from verified domains. Read More
Identify Your Users and Manage Access
Table of Contents
Select Filters

          No results
          No results
          Here are some search tips

          Check the spelling of your keywords.
          Use more general search terms.
          Select fewer filters to broaden your search.

          Search all of Salesforce Help
          Enable Lightning Login

          Enable Lightning Login

          Enable Lightning Login to give your users the enhanced speed, convenience, and security of password-free logins. After enabling Lightning Login and assigning the required permission to your users, encourage them to individually enroll in this password-free login feature.

          Required Editions

          Available in: both Salesforce Classic and Lightning Experience
          Available in: Essentials, Contact Manager, Database.com, Developer, Enterprise, Group, Performance, Professional, and Unlimited Editions
          User Permissions Needed
          To edit system permissions in profiles: Manage Profiles and Permission Sets
          To enable Lightning Login: Customize Application

          Consider these points about how Lightning Login relates to other login, identity verification, and multi-factor authentication (MFA) features.

          • You can monitor your users’ Lightning Login activity using Login History or Identity Verification History tools.
          • Any time device activation is required, users who are enrolled in Lightning Login are directed to log in with their username and password and to complete identity verification. For more information about device activation requirements see Device Activation for Salesforce Orgs.
          • If an enrolled user previously logged in from a browser and selected Remember me, login hints on the login page show a lightning bolt next to past usernames that are Lightning Login–enabled.
            Note
            Note For Lightning Login to display login hints properly in the Apple Safari browser, change the Cookies and website data option in the browser. Advise your users to change it from Allow from websites I visit to Always allows.
          • The Lightning Login method satisfies the contractual requirement to use multi-factor authentication (MFA) for an additional factor beyond a user’s username and passwords.
          • If your org has defined a transaction security policy that requires MFA, Lightning Login isn’t supported. Enrolled users who attempt a Lightning Login must use log in with username and password instead.

          Follow these steps to enable Lightning Login.

          1. From Setup, enter Session Settings in the Quick Find box, then select Session Settings.
          2. Review the default settings for Lightning Login.
            1. Make sure that Allow Lightning Login is enabled.
              You can disable Allow Lightning Login at any time to switch users back to username and password logins.
            2. Decide if you want to make Lightning Login available to all users or only users with the Lightning Login User permission.
              Allow only for users with the Lightning Login User permission
            3. Confirm that a Standard session security level is appropriate for this login method.
              Lightning Login establishes a Standard security level for the user’s session. Standard is the default security level for the Username Password method that Lightning Login typically replaces. If needed, you can change the security level to High Assurance.
          3. Assign the Lightning Login User permission to users in the user profile (for cloned or custom profiles only) or permission set. Lightning Login isn’t supported for external users.
           
          Loading
          Salesforce Help | Article