Lightning Login for Password-Free Logins

Lightning Login relies on Salesforce Authenticator (version 2 or later), the multi-factor authentication mobile app that’s available as a free download for iOS and Android devices. By requiring two factors of authentication for login, Lightning Login adds an extra layer of security.

• The first factor is something that the user has—for example, a mobile device that has Salesforce Authenticator installed and connected with the user’s Salesforce account.
• The second factor is something that the user is, such as a fingerprint, or something that the user knows, such as a PIN. The second level of authentication enhances security by requiring access to the mobile device and the user’s fingerprint or PIN.

Lightning Login isn’t limited to orgs using Lightning Experience. It works in Salesforce Classic, too.

All org employees (not Experience Cloud users) are eligible for Lightning Login by default, but you can decide whether to make it available to all users. You can also determine user eligibility by using the Lightning Login User permission.

Note The Lightning Login method satisfies the contractual requirement to use multi-factor authentication (MFA) for an additional factor beyond a user’s username and passwords.

• Enable Lightning Login
  Enable Lightning Login to give your users the enhanced speed, convenience, and security of password-free logins. After enabling Lightning Login and assigning the required permission to your users, encourage them to individually enroll in this password-free login feature.
• Enroll in Lightning Login
  Enroll in Lightning Login so that you can enjoy the enhanced speed, convenience, and security of password-free logins.
• Cancel a User’s Lightning Login Enrollment
  Cancel a user’s Lightning Login enrollment if the user is no longer eligible to use Lightning Login.