Help Users Register MFA Verification Methods for Salesforce Orgs

Multi-factor authentication (MFA) is automatically enabled for direct logins to Salesforce production orgs. To log in, users must have at least one registered identity verification method that they provide in addition to their username and password. If they haven’t set up a verification method, they’re prompted to register one for MFA when they log in. The registration process connects a verification method to the user’s Salesforce account. Each user must complete this step themselves — Salesforce admins can’t do it for them. But you can head off confusion and support tickets but making sure your users understand what they must do.

Required Editions

Available in: both Salesforce Classic and Lightning Experience

Available in: all editions

Note It can be an urgent situation if a user isn’t able to log in. With MFA in the equation, remove the risk of access problems by having all users —especially Salesforce admins— register at least two verification methods. This way everyone has a backup available if they lose or forget their primary method. With Salesforce, users can register one method in each of the supported categories. That means they can set up Salesforce Authenticator, a third-party one-time password authenticator app, a physical security key, and a built-in authenticator.

Make sure your users understand the verification method options that are available to them. Then refer them to these help topics for step-by-step guidance as they complete the in-app registration prompts.

• Register a Built-In Authenticator as an Identity Verification Method

• Register a Security Key as an Identity Verification Method

• Register Salesforce Authenticator as an Identity Verification Method

• Register a Third-Party Authenticator App as an Identity Verification Method

Important As a security best practice, require users to use phishing-resistant verification methods: built-in authenticators or physical security keys. For more information about the security benefits of these methods, see the WebAuthn guide.

Tip Help your users with the MFA registration process by giving them onboarding help. Check out the downloadable MFA Rollout Pack. It provides customizable onboarding templates for each of the verification methods that are supported by Salesforce products.

See Also

• Decide How Users Select a Verification Method During MFA Registration for Salesforce Orgs
• Disconnect Identity Verification Methods that are Lost, Replaced, or Not Working (Salesforce Orgs)