This article explains causes and solutions when the "Waive Multi-Factor Authentication for Exempt Users" permission is missing from profiles or permission sets, or when an error occurs stating "The user license does not allow the following permissions" during assignment in MFA.
This issue typically occurs due to trial org limitations or license synchronization discrepancies between Sandbox and Production environments.
The "Waive Multi-Factor Authentication for Exempt Users" permission is not provisioned in Trial organizations. To verify this permission, please create a new Developer Edition org or use a Sandbox associated with an active contract org.
A license mismatch between the Production and Sandbox environments may be the cause. Follow these steps to sync Sandbox licenses with Production, then verify if the "Waive Multi-Factor Authentication for Exempt Users" permission can be assigned:
Salesforce Classic: [Company Profile] | [Company Information] | [Match Production Licenses]
Lightning Experience: [Company Settings] | [Company Information] | [Match Production Licenses]
Before performing "Match Production Licenses," please review the considerations in the following article:
000394909

We use three kinds of cookies on our websites: required, functional, and advertising. You can choose whether functional and advertising cookies apply. Click on the different cookie categories to find out more about each category and to change the default settings.
Privacy Statement
Required cookies are necessary for basic website functionality. Some examples include: session cookies needed to transmit the website, authentication cookies, and security cookies.
Functional cookies enhance functions, performance, and services on the website. Some examples include: cookies used to analyze site traffic, cookies used for market research, and cookies used to display advertising that is not directed to a particular individual.
Advertising cookies track activity across websites in order to understand a viewer’s interests, and direct them specific marketing. Some examples include: cookies used for remarketing, or interest-based advertising.