Users are prompted for MFA verification multiple times when logging in

Why This Happens

When you access Salesforce through a direct URL to a specific record — such as a bookmark, or a link from an email or Slack message — the system performs authentication at two levels: first for general access, then for the specific resource. This can result in two separate MFA prompts during a single login. For example, a user who clicks a Salesforce record link shared in an email instead of logging in through the standard login page may see the MFA prompt twice.

How to Fix It

Using the standard login URLs consolidates authentication into a single verification step. To complete login with just one verification, use one of the following URLs to access Salesforce:

• Standard Salesforce login URL

  • Production environment: `https://login.salesforce.com`

  • Sandbox environment: `https://test.salesforce.com`

• Your organization-specific My Domain URL

  • Example: `https://<MyDomainName>.my.salesforce.com`