How to Select an MFA Verification Method When Multiple Methods Are Registered

Publiceringsdatum: Mar 3, 2026

Beskrivning

When a user registers multiple MFA verification methods in Salesforce, the system automatically prompts the highest-priority method at login. However, users can manually select a different verification method depending on their situation. This article explains the MFA method priority order and provides step-by-step examples for selecting an alternate method during login.

Understanding MFA Priority Order

When multiple MFA verification methods are registered, Salesforce requests the method with the highest priority first. The priority order is as follows (updated in the Spring '26 release):

Priority	Verification Method
1 (Highest)	Built-in Authenticator
2	Security Key
3	Salesforce Authenticator
4 (Lowest)	Third-party TOTP Authenticator App

Users who have registered multiple verification methods can select which method to use to log in, depending on their situation.

Lösning

To use a verification method other than the one automatically prompted, select [Use a different verification method] or [Having trouble?] on the login screen.

Switch from Built-in Authenticator to Another Method

When a Built-in Authenticator is registered alongside another method, it is prompted first by default. Use the steps below to switch to your preferred method.

Example 1: Selecting Salesforce Authenticator when both a Built-in Authenticator and Salesforce Authenticator are registered

On the login screen, click [Use a different verification method].
Select [Approve with Salesforce Authenticator] and click [Next].
Click [Approve] on the Salesforce Authenticator app to log in (or enter the 6-digit code).

Example 2: Selecting Security Key when both a Built-in Authenticator and a Security Key are registered

On the login screen, click [Use a different verification method].
Select [Use a Universal Second Factor (U2F) key or WebAuthn (FIDO2)] and click [Next].
Click [Verify] and tap your Security Key to authenticate.

Switch from Security Key to Another Method

When a Security Key is registered alongside another method and no Built-in Authenticator is present, the Security Key is prompted first by default. Use the steps below to switch to your preferred method.

Example 3: Selecting Salesforce Authenticator when both a Security Key and Salesforce Authenticator are registered

On the login screen, click [Use a different verification method].
Select [Approve with Salesforce Authenticator] and click [Next].
Check the Salesforce Authenticator app and click [Approve] to log in (or enter the 6-digit code).

Example 4: Selecting a Third-Party Authenticator App when both Salesforce Authenticator and a third-party TOTP app are registered

On the login screen, click [Having trouble?].
Click [Use a different verification method].
Enter the 6-digit verification code displayed on your authentication app and click [Verify].

Example 5: Selecting a Third-Party Authenticator App when both a Security Key and a third-party TOTP app are registered

On the login screen, click [Use a different verification method].
Select [Use a code from an authentication app] and click [Next].
Enter the 6-digit verification code displayed on your authentication app and click [Verify].

Summary: Quick Reference Table

Registered Methods	Default Prompted Method	To Switch — Click
Built-in Authenticator + Salesforce Authenticator	Built-in Authenticator	[Use a different verification method]
Built-in Authenticator + Security Key	Built-in Authenticator	[Use a different verification method]
Security Key + Salesforce Authenticator	Security Key	[Use a different verification method]
Salesforce Authenticator + TOTP App	Salesforce Authenticator	[Having trouble?] → [Use a different verification method]
Security Key + TOTP App	Security Key	[Use a different verification method]

Knowledge-artikelnummer

000395872

Löste denna artikel ditt problem?

Berätta för oss vad vi kan förbättra!