Loading

Delegate MFA Identity Verification Method Disconnection to Non-System Administrator Users

Date de publication: Nov 25, 2025
Description

This article explains how to assign limited administrative permissions to trusted non-System Administrator users to enable them to disconnect MFA (Multi-Factor Authentication) identity verification methods for other users.

There are several options for non-System Administrator users to manage MFA identity verification methods.

For improved searchability, this solution applies to MFA, Identity Verification, and User permissions.

Résolution

The following setting is configured to allow disconnection as a proxy for the System Administrator:

 

A. Grant users with a Salesforce License the [Manage Multi-Factor Authentication in User Interface] permission via a Custom Profile or Permission Set

Note: Users other than the Salesforce License cannot be granted the [Manage Multi-Factor Authentication in User Interface] permission. In that case, there is a separate option below.

 

Reference: 

 

B. Utilize the Delegated Administrator function to log in as another user and perform the disconnection

- Create a delegated group using the Delegated Administrator function with [Enable Login Access] set to ON.

- Set the user who is to be the Delegated Administrator as the [Delegated Administrator].

- Perform the disconnection from the [Advanced User Details] screen by logging in as that user through Login Access.

 

Reference: 

Numéro d’article de la base de connaissances

003962432

 
Chargement
Salesforce Help | Article