Loading
Salesforce now sends email only from verified domains. Read More
Own from Salesforce
Table of Contents
Filter by (0)Add
Select Filters

          No results
          No results
          Here are some search tips

          Check the spelling of your keywords.
          Use more general search terms.
          Select fewer filters to broaden your search.

            Search all of Salesforce Help
            Search all of Salesforce Help
            Set Up Multi-Factor Authentication (MFA)

            You are here:

            1. Salesforce Help
            2. Docs
            3. Own from Salesforce

            Set Up Multi-Factor Authentication (MFA)

            MFA works by adding an additional layer of security to your online account. It requires an additional sign-in credential or authentication step, beyond just your username and password to gain access. MFA allows you to protect access to your account using an app, including Okta Verify, or a FIDO2 Authenticator (for example, Google Authenticator, Salesforce Authenticator, Microsoft Authenticator).

            MFA is bypassed whenever the login is set to SSO, where login is handled by the SSO provider.

            Enable MFA

            By default, MFA is disabled. If your Master Admin has enabled MFA, it'll be enabled for all users in your account.

            1. Click the Security icon at the bottom left corner of the screen to open the Security Page.
            2. Scroll down to the Authentication Method section.
            3. Click Edit in the Authentication Method card. The Password settings will appear on the right of the screen.
            4. Select Enable Multi Factor Authentication to enable MFA. The next time your users log in to the account, they'll be prompted to enroll in an authentication method.
            5. Click Save.

            Enabling, disabling, and resetting MFA on a user-by-user basis is located under Account Settings.

            Audit logs related to changes to an individual user are logged across all regions in the account, including regions the user does not have access to.

            Disable MFA

            Disable MFA for all account users.

            Disabling MFA on a user-by-user basis is located under Account Settings.

            1. Click the Security icon at the bottom left corner of the screen to open the Security Page.
            2. Scroll down to the Authentication Method section.
            3. Click Edit in the Authentication Method card. The Password settings will appear on the right of the screen.
            4. Deselect Enable Multi Factor Authentication.
            5. Click Save.

            Set Up Okta Verify

            Install and configure Okta Verify on your mobile device and connect to OWN.

            Before setting up Okta Verify, make sure that you have already enabled Multi-Factor Authentication (MFA) in the Security settings.

            1. In the Set up multifactor authentication section, select Okta Verify and click Setup.
            2. Select your device type: iPhone or Android.
            3. Click Next.
            4. To launch the Okta Verify app on your mobile device, select "Add an account".
            5. Scan the QR code on the Own screen to continue.
            6. On your mobile device, a success message appears informing you that the account has been added. Click Done.
            7. On your personal device, once the setup is complete, a green check-mark appears next to the enrolled factor.
            8. You can configure any additional optional factor, or click Finish.

            Set Up a Security Key or Biometric Authenticator

            Configure the physical device to use as the security key or a method of authentication that uses your unique biological characteristics, for example fingerprints.

            Before setting up a security key or biometric authenticator, make sure that you have already enabled Multi-Factor Authentication (MFA) in the Security settings.

            1. In the Set up multifactor authentication section, click Setup under Security Key or Biometric Authenticator.
            2. Click Enroll.
            3. Your browser will prompt you to register a security key or biometric authenticator (Windows Hello, Touch ID, etc.).
            4. Select an option and follow the on-screen instructions based on what you chose.
            5. Once the setup is complete, a green check-mark appears next to the enrolled factor.
            6. You can configure any additional optional factor, or click Finish.

            Set Up Google Authenticator

            After you set up Google Authenticator, the next time any user under the account signs in, they are prompted to set up Multi-Factor Authentication.

            1. In Set up multifactor authrentication, select Other Authenticator such as Google, Salesforce and Microsoft and click Setup.
            2. Select your device type: iPhone or Android.
            3. Click Next.
            4. Launch the Google Authenticator app, tap the "+" icon, select "Scan barcode", and use the barcode shown on your personal device.
            5. Click Next.
            6. Enter the code displayed from the application.
            7. Click Verify. On your personal device, once the set up is complete, a green check-mark appears next to the enrolled factor .
             
            Loading
            Salesforce Help | Article