You are here:
Troubleshoot Integration or API User Account Login Issues After MFA Enforcement
An integration or API user account can experience login issues after MFA enforcement. Although API logins don’t require MFA, some integrations use authentication methods that complete a user interface (UI) login, which requires MFA.
These authentication methods use UI logins.
- OAuth web server flow
- OAuth user-agent flow, which is scheduled for retirement.
- OAuth username-password flow, which is scheduled for retirement.
- SOAP login(), which is scheduled for retirement.
- To see which authentication methods your apps use, review Login History.
-
In the Login Subtype field, check for these OAuth 2.0 flows.
- OAuth Web-Server
- OAuth User-Agent
- OAuth Username-Password
-
To check whether the app uses SOAP login() calls, look for these entries.
- Login Subtype: SOAP API
- Login Type: Other Apex API or Partner Product
- API Type: SOAP Enterprise, SOAP Partner, or SOAP Tooling
- To eliminate the UI login, migrate affected integrations to the JWT bearer flow or the client credentials flow.
