User Authentication

Authentication protects access to Salesforce by making sure that users are who they say they are. Enhance security for direct Salesforce logins with features such as multi-factor authentication (MFA), passwordless login with passkeys, certificate-based authentication, and Lightning Login. Use single sign-on (SSO) to enable users to log in to Salesforce from a third party, such as Google.

• Multi-Factor Authentication for Salesforce Orgs
  Multi-factor authentication (MFA) is a secure authentication method that requires users to verify their identity with a second piece of evidence (or factor) in addition to their password. To protect users from security threats like phishing, credential stuffing, and account takeovers, Salesforce requires MFA for all logins to Salesforce products. This contractual requirement applies equally to direct logins with a Salesforce username and password and to logins via single sign-on (SSO). Salesforce provides free MFA functionality for all Salesforce products. To help customers satisfy the MFA requirement, MFA is automatically enabled for direct logins to production orgs.
• Single Sign-On
  Single sign-on (SSO) is an authentication method that enables users to access multiple applications with one login and one set of credentials. For example, after users log in to your org, they can automatically access all apps from the App Launcher. You can set up your Salesforce org to trust a third-party identity provider to authenticate users. Or you can configure a third-party app to rely on your org for authentication.
• Passwordless Login with Passkeys
  Set up a fast, easy, and phishing-resistant login process for your employees. With passwordless login via passkeys, internal users log in by using a built-in authenticator (such as Touch ID or Windows Hello) or a security key.
• Lightning Login for Password-Free Logins
  Say goodbye to the hassle of weak passwords, forgotten passwords, and locked-out accounts. With Lightning Login, you can give your users the enhanced speed, convenience, and security of password-free logins.
• Certificate-Based Authentication
  In addition to authentication methods like single sign-on, Salesforce provides certificate-based authentication, which you can configure to authenticate your Salesforce users with unique PEM-encoded X.509 certificates.