The MFA Scramble
Summary
Salesforce is requiring admins to use phishing-resistant MFA methods this summer, discontinuing the use of Salesforce Authenticator for these users. This change impacts consulting partners significantly, as shared login practices with credential vaults will no longer be viable. Admins need to enable and register built-in authenticators or passkeys, which are more secure and convenient, with detailed steps provided to avoid lockouts. The article also discusses concerns around passkey management across devices and potential challenges during device changes. Overall, it helps admins understand, prepare for, and implement the new MFA requirements effectively.
Takeaways
- Admins will need phishing-resistant MFA replacing Salesforce Authenticator this summer.
- Enable built-in authenticators in Setup under Identity Verification before registering a passkey.
- Register personal built-in authenticators via user settings to create and store passkeys securely.
- Test logging out and back in after passkey setup to avoid lockout situations.
- Consultancies must adapt to new restrictions on shared logins and license management.
Unless you've been willfully ignoring the panic-inducing messages from Salesforce, you've probably gotten an inkling that sometime this summer admins are going to be required to authenticate using "phishing-resistant" multifactor authentication (MFA). Most importantly, this means admins will not be able to use the Salesforce Authenticator app, you'll need something stronger. . Everyone else in your org will still be able to use Authenticator (or equivalents), but not admins. In fact, if you haven't already been requiring it (and you should be ), they're going to be forced to use MFA from now on. There are some other changes as well, particularly that people will be forced to re-authenticate themselves before taking actions that could be used for mass exfiltration of data, like running or exporting a report. It's the admin MFA change that's getting the most attention, though, and for understandable reasons.