Astro standing on the grass with a Salesforce blue background holding a security sign. There is a Mac monitor with a screenshot of the new Multi Factor Authentication Assistant shown

Your One-Stop Shop for Salesforce Multi-Factor Authentication

By

Editor’s note: The contractual requirement to use multi-factor authentication (MFA) when accessing Salesforce products has been in effect since February 1, 2022. To help users satisfy this requirement, MFA is now a default part of the direct login process for Salesforce production orgs. With MFA already implemented for you, the Multi-Factor Authentication Assistant has served its purpose and is to be retired in the Winter ’25 release. For more information about the MFA requirement, see this blog post.

As an #AwesomeAdmin, you’re faced with a security landscape where cyber attacks are on the rise, and you know the importance of protecting your Salesforce data. But did you know that the dutiful old password isn’t up to the task these days? Borrowing from Jane Austen, it’s a truth universally acknowledged that a single password must be in want of some reinforcement. That’s why we recommend Multi-Factor Authentication (MFA) — a moat for your Salesforce org, a guard dog for your users’ accounts, a… well… you get the idea. Last month we shared that MFA is one of the easiest things you can do to boost security for account access. Now, when you’re ready to add this extra layer of protection, we’re here to help with a new assistant in Setup.

Meet the Multi-Factor Authentication Assistant

Based on our experiences and feedback from customers who’ve already adopted MFA, we identified a set of best practices for completing a successful implementation. Then, we bundled this guidance, along with all the resources and tools you need, into the new Multi-Factor Authentication Assistant. Now, you have a central hub for delivering MFA to your users. Let’s take a closer look!

The Multi-Factor Authentication Assistant is available from Setup in Lightning Experience.

The Assistant walks you through a recommended set of steps in a checklist format, so you can stay organized and feel confident that nothing important is overlooked. For easier manageability, we break the process up into three phases:

  • Get Ready: Start your MFA project by learning about your implementation options and evaluating your business and user requirements. Then, use the results of your analysis to define your project plan, including your change management, rollout, and support strategies.
  • Roll Out: Prepare your users for MFA with change management activities, execute your implementation and test plans, and then go live.
  • Manage: Ensure that your users are adopting MFA and getting the support they need. This is also a good time to optimize your MFA implementation and overall security for your Salesforce org.

The Multi-Factor Authentication Assistant is your guide to implementing MFA, but you’re in full control of the journey. Complete the steps that make sense for your org and skip the steps that don’t. When you’re ready to take action, the Assistant puts the resources and tools you need right at your fingertips.

The Assistant lives up to its name by helping you keep track of the work you’ve completed and where you should focus next. Check off steps as you finish them (1). And see your overall progress as you complete stages (2).

Start your MFA implementation now!

A great way to begin your project is by enabling MFA for some of your company’s Salesforce champions. This way, you can preview the process and get insights that will help with your implementation and change management plans.

Resources

Join the conversation anytime in the MFA – Getting Started Trailblazer Community.

Core responsibilities of a Salesforce Admin

Core Responsibilities of a Salesforce Admin: Your Blueprint for Success

As admins, you hold the keys to success for your users and companies to get the most out of Salesforce. You have the unique opportunity to build and manage trusted solutions that drive productivity and innovation through five core admin responsibilities: security, user management, data management, analytics, and a new core responsibility: product management.  The […]

READ MORE
User management enhancements Winter '25

User Management Enhancements | Winter ’25 Be Release Ready

Winter ’25 is almost here! Learn more about user management and check out Be Release Ready to discover more resources to help you prepare for Winter ’25. We’re continuing to innovate in Setup starting with user access and user management. We have several exciting enhancements in store for Winter ’25–many thanks to your feedback and […]

READ MORE
Troubleshoot user access with SOQL

How to Troubleshoot User Access with SOQL (Beginner Friendly)

Awesome Admins, we know that troubleshooting user access is a common task. You’re frequently asked questions like “Why can Jane access this field, but John can’t?” or “Why can John view this record when he shouldn’t be able to?” In Summer ’24, we introduced helpful summary views for users, public groups, permission sets, and permission […]

READ MORE