Certified Identity and Access Management Designer

By Salesforce · Question Mode

QuestionQ16

VerifiedAccess Management Best Practices

How should an Architect require users to authenticate with Two-factor Authentication (2FA) for Salesforce only when they are not connected to an internal company network?

Explanation

Custom Login Flows can implement IP-based multi-factor authentication with Apex and Salesforce’s TOTP authentication support, requiring a second factor only when the login IP address falls outside a defined trusted range. Salesforce documents this as an IP-based MFA login-flow pattern.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!