Custom Login Flows allow an architect to insert custom logic, including a callout or redirect to an existing external verification service, into the Salesforce authentication process after primary login and before the user reaches the app. This lets Universal Containers reuse its existing custom token-based 2FA system for Salesforce logins as well as on-premise applications, giving users one consistent second-factor experience without having to replace or duplicate the 2FA infrastructure. Replacing the working custom system (choices A and C) discards existing investment and control, and running two disconnected 2FA systems (choice B) creates an inconsistent user experience and duplicated administration.
Community Discussion