Hey all,
We are running into issues accessing the mobile app since MFA has been enforced for privileged users.
- If a user sets up the Built-in Authentication on desktop, they are not able to login to mobile. Our company only allows Windows Hello authentication on desktop, and users are unable to "Verify Identity" in iOS when this is added on desktop. The screen is frozen on this even when using "Login for Admin."
- We have gone into Salesforce Classic on the mobile browser and added a passkey, but it doesn't work in the app.
- If we delete the Built-in Authenticator on desktop and add a passkey for mobile, it then requires users to have their phones to login on desktop.
None of these scenarios are ideal, and I'm wondering if anyone has been able to use Window Hello to authenticate desktop and then directly login on mobile with the their Face ID, Touch ID, or passcode? We have found hacky ways to get people logged in with generating a temporary code then having them setup a passkey etc, but it seems like the app should automatically guide users to setup a mobile passkey even when there's an authenticator for desktop? Is this a bug with MFA and mobile because it doesn't seem like this should be expected behavior?
#Multi-Factor-Authentication #Salesforce1 Mobile App #Salesforce_Mobile_App
The Salesforce Help article at https://help.salesforce.com/s/articleView?id=005391003&type=1 does provide instructions to set up a separate passkey on a mobile device in addition to the one for desktop. It's pretty pooly written and I suspect that there are many edge cases in which it doesn't work, but I got it to work on iOS, committing the passkey to the native Passwords app.