Hello, I am preparing to implement MFA to anticipate SF's enforcement actions planned for Spring '24.
In my org, some users use SSO to connect. To my knowledge, their SSO does not include MFA.
How should I proceed ?
1. Should I enable MFA for all users (including SSO ones) ? If yes - how will SSO users be impacted ?
or
2. Should I enable MFA from users who use direct login and waive MFA for SSO users ?
Thank you so much in advance for your answers.
@Chris Vasilenko, am I understanding that your SSO users started getting MFA challenges when accessing Salesforce through your SSO portal? If so, that is not the expected experience. The "Require multi-factor authentication (MFA) for all direct UI logins to your Salesforce org" setting is meant to apply when users log in directly to the org with their Salesforce username and password. It shouldn't be affecting users who come in through SSO. I recommend contacting Salesforce Customer Support about what you're seeing.
FYI @Tushar Pradhan
