MFA metrics - using SSO MFA option for most users not showing usage in the login metrics

Question

We are implementing MFA in our salesforce instance. Most users will be signing into to salesforce using SSO. We decided to use our SSO's MFA, but when I look at the metrics it doesn't display that any SSO users have signed in with MFA. Is this only because the MFA is outside of salesforce?

#MFA - Getting Started

@* MFA - Getting Started *

Mat Hamlin · Accepted Answer

Correct, Salesforce does not capture the MFA information from your SSO login flow.

Paxton Patiwan · Answer

We are in a similar situation. My company uses SSO's MFA.  @Mat Hamlin https://trailblazers.salesforce.com/profileView?u=0053A00000EedvbQAB  How does Salesforce knows that we meet the MFA requirement by using SSO's MFA? I was looking through some of the questions and answers and there are no clear explanation of what we need to do. I saw this on FAQ page, but it doesn't really tell me what I am supposed to do to proof to Salesforce that we have met the requirement. Base on the answer below, SAML is not supported? That's what we use for our SSO.    If you use a third-party identity provider (IdP) to access your Salesforce products, Salesforce has limited visibility into your MFA implementation. To ensure we have the necessary insight to manage the MFA requirement, we’re planning to leverage standards-based attributes in SSO protocols that describe the authentication method used during an SSO login. Most SSO providers support two primary attributes: OpenID Connect (OIDC) uses Authentication Method Reference (amr) and SAML uses Authentication Context (AuthnContext). Currently, OIDC amr is available in products built on the Salesforce Platform, and you can see the values in LoginHistory when you export the data. In future releases, we’re looking to expand OIDC amr to other Salesforce products, and add support for SAML AuthnContext to all products.

MFA metrics - using SSO MFA option for most users not showing usage in the login metrics

MFA

Aprendizagem relacionada

Mais ajuda