Hi all,
I'm having some trouble wrapping my head around this MFA authentication subject. I need your help! Since today my users keep having to authenticate their logins using an authenticator app. I've been reading up and evidently my predecessor has only set up part of the solution.
We have the following:
- SSO setup with a Google certificate
- Users can log in via Google SSO or their username and password
- MFA is enabled in our Google accounts via 2FA.
What exactly do I need to check or setup for my users to keep using the Google SSO login variant?
There is so much information available I can't make out what's what...
Federation ID's are filled on our Salesforce users, but some of the users still need to re-enter a verification a few times a day.
Thanks in advance for all your help!
https://help.salesforce.com/s/articleView?id=005237070&type=1
As described in this article, your SSO setup needs to actually
pass to Salesforce a field indicating that the authentication provider used MFA or other secure methods on their end, so that SF knows it was a secure login and does not have to throw up a second MFA prompt.
