Saw a notice today about a number of security changes happening with SF and the ones I have some questions on are around the new MFA prompting for when they run or view/export reports. I know we can set a cool down period, but it looks like at least every 2 hours anyone looking at a report will need to redo MFA is that correct? What about reports on dashboard, etc? Just wondering if anyone has any insight. Prepare for the upcoming Step-up Authentication requirements on Report Actions
#Nonprofit #Reports & Dashboards #Salesforce Admin
77 answers
I've also tested today in sandbox and found the following:
Step up prompt is enforced:
- Clicking reports tab
- Clicking dashboards tab
- Opening report link from pasted URL
- Opening report link from favorites
- Clicking to open a specific report from home page dashboard
- Clicking to open a specific report from an opened home page dashboard (see below as opening dashboard via open button does not enforce step up)
No Step up prompt:
- Embedded dashboards on lightning home page run and refresh without issue when loading page
- Clicking "refresh" on an embedded dashboard refreshes without issue
- Clicking "open" on an embedded dashboard opens without issue
- Clicking "refresh" on an open dashboard refreshes without issue
- Opening dashboard from favorites opens without issue
