Configure User Authentication | Security Implementation Guide

Setting Login Restrictions

Set Password Policies
To ensure that the appropriate level of password security is used for your organization, specify password requirements with Password Policies settings.

Expire Passwords for Your Users
As an administrator, you can expire passwords for all users any time you want to enforce extra security for your organization.

Set Trusted IP Ranges for Your Organization
Trusted IP Ranges define a list of IP addresses from which users can log in without receiving a login challenge for verification of their identity, such as a code sent to their mobile phone.

Modify Session Security Settings
You can modify session security settings to specify connection type, timeout settings, and more.

Create a Login Flow
Use the Cloud Flow Designer to build a login flow process, then associate the finished flow with a profile.

Connect a Login Flow to a Profile
After you create a login flow in Flow Designer and activate the flow, you associate it with a profile in your organization. Users with that profile are then directed to the login flow.

Salesforce Two-Factor Authentication
Salesforce admins can enhance security by requiring a second level of authentication on every login, called “two-factor authentication” (2FA). You can also require two-factor authentication when a user meets certain criteria, such as attempting to view reports or logging in from an unrecognized IP address.

Enabling Single Sign-On

Connected Apps

Desktop Client Access