Salesforce Security Guide

Salesforce Security Guide
Salesforce Security Basics
Authenticate Users
The Elements of User Authentication
Configure User Authentication
Restrict Where and When Users Can Log In to Salesforce
Set Password Policies
Expire Passwords for All Users
Modify Session Security Settings
Create a Login Flow
Connect a Login Flow to a Profile
Set Up Two-Factor Authentication
Set Two-Factor Authentication Login Requirements
Set Two-Factor Authentication Login Requirements for Single Sign-On, Social Sign-On, and Communities
Set Two-Factor Authentication Login Requirements for API Access
Connect Salesforce Authenticator (Version 2 or Later) to Your Account for Identity Verification
Connect a One-Time Password Generator App or Device for Identity Verification
Disconnect Salesforce Authenticator (Version 2 or Later) from a User’s Account
Disconnect a User’s One-Time Password Generator App
Generate a Temporary Identity Verification Code
Expire a Temporary Verification Code
Delegate Two-Factor Authentication Management Tasks
Give Users Access to Data
Share Objects and Fields
Protect Your Salesforce Data with Shield Platform Encryption
Monitoring Your Organization's Security
Security Tips for Apex and Visualforce Development
PDF

Newer Version Available

This content describes an older version of this product. View Latest

Disconnect Salesforce Authenticator (Version 2 or Later) from a User’s Account

Only one Salesforce Authenticator (version 2 or later) mobile app can be connected to a user’s account at a time. If your user loses access to the app by replacing or losing the mobile device, disconnect the app from the user’s account. The next time the user logs in with two-factor authentication, Salesforce prompts the user to connect a new authenticator app.
Available in: Both Salesforce Classic and Lightning Experience
Available in: All Editions

User Permissions Needed
To disconnect a user’s Salesforce Authenticator app: “Manage Two-Factor Authentication in User Interface”
  1. From Setup, enter Users in the Quick Find box, then select Users.
  2. Click the user’s name.
  3. On the user’s detail page, click Disconnect next to the App Registration: Salesforce Authenticator field.
  4. Click Disconnect next to the App Registration: One-Time Password Generator field.

    If you don’t click Disconnect for this field, the inaccessible app still generates valid verification codes for the account.

    Note

Users can disconnect the app from their own account on the Advanced User Details page. In personal settings, the user clicks Disconnect next to both the App Registration: Salesforce Authenticator and App Registration: One-Time Password Generator fields.