Salesforce Security Guide
jNewer Version Available
Create a Login Flow
A login flow directs users through a login process before they access your Salesforce
org or community. You can use a login flow to control the business processes that your users
follow when they log in to Salesforce. After Salesforce authenticates a user, the login flow
directs the user through a process, such as enforcing strong authentication or collecting user
information. When users complete the login flow successfully, they are redirected to their
Salesforce org or community. If unsuccessful, the flow can log out users
immediately.
| Available in: both Salesforce Classic and Lightning Experience |
| Available in: Enterprise, Performance, Unlimited, and Developer Editions |
| User Permissions Needed | |
|---|---|
| To open, edit, or create a flow in the Cloud Flow Designer: | Manage Flow |
Before creating a login flow, it’s important to understand login flow execution.
- To invoke a login flow, the user must first be authenticated. Login flows don’t replace the existing Salesforce authentication process. They integrate new steps or ask the user for information.
- During login-flow execution, users have restricted access. Users in a login flow can access only the flow—they can’t bypass it to get to the application. They can log in to the org only when they successfully authenticate and complete the flow.
You can create two types of login flows:
- Screen flow, which you create declaratively using the Cloud Flow Designer
- Visualforce Page, which you create programmatically using Visualforce
After creating the flow, you designate it as a login flow from Setup and choose which profiles apply. You can create multiple login flows and associate each one with a different user profile. Users assigned to one profile, like sales reps, experience a particular login process as they log in. Users assigned to a different profile like service reps, experience a different login process.