Custom Login Flows

What can you do with a login flow?

• Enhance or customize the login experience. For example, add a logo or login message.
• Collect and update user data. For example, request an email address, phone number, or mailing address.
• Interact with users, and ask them to perform an action. For example, complete a survey or accept terms of service.
• Connect to an external identity service or geo-fencing service, and collect or verify user information.
• Enforce strong authentication. For example, implement a two-factor authentication method using hardware, SMS, biometric, or another authentication technique.
• Run a confirmation process. For example, have a user define a secret question, and validate the answer during login.
• Create more granular policies. For example, set up a policy that sends a notification every time a user logs in during non-standard working hours.

The first step is to create a flow using either the Cloud Flow Designer or Visualforce. The Cloud Flow Designer is a point-and-click tool that you can use to design a simple flow that users execute when logging in. Use Visualforce to have complete control over how the login page looks and behaves.

Next, you designate the flow as a login flow and associate it with specific profiles in your org. You can create multiple login flows and associate each one with a different user profile. Users assigned to one profile, like sales reps, experience a particular login process as they log in. Users assigned to a different profile like service reps, experience a different login process.

After you associate a login flow with a profile, it is applied each time a user with that profile logs in to Salesforce, communities, the Salesforce app, and even Salesforce client applications that use OAuth. You can apply login flows to Salesforce orgs and communities, including external identity communities.