Salesforce Security Guide

Salesforce Security Guide
Salesforce Security Basics
Authenticate Users
Elements of User Authentication
Configure User Authentication
Restrict Where and When Users Can Log In to Salesforce
Set Password Policies
Expire Passwords for All Users
Modify Session Security Settings
Define Identity Verification Settings for Your Orgs and Experience Cloud Sites
Require High-Assurance Session Security for Sensitive Operations
Custom Login Flows
Set Up a Login Flow and Connect to Profiles
Login Flow Examples
Multi-Factor Authentication Considerations
Set Multi-Factor Authentication Login Requirements
Set Multi-Factor Authentication Login Requirements for API Access
Connect Salesforce Authenticator (Version 3 or Later) to Your Account for Identity Verification
Verify Your Identity with a TOTP Authenticator App
Disconnect Salesforce Authenticator (Versions 2 and 3) from a User’s Account
Disconnect a User’s TOTP Authenticator App
Generate a Temporary Identity Verification Code
Expire a Temporary Verification Code
Implement Multi-Factor Authentication with Apex
Delegate Multi-Factor Authentication Management Tasks
Deploy Third-Party, SMS-Based Multi-Factor Authentication
Limit the Number of Concurrent Sessions with Login Flows
Connected Apps
Give Users Access to Data
Share Objects and Fields
Strengthen Your Data's Security with Shield Platform Encryption
Monitoring Your Organization’s Security
Real-Time Event Monitoring
Security Guidelines for Apex and Visualforce Development
PDF

Newer Version Available

This content describes an older version of this product. View Latest

Generate a Temporary Identity Verification Code

Generate a temporary verification code for users who can’t access the identity verification method that they usually use for multi-factor authentication (MFA). Set the code's expiration for from 1 to 24 hours after you generate it. The code can be used multiple times until it expires.
Available in: Both Salesforce Classic and Lightning Experience
Available in: Essentials, Contact Manager, Group, Professional, Enterprise, Performance, Unlimited, and Developer Editions

User Permissions Needed
To generate a temporary verification code: Manage Multi-Factor Authentication in User Interface

Temporary verification codes are valid for multi-factor authentication only. They aren’t valid for device activation. That is, when users log in from an unrecognized browser or app and we require identity verification, they can’t use a temporary code.

  1. From Setup, enter Users in the Quick Find box, then select Users.
  2. Click the name of the user who needs a temporary verification code.
    You can’t generate a code for an inactive user.
  3. Find Temporary Verification Code, then click Generate.
    If you don’t already have a session with a high-assurance security level, Salesforce prompts you to verify your identity.
  4. Set an expiration time for the code, and click Generate Code.
  5. Give the code to your user, then click Done.
    After you click Done, you can’t return to view the code again, and the code isn’t displayed anywhere in the user interface.
Your user can use the temporary verification code multiple times until it expires. Each user can have only one temporary verification code at a time. If a user forgets or loses the code before it expires, you can manually expire the old code and generate a new one. You can generate up to six codes per hour for each user.

When you add an identity verification method to a user’s account, the user gets an email. To stop sending emails to users when new identity verification methods are added to their accounts, contact Salesforce.

Note