Salesforce Security Guide

Salesforce Security Guide
Salesforce Security Basics
Authenticate Users
Elements of User Authentication
Configure User Authentication
Restrict Where and When Users Can Log In to Salesforce
Set Password Policies
Expire Passwords for All Users
Modify Session Security Settings
Define Identity Verification Settings for Your Orgs and Experience Cloud Sites
Require High-Assurance Session Security for Sensitive Operations
Custom Login Flows
Set Up a Login Flow and Connect to Profiles
Login Flow Examples
Multi-Factor Authentication Customizations
Enable MFA with Session Security Levels
Set Multi-Factor Authentication Login Requirements for API Access
Connect Salesforce Authenticator to a Salesforce Account for Identity Verification
Verify Your Identity with a TOTP Authenticator App
Disconnect Salesforce Authenticator from a User’s Account
Disconnect a User’s TOTP Authenticator App
Generate a Temporary Identity Verification Code
Expire a Temporary Verification Code
Implement Multi-Factor Authentication with Apex
Delegate Multi-Factor Authentication Management Tasks
Deploy Third-Party, SMS-Based Multi-Factor Authentication
Limit the Number of Concurrent Sessions with Login Flows
Connected Apps
Give Users Access to Data
Share Objects and Fields
Strengthen Your Data's Security with Shield Platform Encryption
Monitoring Your Organization’s Security
Real-Time Event Monitoring
Security Guidelines for Apex and Visualforce Development
API End-of-Life
PDF

Newer Version Available

This content describes an older version of this product. View Latest

Disconnect Salesforce Authenticator from a User’s Account

Only one Salesforce Authenticator mobile app can be connected to a user’s account at a time. If your user loses access to the app by replacing or losing the mobile device, disconnect the app from the user’s account. As long as the user or assigned profile still has the multi-factor authentication permission enabled and no other verification method is connected to their account, Salesforce prompts the user to register a new method the next time they log in.
Available in: Both Salesforce Classic and Lightning Experience
Available in: All Editions

User Permissions Needed
To disconnect a user’s Salesforce Authenticator app: Manage Multi-Factor Authentication in User Interface or the System Administrator profile

These steps are for Salesforce admins or users with the Manage Multi-Factor Authentication in User Interface permission who want to disconnect a user’s Salesforce Authenticator account in Setup. For example, admins follow these steps when a user loses the device connected to Salesforce Authenticator. For users who want to disconnect Salesforce Authenticator on their device to switch to a new device or simply remove an unused connection, see Remove an Account from Salesforce Authenticator.

  1. From Setup, in the Quick Find box, enter Users, then select Users.
  2. Click the user’s name.
  3. On the user’s detail page, next to the App Registration: Salesforce Authenticator field, click Disconnect.