Salesforce Security Guide

Salesforce Security Guide
Salesforce Security Basics
Authenticate Users
Elements of User Authentication
Manage User Passwords
Cookies
Single Sign-On
My Domain
Multi-Factor Authentication
Network-Based Security
Device Activation
Session Security
Custom Login Flows
Single Sign-On
Desktop Client Access
Configure User Authentication
Connected Apps
Give Users Access to Data
Share Objects and Fields
Strengthen Your Data's Security with Shield Platform Encryption
Monitoring Your Organization’s Security
Real-Time Event Monitoring
Security Guidelines for Apex and Visualforce Development
API End-of-Life
PDF

Newer Version Available

This content describes an older version of this product. View Latest

Elements of User Authentication

Salesforce provides several methods to authenticate users. Some methods are automatically enabled, and some require that you enable and configure them. Using this user authentication spectrum, you can build authentication to fit your org’s needs and your users’ use patterns.

User Authentication Spectrum

At one end of the user authentication spectrum, Salesforce automatically enables certain authentication methods. These methods include passwords, cookies, and identity verification.

At the other end of the spectrum, you enable and configure user authentication methods to best fit your org’s needs and users’ use patterns. These methods include multi-factor authentication (MFA), single sign-on, My Domain, network-based security, session security, custom login flows, connected apps, and desktop client access.