2

I want to skip the verification code for a user

I want the users not to receive the "''You recently logged in to Salesforce from a device we don't recognize.'' How can I do ? I have defined lists of Ip ranges under network access.will this solve my problem

I do not have IP ranges defined in salesforce. How can I skip this step?

Please help!!

  • I faced smilar issue lately and I feel setting up IP ranges is the only good way to achieve this. I set a trusted range for a specific profile and that solved the verification issue. – Sanjay Apr 5 '16 at 21:19
  • 3
    Hi Kunal, this appears to be an x-y problem. Instead of asking how to skip the verification code (which you can't directly do), try asking us how to get your user logged in, what challenges you're facing, why you don't want to/can't use a verification code, etc. – sfdcfox Apr 5 '16 at 21:20
  • Hi @sfdcfox: I want the users not to receive the "''You recently logged in to Salesforce from a device we don't recognize.'' How can I do ? I have defined lists of Ip ranges under network access.will this solve my problem – kunal gupta Apr 5 '16 at 22:24
6

It's a bit of a broad stroke, but you can use Trusted IP ranges if the user is coming into Salesforce from a known static IP address. I say broad here as it won't be specific to that user. It will include any other users logging in from those IP addresses. See Set Trusted IP Ranges for Your Organization

A variation on Trusted IP ranges is to Restrict the Login IP Addresses for the Profile. This will remove the need for the verification code, but will also lock that Profile to a range of IP addresses.

Another option I can think of would be to utilise the the security token. Calls to the APIs, say the Partner API login() method, that include the security token appended to the password don't need to go through the verification check. You could establish the valid session using the API call and then bounce the user directly into the Web UI through the frontdoor.

I haven't tried it, but you might be able to use SAML Single Sign-On to bypass the verification step. EDIT: SAML SSO bypasses device activation (via Gorav)

You would need to figure out if the effort of any of these approaches is worth it versus just doing the verification process when you switch to a new device.

| improve this answer | |
  • 2
    Plus, SAML takes just minutes to set up (assuming the pre-reqs are already there), users don't have to remember a second login, and in many cases, they can actually be logged in automatically by their browser just based on their network credentials without any interaction on their part. – sfdcfox Apr 6 '16 at 3:27
  • 2
    For the record, this article confirms that saml bypasses identity verification help.salesforce.com/… – gorav Oct 17 '18 at 17:00
2

yes ,you can skip the verfication code by putting the Ip Ranges in Network access in the salesforce org.

0.0.0.0 - 255.255.255.255

Hope this helps you.

| improve this answer | |
  • 3
    I don't think this works anymore. Not on my orgs! – dacology Jun 15 '16 at 14:59
  • 2
    This doesn't work any longer, there are limitations to the size of the ip addresses. As a general rule of thumb, I advise only using specific ip addresses and having your users specify the addresses for the locations they're in. Having a broad IP address range isn't safe. – Medhanie Habte Oct 9 '16 at 21:32
0

if you are asking about Enable the SMS method of identity confirmation in Setup - Security Controls - Session Settings - Identity Confirmation - it has the following helptip:

To disable SMS as a method of confirmation, contact Salesforce support. The email method of identity confirmation can't be disabled.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.