7

Some time ago I had to enable the MyDomain Feature in order to enable custom lightning components on a Sandbox-Org as described here. Until that the two factor authentication was working with password and security codes send by email until then - which was the desired and expected situation.

During the activation of MyDomain this method was replaced unasked and unwanted so that now no longer a code is send by email but users are forced to use the Salesforce Authenticator App installed on a mobile device.

We don't want to use this mechanism and the app, because we don't like it at all. Is there any way to completely disable this method and go back to security codes via email?

It looks like this on the desktop:

enter image description here

It seems to offer a way out (Link "Use a different Verification Method" in the bottom)

enter image description here

But neither of the option is what we are looking for

enter image description here

I have tried to find a way to configure it reading the documentation here https://help.salesforce.com/articleView?id=basics_identity.htm&type=0&language=en_US&release=208.8

But I was not able to find a setting to get rid of the Authenticator App again.

Improve this question
4
  • 1
    Check any permission set is not defined with 2FA enabled. If it is then edit the permission set, or you can remove users from that permission set.
    – Sagar Pareek
    Commented Jun 14, 2017 at 7:45
  • Thanks @Sagar - So if on one permission set 2FA is not enabled, the Authenticator App is just "jumping in"? And this happens just unasked, unwanted and undocumented? Hard to believe... And why did the Authenticator App starts anoying just during MyDomain activation, while the org was working before with the security codes by email? There were NO CHANGES AT ALL on permission sets nor on profiles? Do you have any link to further documentation on why you are suggesting to check the permission sets? Or is this just your guess?
    – Uwe Heim
    Commented Jun 14, 2017 at 9:08
  • This is not a guess, AFAIK there is a way to setup 2FA using permission sets - so just to have check i suggested to check permission sets automationchampion.com/2013/10/17/…
    – Sagar Pareek
    Commented Jun 14, 2017 at 9:18
  • I assume you checked all session settings? i.imgur.com/f4uWICF.png This does not seem related to mydomain to me but rather a new quirk. there's another known issue aronud identity currently: success.salesforce.com/…
    – Christian Szandor Knapp
    Commented Jun 14, 2017 at 12:44

3 Answers 3

Reset to default
3

I know this post is old, but had to disconnect the app for a user in order to allow her to authenticate without the app so I figured I would reply.

The system administrator can disconnect app from the user profile. On the user profile, find "App Registration: Salesforce Authenticator" and then hit "disconnect".

Improve this answer
0

You may have to disable the "Multi-Factor Authentication for User Interface Logins" on the User profile.

I couldn't find an adequate support document on turning off the Authenticator connection either. One article mentions only disconnecting Authenticator in the Personal Settings. Another mentions disconnecting only the User Settings. But you ALSO have to disconnect the "Multi-Factor Authentication for User Interface Logins" in the Profile Settings. Until I found the Profile Settings, disconnecting the Authenticator on the Personal or User Settings seemed to work for a second, but when I refreshed the pages it was connected again. Support needs to mention all three means of disconnecting. Because as we get closer to the MFA deadline, a lot more users will be stumble in the web of MFA and want out.

Improve this answer
0

MFA disable setting

Here is a setting which allows to disable MFA. However, if I understood correctly, Salesforce will force MFA for all customers gradually, and the whole customer base will be moved to it by spring 2024.

However, there is an option to bypass MFA by creating a separate user permission set, you can check the details here : https://help.salesforce.com/s/articleView?id=sf.security_mfa_exclude_exempt_users.htm

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .