Disable account verification for Scratch Org users

Question

I sometimes need other people to log into a scratch org to to some QA/testing, so I want to create a new user for the scratch org, or at least generate a password for the default scratch org user. I've created a user with with the sfdx force:user:password:generate command, but whenever i try to login in with that user SF want's to verify the account by sending a code to my email. And the problem is that it does this everytime it's a "new" browser.

This makes it a bit problematic to send that username/password to people on my team since the code comes to my email. The username/password should ideally be able to be shared with multiple team members.

Is there a way to disable this verification step on scratch org users?

Answer 1

You can do that by setting Trusted IP Ranges for Your Organisation.

From the documentation - Trusted IP Ranges define a list of IP addresses from which users can log in without receiving a login challenge for verification of their identity, such as a code sent to their mobile phone.

From Setup, enter Network Access in the Quick Find box, then select Network Access. Click New. Enter a valid IP address in the Start IP Address field and a higher IP address in the End IP Address field. The start and end addresses define the range of allowable IP addresses from which users can log in, including the start and end values. If you want to allow logins from a single IP address, enter the same address in both fields.

Click Save.

Example below