We have Community with two-factor authentication in place, implemented in Login flow. We would like the second factor to be requested only once per 30 days on the device. If the user comes from another device, the second factor needs to be enforced. We wanted to leverage Login History but there is no unique identifier of the device. We wanted to use cookie based on this page, but no matter what we set to maxAge, it still expires after the browser is closed. Any suggestion what we could do? Is there a way to set Expires instead of maxAge?

  • 1
    I'm pretty sure you can only use persistent cookies in Salesforce Sites, not in Communities, but I'm having a hard time finding documentation to confirm that. I'll keep looking for a bit, and see whether there might be an alternate solution. Sep 22, 2018 at 15:29

1 Answer 1


As a solution, we build custom javascript method to create and check the cookie. It is triggered during the login flow.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .