With MFA becoming enabled and eventually required in SFMC, I was curious how partners/3rd parties are handling this requirement, when multiple individuals share the same user login?

It seems all methods route towards a mobile device for authentication. Would we each need to download an authenticator app and validate through there, with one entry for each account? A more scalable solution would be preferred, if it exists.

  • What's not scalable about that? – identigral Sep 1 at 19:53
  • If I'm understanding correctly, each employee would have to authenticate and maintain a list (100+) of authenticator entries, and add new ones going forward. – AnonWonderer Sep 1 at 23:04
  • 1
    If you have 100+ accounts, then yes, it'll be painful. In that case our recommendation is to use an external identity provider (IdP) and implement SSO from there to all MC accounts. You'll skip MFA on MC side and enable MFA on IdP side. An instance of SF core cloud/org could act as an IdP. – identigral Sep 1 at 23:10

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.