MFA will be required in Feb 2022.

Looking to make it easier on the users, and bypass it for trusted/whitelisted IP addresses.

I know about the Trusted Locations automation in the Authenticator app, but that's not good enough - it requires GPS, which most people usually have turned off. Users would have to get the phone and turn on GPS just to log in to Salesforce. That's not much different than clicking the "Authorize" button in the app.

Additionally, the app frequently does not recognize the location even with GPS enabled.

I have seen a solution of using Login Flows, but that does not apply here, because that solution uses a custom MFA, not a Salesforce-native soon-to-be-required MFA.

  • Is custom MFA something implemented outside of Salesforce? Please edit your question and provide more detail. do not reply in comments.
    – identigral
    Commented Feb 18, 2021 at 16:49

3 Answers 3


I have just had a discussion with a Salesforce Support Agent about this topic today. Unfortunately, there is no options to bypass it at the moment.

They confirmed it.

The trusted ip ranges can be used to bypass primary methods like Email, SMS. MFA is the second method.

I created an idea here: https://trailblazer.salesforce.com/ideaView?id=0874V000000lgRZQAY

Let's vote for it

  • voted! hopefully more people will start looking for this and voting as the deadline approaches Commented Apr 28, 2021 at 16:33

With Salesforce Authenticator, if you turn on location services in the app, you can mark a "Trusted Location" and it won't ask you for a code. Microsoft doesn't have that.


I believe you need to log in with a combination of:

  • Trusted Device (ask your IT support and/or Salesforce what is it)
  • Trusted Network

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .