3

I have very mixed feelings towards the enforcement of MFA by Salesforce, which as a consequence enforces the usage of authenticator apps. I have over 400 developer orgs to deal with. I have to login on dozens of orgs every day.

Right now, I'm using email verification. I can do everything on desktop in one smooth clicking sequence with darg&drop of the code from my email.

With a authenticator app on a phone, this process would involve my phone and even worse: the annoying manual typing of the code. With my bare fingers! Error prone and disruptive. This sucks.

Doing it one single time is just a little distraction. But doing it many times a day it hurts. I have to use several different browsers and several different computers and different devices to login. So I really have to re-authenticate many many times a day.

Currently we are using the Google Authenticator app on the phone. Is there a viable 100%-desktop-focused and mobile-FREE method to login and authenticate in the upcoming MFA era?

We have already tried some desktop apps but they did not work well. We are looking for something other people have used already successfully to avoid a huge waste of time to test them all.

Any suggestions are welcome!

2
  • 1
    Sounds like a perfect fit for Environment Hub. If you can't do that, then inbound SSO with MFA at the identity provider would be our 2nd recommendation.
    – identigral
    Jul 8 at 15:21
  • Have you tried Lightning Login? Jul 14 at 2:19
2

I've had no issues with Authy desktop (on a Windows 10 PC).

You can add the salesforce account directly through the desktop app and get the token as well.

I have it on my phone as well and I believe this is required (as it's connected to your phone number).

Adding tokens/sites syncs across all your devices (Tablet, Phone, Desktop).

enter image description here


It might also be worth testing out whether the trusted location in Salesforce Authenticator will help if you're working from the same location and not using VPN. This would eliminate your pain of having to look at your phone or manually copy the code as it would auto-verify you.

1

I'd highly recommened Authy by Twilio.

I migrated from Microsoft Authenticator to Authy a few months back and they've fit my needs (multiple orgs, desktop-first) perfectly. Free of cost, No-ads and no 'premium' subscriptions.

1

With 400 orgs that you potentially need to access, I assume you're using a password manager of some sort? As far as I know the market-leaders generally have MFA capabilities built in. Certainly using 1Password, I can log in to an org with a keyboard shortcut, and it automatically loads the current 2FA token into my clipboard. This is something we've had in general use for years, with widespread adoption of 2FA.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.