Salesforce Identity and Access Management now supports built-in authenticators, tracking of enforced multi-factor authentication (MFA) challenges, and Identity Connect 7.1. Prepare for the upcoming MFA requirement with the MFA Rollout Pack. For Salesforce Customer Identity, benefit from a new email template that provides consistent branding and control over customer communications.
- Salesforce Identity for Your Employees
Users can now register biometric built-in authenticators, such as Touch ID, Face ID, and Windows Hello. You can monitor which users register built-in authenticators and when they use them. As you prepare for the multi-factor authentication (MFA) requirement, check out the MFA Rollout Pack for customizable templates. Also, users are no longer subject to MFA challenges in Salesforce when they log in through an authentication provider that supports single sign-on. And you can track enforced MFA challenges with four new verification history fields in users reports. For increased security, configure forced authentication when Salesforce is acting as a SAML identity provider. Salesforce now prevents users from logging in with a username and password as GET query string parameters to the login URL. Upgrade to Identity Connect 7.1 as soon as possible because Salesforce no longer supports downloads for Identity Connect 2.1 and Identity Connect 3.0.X.X. For improved functionality, customize the way your JIT handler processes user information, include refresh tokens in the OAuth 2.0 user-agent flow, and authorize additional access to Salesforce CDP data. - Salesforce Identity for Your Customers
Maintain consistent branding for your site and control customer communications with the Device Activation email template. When you’re using Apex to manage identity verification for Experience Cloud sites, guarantee that self-registration verification messages are sent in the right language. To improve privacy and security, we shortened durations of the lloopch_loid and hideIdentityDialog cookies and increased the length of one-time passwords.