Hi everyone,
I have a question regarding the upcoming MFA enforcement for all employee users.
Let's consider this scenario:
If organization has five administrators who all use the same System Administrator username and password (shared login). The email address associated with that Salesforce user belongs to me.
When Salesforce prompts us to register a Passkey, I complete the registration using my device because the email is mine. After that, when another administrator tries to log in using the same shared credentials, Salesforce requires the registered passkey, which only I have. As a result, the other admins are unable to log in. How should organizations handle this situation?
- Is sharing one System Administrator account no longer supported with passkeys?
- Does Salesforce expect every administrator to have their own individual user account?
- If a shared admin account must be used (for legacy reasons), what is the recommended approach to satisfy the new MFA/passkey requirement?
I'd appreciate any guidance or best practices from the community. Thanks!
Hi Sourabh,
Though sharing one admin account not supported using passkey, Salesforce also have ways to bypass this validation.
Method 1: Temporary Verification Code
Steps to Generate a Temporary Verification Code
Step 1 : Go to the User record and click the Generate link next to Temporary Verification Code (expires in 1 to 24 hours).
Step 2 : Specify the number of hours for which the verification code should remain valid.
This is one method of bypassing passkeys.
Method 2: Salesforce CLI Authentication (VS Code needed)
https://www.aintiram.com/blog-bypass-pass-key-salesforce-authenticationBoth methods are explained in this blog, do check.