How Does MFA Impact SalesForce Logins?

How Does MFA Impact SalesForce Logins?


If you want to establish a SalesForce connection within Sales Cookie, but your chosen SalesForce user account requires MFA (multi-factor authentication - also known as 2-factor authentication), authentication will fail. There are two ways to solve this problem.

Option 1 - Edit Existing Permission Set
  • Login to SalesForce as admin
  • Browse to Setup
  • Search for "Permission Sets"
  • Open the existing Permission Set applied to your chosen user account
  • Search for "Two" to locate permissions whose name starts with "Two" 
  • Select "Two-Factor Authentication For API Logins" in the autocomplete dropdown
  • Edit the existing Permission Set
  • Uncheck "Two-Factor Authentication for API Logins"
  • Save the existing Permission Set
    • Note: this will impact all assigned users



Option 2 - Create A New Permission Set
  • Login to SalesForce as admin
  • Browse to Setup
  • Search for "Permission Sets"
  • Create a new Permission Set
  •       We recommend cloning your existing Permission Set
  • Search for "Two" to locate permissions whose name starts with "Two"
  • Select "Two-Factor Authentication For API Logins" in the autocomplete dropdown
  • Edit the new Permission Set 
  • Ensure "Two-Factor Authentication for API Logins" is unchecked
  • Save the new Permission Set
  • Apply this new permission set to your chosen account

  • Choosing The Right Permission
    Do not confuse the "Manage Two-Factor Authentication in API" permission, with the similar-looking "Two-Factor Authentication for API Logins" permission. The permission which must be unset is called "Two-Factor Authentication for API Logins". 

    Allowing MFA For Web Logins
    It is perfectly OK to have "Two-Factor Authentication for User Interface Logins" checked as shown above. This will not affect API logins used by Sales Cookie. This allows you to continue using MFA for web logins, while allowing apps to connect without MFA.

      • Related Articles

      • How Can I Embed Dashboards Into SalesForce

        This article explains how you can embed incentive dashboards within SalesForce. Sales Cookie also supports SalesForce Connect. This allows you to natively retrieve Sales Cookie objects such as plans, calculations, users, etc. However, simple ...
      • Warning - Your Selected Date Field Could Cause Double-Crediting

        Applicability This warning applies to the following situation: You have chosen to import transactions automatically (hourly) from a connection Your chosen transaction date field is a date which changes frequently (ex: "last modified") Impact This may ...
      • How Secure Is Sales Cookie?

        Many SaaS products claim they are secure simply because they use SSL. The reality is that a SaaS solution requires many measures to be truly secure. Here is an overview of advanced security measures we implement to deliver world-class security. Some ...
      • Error - Too Many Fields

        Applicability This error applies to the following situation: You are importing transactions You have mapped a large number of fields Impact This error prevents you from importing transactions. Explanations There is a limit to the number of mapped ...
      • Error - Duplicate Mappings

        Applicability This error applies to the following situation: You are importing transactions You have multiple fields mapped to the same category This category requires a single mapping Impact This error prevents you from importing transactions. ...