1716832 - Enable 2-factor authentication for CA Community Licenses

Status: RESOLVED WONTFIX

(CA Program :: Common CA Database, task)

Description

[Kathleen Wilson]

I received a phone call from someone at Salesforce saying that all Salesforce logins will be required to be 2-factor auth by February 2022. So I did some research...

https://admin.salesforce.com/blog/2021/everything-admins-need-to-know-about-the-mfa-requirement
"Beginning February 1, 2022, Salesforce will require customers to enable multi-factor authentication (MFA) in order to access Salesforce products."
... "Enable MFA for users who log in to Salesforce products (including partner solutions) through the user interface."

https://help.salesforce.com/articleView?id=000352937&type=1&mode=1
See: 'Is MFA required for customer and partner Experience Cloud sites?'
"MFA is not required for your company's Experience Cloud sites, employee communities, help portals, or e-commerce sites/storefronts. You don't have to enable MFA for external users who access these sites. You can identify external users by these types of licenses:

• Community licenses"

As for CA Community Users, it now sounds like we do have to enable 2-factor authentication for them as well.

https://salesforce.stackexchange.com/questions/70272/two-factor-authentication-for-community-users/113371#113371
"Two-Factor Authentication is not available for users with a Partner Community or Customer Community license. ... However, there is a no-code workaround: you can implement Two-Factor Authentication for Community Users by creating a custom Login Flow. "

Comment 1

[Poonam Bhargava]

MFA is required for all internal users by Feb 2022. We already have it enabled for all our internal users. MFA is not required for customer community users.

Comment 2

[Kathleen Wilson]

https://help.salesforce.com/s/articleView?id=000352937&type=1
~~
Is MFA required for customer and partner Experience Cloud sites?
MFA is not required for your company's Experience Cloud sites, employee communities, help portals, or e-commerce sites/storefronts. You don't have to enable MFA for external users who access these sites. You can identify external users by these types of licenses:

• Community licenses
• External Identity licenses
• Employee Community licenses (either a Salesforce Platform license paired with a Company Community for Lightning Platform permission set license or a legacy Company Community license)
  ~~

This is in agreement with Comment #1, so I will close this item as WONTFIX for now.