Two-factor authentication (2FA) for code uploads to the staging instance is required. Direct code uploads to the production instance aren’t allowed. Starting August 10, 2020, we automatically make configuration changes to meet these requirements on instances not in compliance.
How: To check current access settings for code uploads, go to . The message under the WebDAV Access/Cartridges heading indicates whether code upload is allowed or disallowed on production instances and whether a client certificate is required on staging instances.
To set access settings for code uploads, go to . On the staging instance, select Require Client Certificate for Code Uploads. On the production instance, select Disallow code uploads. After an administrator configures these settings, the option to revert the settings is no longer visible on the Access Restriction page. Only Salesforce Customer Support can revert the settings.