When a user logs in to Marketing Cloud Intelligence for the first time using Multi-Factor Authentication, the user must select at least one verification method. It’s recommended to provide users with several verification options.
Email and SMS text messages aren’t allowed as a second factor for MFA.
Supported verification methods:
- Salesforce Authenticator
- A Salesforce mobile app that provides secure and fast MFA via push notifications. It’s highly recommended that users set up a PIN or biometric requirement on their mobile device to ensure that unauthorized parties can’t access Salesforce Authenticator. For more information, see the Salesforce Authenticator web page.
- One-time password generator
- A third-party authenticator app, such as Google Authenticator or Authy, that generates specific time-based, one-time passcodes that users enter when they log in.
- Security key
- A small physical device, such as a Yubikey or Google Titan Key, that users connect to their computers when logging in.
- Built-in authenticator
- A service, such as Windows Hello or Touch ID, that verifies a user’s identity with a fingerprint, iris, or facial recognition scan. This method is bound to a specific device, and users must register a built-in authenticator on each device that they log in from.
- Recovery code
- We recommend registering this method as a backup option only. Generates a list of 10 codes that you can copy or download. Each code can be used only once. This method doesn’t require additional devices.