For most tenants, multi-factor authentication (MFA) is integrated with the Marketing Cloud Engagement login experience and can’t be disabled. If Salesforce hasn’t made MFA mandatory for your tenant yet, you should do so yourself as soon as possible. Follow these steps to transition from Identity Verification (IDV) to multi-factor authentication (MFA).
This process requires an Engagement admin account at the top-level account of a tenant enabled with these permissions.
MFA requires that you add several new IP addresses to your allowlist. Review this list for the correct values.
Before making MFA mandatory for your account, communicate the time and date of this change to your users. Include information about the benefits of MFA, the importance of adoption, and the verification method options in your announcement. This advance notice and guidance helps your users obtain and register their MFA verification methods. We recommend that users register multiple verification options to ensure that they maintain access to their account.
To require MFA:
- Log in to Engagement.
- Hover over your name, and click Setup.
- Click Security, and select Multi-Factor Authentication.
- Click Edit.
- Select Require Multi-Factor Authentication.
- Save your changes.
- Log out.
When MFA is mandatory, all users in a tenant must register at least one verification method before they can access their account. If a user doesn't have a registered method, they're prompted to set one up the next time they log in. They use that verification method to prove their identity for each subsequent login. See Configure MFA Verification for Marketing Cloud Engagement Logins for more guidance.