When a user logs in to Marketing Cloud Intelligence Data Pipelines for the first time using MFA, the user must select at least one verification method.
Email and SMS text messages aren’t allowed as a second factor for MFA, because email credentials can be compromised and text messages can be intercepted.
Supported verification methods:
- Salesforce Authenticator—A Salesforce mobile app that provides secure and fast MFA via push notifications. It’s highly recommended that users set up a PIN or biometric requirement on their mobile device to ensure that unauthorized parties can’t access Salesforce Authenticator. For more information, see the Salesforce Authenticator web page.
- One-time password generator—A third-party authenticator app, such as Google Authenticator or Authy, that generates specific time-based, one-time passcodes that users enter when they log in.
- Security key—A small physical device, such as a Yubikey or Google Titan Key, that users connect to their computers when logging in.
- Built-in authenticator—A service, such as Windows Hello or Touch ID, that verifies a user’s identity with a fingerprint, iris, or facial recognition scan. This method is bound to a specific device, and users must register a built-in authenticator on each device that they log in from.
- Recovery code—Generates a list of 10 codes that you can copy or download. Each code can be used only once. This method doesn’t require additional devices. Recovery codes are only recommended as a back up option and not your primary verification method. If you run out of recovery codes, contact your Datorama Admin.