To help you and your users prepare for upcoming multi-factor authentication (MFA) security requirements, Salesforce added an in-app reminder. If your org isn’t compliant with new MFA requirements, all users see a banner that alerts them about the upcoming changes.
Where: This change is available in Lightning Experience in all editions.
When: The in-app reminder is available on a rolling basis starting in May 2026. Salesforce enforces MFA security controls starting in June 2026.
How: The banner appears if your org meets any of these criteria:
- Single sign-on (SSO) is configured.
- On the Identity Verification page in Setup, the Require multi-factor authentication (MFA) for all direct UI logins to your Salesforce org setting is disabled.
- Users have the Waive Multi-Factor Authentication for Exempt Users permission.
- Phishing-resistant MFA methods (security keys and built-in authenticators) aren’t enabled as available verification methods.
The banner is visible to all users on every page that they access in Salesforce. Users can’t dismiss the banner.