Enhance security by controlling who can authenticate using SOAP API login() with the new Any API Auth permission. The permission is enforced by default in newly created orgs. You can choose to enable it in existing orgs.
Where: This change applies to Lightning Experience and Salesforce Classic in all editions.
How: For existing orgs, you can enable this feature in Setup. Select Enable SOAP API login() to users with the Use Any API Auth user permission option.