---
schema_version: "1"
id: 0e8a990fe4b257d64f72325ea281f359493032e7e2c777fe641359ea36a30a39
title: View Phishing-Resistant, Standard, and Weak MFA Methods in the SAML Assertion Validator
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/release-notes/262-0-0/rn_security_saml_validator_enhancement.md
canonical_url: https://help.salesforce.com/s/articleView?id=release-notes.rn_security_saml_validator_enhancement.htm&release=262.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: f36077018f912e736eac5280a6a5be88d251743383ef97db42de48bc29bd04a1
description: Use the SAML Assertion Validator to determine whether your single sign-on (SSO) provider satisfies multi-factor authentication (MFA) requirements, including phishing-resistant MFA for privileged users. The validator now shows you whether your SSO provider’s authentication signals are classified as phishing-resistant, standard, or weak. Previously, it only classified values as strong or weak.
products:
  - Cross Cloud
release: "262"
---
# View Phishing-Resistant, Standard, and Weak MFA Methods in the SAML Assertion Validator

Use the SAML Assertion Validator to determine whether your single sign-on (SSO) provider satisfies multi-factor authentication (MFA) requirements, including phishing-resistant MFA for privileged users. The validator now shows you whether your SSO provider’s authentication signals are classified as phishing-resistant, standard, or weak. Previously, it only classified values as strong or weak.

**Where:** This change applies to Lightning Experience and Salesforce Classic in all editions.

**When:** This change is available on a rolling basis starting on July 15, 2026.

**Why:** By determining verification method strength, you can easily check whether your SAML SSO provider meets Salesforce MFA requirements. This includes the MFA requirement for employee users and the stricter phishing-resistant MFA requirement for privileged users, such as admins. For more information, see these articles.

- [Prepare for MFA Enforcement for All Employee Users](https://help.salesforce.com/s/articleView?language=en_US&id=005321561&type=1)
- [Prepare for Phishing-Resistant MFA Enforcement for Privileged Users including Admins](https://help.salesforce.com/s/articleView?id=005321563&type=1&language=en_US)

**How:** First, obtain a SAML assertion from your SSO provider. To access the SAML validator, from Setup, use the Quick Find box to find and select **Single Sign-On Settings**. Click **SAML Assertion Validator**. Enter your SAML assertion and run the validator. The validator displays all Authentication Context Class Reference (ACR) and Authentication Methods References (AMR) values that Salesforce detected in the SAML assertion. For each value, the validator tells you whether it’s phishing-resistant, standard, or weak.

#### See Also

- [_Salesforce Help_: MFA with an SSO Identity Provider](https://help.salesforce.com/s/articleView?id=xcloud.mfa_sso_thirdparty_idp.htm&language=en_US)