Prepare for new and upcoming security enhancements, and review new features that support multi-factor authentication and email domain verification.
- Review and Comply with Upcoming Security Requirements
To protect against evolving cybersecurity threats, Salesforce regularly strengthens security controls. Review new requirements for access controls, email verification, and connected apps and external client apps that access Salesforce data via OAuth (Open Authorization) flows. - Explore Features That Support MFA and Email Security
As security threats shift quickly, Salesforce develops features to help you meet the latest requirements. Review new features that support multi-factor authentication (MFA) and email domain verification. - Security Enhancements May Require Users to Reset Passwords
Because the security of your data is our number one priority, Salesforce is enhancing login security. If we detect a security-related issue with a user’s login information, such as credential stuffing, we revoke all of the affected user’s active sessions and refresh tokens and initiate a forced password reset. In addition, the user receives an automated email with instructions to reset their password. - Security Enhancements May Require API Reauthentication
Because the security of your data is our number-one priority, Salesforce is further enhancing the security of our APIs. If Salesforce detects suspicious API data-access behavior, we trigger automated actions in order to protect the account. In most cases, these actions include terminating user sessions and notifying the org admins via email. In more critical instances, when we detect extremely unusual behavior, these actions include freezing the user, revoking all access granted to them, and notifying the org admins via email. To resume after session termination, the user must log back in. To unfreeze a user, contact your Salesforce admin.