---
schema_version: "1"
id: 900eb81582faba2630b2521433854b21e13e4a24df7a3f7704ee67f296d374e4
title: Set Up Multi-Factor Authentication for Salesforce Spiff
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/sales/264-0-0/spiff_mfa.md
canonical_url: https://help.salesforce.com/s/articleView?id=sales.spiff_mfa.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 176173909d2bdf2fc1c3d0c8b88a13f711db7d890630b6cec157665afba9a78f
description: Multi-factor authentication (MFA) reduces the risk of unauthorized access to systems by requiring users to provide two or more verification factors, such as a password and mobile device with an authenticator app. MFA is optional in Salesforce Spiff and isn't available if your company uses single sign-on (SSO) authentication.
products:
  - Sales Cloud
  - Sales Enablement
release: "264"
---
# Set Up Multi-Factor Authentication for Salesforce Spiff

Multi-factor authentication (MFA) reduces the risk of unauthorized access to systems by requiring users to provide two or more verification factors, such as a password and mobile device with an authenticator app. MFA is optional in Salesforce Spiff and isn't available if your company uses single sign-on (SSO) authentication.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: both Salesforce Classic (not available in all orgs) and Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>Enterprise</strong>, <strong>Unlimited</strong>, and <strong>Developer</strong> Editions</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available for an additional cost in: <strong>Professional</strong> Edition with Web Services API Enabled</td></tr></tbody></table>

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d44493e77">User Permissions Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d44493e77 ">To set up MFA in Spiff:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d44493e77 ">
              <p>A Spiff <a href="https://help.salesforce.com/s/articleView?id=sales.spiff_users_roles_and_permissions.htm&amp;release=264.0.0&amp;type=5" title="Give users the appropriate level of access so they can be successful in Salesforce Spiff, and enforce the principle of least privilege. Assign a default role to each user, or create custom roles with access to specific Spiff functionality.">user role</a> with this permission turned on.</p>
              <p style="margin-bottom:0;">SSO Settings: Manage</p>
            </td>

          </tr>
        </tbody>
      </table>

![Important](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-sales-sales_performance_management-264-0-0-production-enus/b1f2feb4-26b8-444f-97f7-be2349869d93/images/icon_important.png)

Important The only supported secondary authentication factor is an authenticator app.

1. From the Admin menu, go to **Settings**, and then select **Security**.
2. Turn on **Enable Multi-Factor Authentication (MFA)**.

The next time a user tries to log in to Spiff, they're prompted to set up an. authenticator app.

If a user receives a new device or there are issues with the current MFA, you can reset MFA in the user's profile.