Salesforce Docs Portal

Register a Third-Party Authenticator App as an Identity Verification Method for Salesforce Orgs

Register a Third-Party Authenticator App as an Identity Verification Method for Salesforce Orgs

Register a third-party authenticator app so you can use it to verify your identity when logging in with multi-factor authentication (MFA) or if you receive a device activation challenge. Authenticator apps, such as Google Authenticator, Microsoft Authenticator, or Authy, generate verification codes that you enter in Salesforce to verify your identity. There are mobile apps, browser extensions, and desktop options such as most password managers. You can use any third-party product that generates time-based one-time password (TOTP) codes. The registration process sets up your authenticator app as a personal verification method by creating a connection between your Salesforce account and the app.

Required Editions

Available in: Both Salesforce Classic and Lightning Experience
Available in: all editions

If you didn’t register a verification method before MFA was turned on for your org, you’re prompted to do so when you log in. Follow the onscreen instructions to select and register an authenticator app, using Steps 1 and Steps 5 through 7 here for extra guidance. If you’re already logged in, you can register an authenticator app from your personal settings in Salesforce by following these steps.

  1. Install a third-party authenticator app on your mobile device or computer. You can use any authenticator app that supports the TOTP algorithm (IETF RFC 6238).
  2. From your personal settings, enter Advanced User Details in the Quick Find box, then select Advanced User Details. No results? Enter Personal Information in the Quick Find box, then select Personal Information.
  3. Find App Registration: One-Time Password Authenticator, and click Connect.
  4. For security purposes, you’re prompted to log in to your account.
  5. For mobile authenticator apps, use the app to scan the QR code displayed by Salesforce.
    If you’re using a desktop app or you can’t scan the QR code, click I Can’t Scan the QR Code. Salesforce displays a security key. In the authenticator app, enter your username and the displayed key.
  6. In Salesforce, enter the code generated by the authenticator app in the Verification Code field.
    The authenticator app generates a new verification code periodically. Enter the current code.
  7. Click Connect.
Note
Note To help keep your account secure, we send you an email notification whenever a new identity verification method is added to your Salesforce account.

Your authenticator app is now registered as a verification method. When logging in with MFA and Salesforce asks you to verify your identity, enter a code generated by the app and click Verify.

See Also