An integration or API user account can experience login issues after MFA enforcement. Although API logins don’t require MFA, some integrations use authentication methods that complete a user interface (UI) login, which requires MFA.
These authentication methods use UI logins.
- OAuth web server flow
- OAuth user-agent flow, which is scheduled for retirement.
- OAuth username-password flow, which is scheduled for retirement.
- SOAP login(), which is scheduled for retirement.
- To see which authentication methods your apps use, review Login History.
-
In the Login Subtype field, check for these OAuth 2.0 flows.
- OAuth Web-Server
- OAuth User-Agent
- OAuth Username-Password
-
To check whether the app uses SOAP login() calls, look for these entries.
- Login Subtype: SOAP API
- Login Type: Other Apex API or Partner Product
- API Type: SOAP Enterprise, SOAP Partner, or SOAP Tooling
- To eliminate the UI login, migrate affected integrations to the JWT bearer flow or the client credentials flow.