---
schema_version: "1"
id: 52c10b59c60cee876ea36e1ec8aa86afa9fe6d0dce2c7c5c7925681762ab7692
title: Troubleshoot Integration or API User Account Login Issues After MFA Enforcement
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/mfa_passkey_integration_api_login_after_enforcement.md
canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.mfa_passkey_integration_api_login_after_enforcement.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 9652aadb90bde31a1c510709acf05c7708f9fbd2256f06e2572379fac99068ee
description: An integration or API user account can experience login issues after MFA enforcement. Although API logins don’t require MFA, some integrations use authentication methods that complete a user interface (UI) login, which requires MFA.
products:
  - Security
release: "264"
---
# Troubleshoot Integration or API User Account Login Issues After MFA Enforcement

An integration or API user account can experience login issues after MFA enforcement. Although API logins don’t require MFA, some integrations use authentication methods that complete a user interface (UI) login, which requires MFA.

These authentication methods use UI logins.

- [OAuth web server flow](https://help.salesforce.com/s/articleView?id=xcloud.remoteaccess_oauth_web_server_flow.htm&language=en_US)
- [OAuth user-agent flow](https://help.salesforce.com/s/articleView?id=xcloud.remoteaccess_oauth_user_agent_flow.htm&language=en_US), which is scheduled for retirement.
- [OAuth username-password flow](https://help.salesforce.com/s/articleView?id=xcloud.remoteaccess_oauth_username_password_flow.htm&language=en_US), which is scheduled for retirement.
- [SOAP login()](https://help.salesforce.com/s/articleView?id=005132110&type=1&language=en_US), which is scheduled for retirement.

1. To see which authentication methods your apps use, review [Login History](https://help.salesforce.com/s/articleView?id=xcloud.users_login_history.htm&release=264.0.0&type=5 "As an admin, you can monitor all attempts to log in to Salesforce and to your Experience Cloud sites. The Login History page shows up to 20,000 records of user logins for the past 6 months. To see more records, download the information to a CSV or GZIP file.").
2. In the Login Subtype field, check for these OAuth 2.0 flows.
    - OAuth Web-Server
    - OAuth User-Agent
    - OAuth Username-Password
3. To check whether the app uses SOAP login() calls, look for these entries.
    - Login Subtype: SOAP API
    - Login Type: Other Apex API or Partner Product
    - API Type: SOAP Enterprise, SOAP Partner, or SOAP Tooling
4. To eliminate the UI login, migrate affected integrations to the [JWT bearer flow](https://help.salesforce.com/s/articleView?id=xcloud.remoteaccess_oauth_jwt_flow.htm&language=en_US) or the [client credentials flow](https://help.salesforce.com/s/articleView?id=xcloud.remoteaccess_oauth_client_credentials_flow.htm&language=en_US).

#### See Also

- [Troubleshoot Passkey Issues](https://help.salesforce.com/s/articleView?id=xcloud.mfa_supported_verification_methods_bia.htm&release=264.0.0&type=5 "When employee users log in and register for multi-factor authentication (MFA), passkeys are the default option. Identify and resolve issues with passkey prompts, setup, login, and more.")