Salesforce B2C Commerce 24.7 > Account Manager

Register Verification Methods for Multi-Factor Authentication

Multi-factor authentication (MFA) is an extra layer of protection beyond a single password.

With MFA, you enter multiple pieces of evidence – or factors – to prove your identity. The first factor is your username and password combination (something you know). Additional factors are verification methods that you have in your possession, such as an authenticator app or security key. MFA is required for all Account Manager users and can’t be turned off. The first time you log in, you’re prompted to register a verification method for MFA. The registration process connects the method you choose to your Account Manager account. You must supply a registered verification method each time you log in. You can register additional methods at any time from your account information in Account Manager.
Note: We highly recommend registering two or more methods so you have a backup if you forget or lose your primary method. You can register different types of methods (such as Salesforce Authenticator and a security key) or two instances of the same method type (such as two security keys or two different third-party TOTP authenticator apps).
  • Connect Salesforce Authenticator (Version 3 or Later) to Your Account for Identity Verification
    The Salesforce Authenticator mobile app is a fast and easy verification method for multi-factor authentication (MFA) logins. Register the app to connect it to your Account Manager account. To receive and approve push notifications sent to your mobile device, Salesforce Authenticator requires that you secure your mobile device with a security pin or face ID.
  • Verify Your Identity with a TOTP Authenticator App
    Register a third-party authenticator app, like Microsoft Authenticator or Google Authenticator, as a verification method for multi-factor authentication (MFA) logins. The app generates a verification code called a time-based one-time password (TOTP).
  • Register a Security Key for WebAuthn Identity Verification
    Register a FIDO U2F or WebAuthn (FIDO2) compatible security key as a verification method for multi-factor authentication (MFA) logins. To verify your identity, insert your security key into the appropriate port on your computer or mobile device to complete verification. You can register the same security key with multiple service providers and multiple Salesforce orgs and accounts. You can also register one key per account.

Infocenter Retirement: On June 30, 2023, the Infocenter was retired, and documentation currently hosted on the Infocenter will be published to Salesforce Help, Commerce Cloud Developer Center, and Salesforce B2C Commerce Developer Documentation Resources. For more information, see the release note.