Coming Soon!
As of February 1st, 2022 Salesforce is implementing Multi-factor Authentication process for EVERY User of improveit 360. Users will be required to download the Salesforce Authenticator App to authenticate their identity when logging into improveit 360. Follow along with this video and click-path Article to Enable Multifactor Authentication in your system today.
See also: Salesforce Multifactor Authentication FAQ Guide
If you have not completed the authentication, you will see this message when attempting to Login to improveit 360:
See also: Downloading and Using the Salesforce Authenticator App
improveit 360 has created a Permission Set to allow MFA to function with the Salesforce Authenticator. This Permission Set will be rolled out in Package v34.0.
This Article covers the Setup steps to give improveit 360 Users access to the Multi-Factor Authentication required feature, using the Salesforce Authenticator App.
Step 1: Clone Permission Set
Navigate to Setup
In the Quick Find enter Permission Sets and then click on Permission Sets
Locate the MFA Authorization for User Logins Permission Set and click Clone
Name the new Permission Set, MFA Logins, be sure the API Name is also unique:
Step 2: Adjust System Permissions
Click on the Name of new Permission Set you've just created:
Under the System menu, click on System Permissions
Click Edit
Enable Multi-factor Authentication for User Interface Logins
NOTE: Be sure you Enable "Multi-factor Authentication for User Interface Logins" and NOT "Manage Multi-factor Authentication for User Interface" Note the difference below. The highlighted GREEN Setting to the one to use.
Click Save, the system will alert you to the System Change in a pop-up window. You will need to click Save in this pop-up window:
Step 3: Assign MFA Logins Permission Set to Users
On the Permission Set, click Manage Assignments
Click Add Assignments
Choose all the Users who need to have Multi-factor Authentication access, and click Assign:
Troubleshooting Tip:
If you see an error message like the ones below, you most likely have added an incorrect Setting to the Permission Set in the System Permissions menu. Unfortunately, you cannot Disable the setting once it has been Enabled.
If you see this Error, Return to Step 2, and Clone the Permission Set again. You will need to start over. Be sure to only select "Multi-factor Authentication for User Interface Logins" and NOT "Multi-factor Authentication for User Interface" Note the difference below. Follow along with Steps 1, 2 & 3 again to re-create the New Permission Set with the appropriate setting and assign it to Users.
Step 4: Train your Users on Downloading and Using the Salesforce Authenticator App
Open either the Google Play Store or the Apple App Store from your Mobile device.
Locate the Salesforce Authenticator App and download it to your device.
Launch the Salesforce Authenticator App
Enter your mobile phone number
Then, connect to your improveit 360 User by entering your Username and Password
The Salesforce Authenticator will provide a Two-Word Phrase to use as a passcode:
Go to https://login.salesforce.com/ on any web browser, and enter your Login credentials.
Enter the Two-Word Phrase on the Login screen and click Connect:
This Connects your Authenticator App with the Account related to the Username and Password you've entered.
You should be logged in successfully!
Once this initial connection is established, you will return to this Salesforce Authenticator App to access a six-digit code if logging in again outside the same IP Range, or on a new device.
Once the connection is established within a specific network, you will not be asked for a six-digit code but you will be asked to Approve the login request from your mobile device, every time you login to improveit 360.
Note: If you are accustomed to accessing multiple Salesforce environments (like a Sandbox) you will use the Salesforce Authenticator App for both Accounts. In the screen shot below, note the button: Add an Account at the bottom of the page. Also note there are two Accounts linked to my Authenticator App:
What if I am using the improveit 360 Go Mobile App to login?
When MFA is enabled, you will see this message when logging into the improveit 360 Go Mobile app:
You will have a new notification from the Salesforce Authenticator App to Approve (Note: the device shows Unknown WebKit Mobile and the mobile device's operating system):
Step 5: (Optional) Extend the Session Timeout Setting
If your Users are being auto-logged out due to inactivity and are being required to re-authenticate, we recommend extending the Session Time out setting for your Users.