Type at least 2 characters.

AI generatedAI generated This record is generated by AI from the cited source. How AI is used

SE

MFA requirement for single sign-on accounts

Announced since Sep 2026 notable

Salesforce announced that, in a future release, accounts using single sign-on will have to use MFA systems that send AMR and ACC claims; the requirement is not yet enforced.

Read vendor source (opens in a new tab)
help.salesforce.com Evidence for Announced · Sep 2026
Platform
Salesforce Marketing Cloud Engagement
Capability
Security & certifications · Governance
Vendor's name
Update Single Sign-On Accounts to Use MFA
First recorded
Record last updated

Record dates describe acquisition and updates, not human review. About corrections.

Lifecycle history 1 state

  1. AnnouncedSep 2026
    First recorded 27 Sep 2026 · recorded from the source history · vendor release notes · help.salesforce.com ↗

Record corrections 2

Changes made to this record after it was published, separate from the vendor's lifecycle states above. All corrections.

  1. Text
    Summary rewritten

    Before: Single sign-on accounts must now be updated to use multi-factor authentication.

    After: Salesforce announced that, in a future release, accounts using single sign-on will have to use MFA systems that send AMR and ACC claims; the requirement is not yet enforced.

    Summary no longer presents a future requirement as in force. Evidence: help.salesforce.com ↗

  2. Lifecycle state

    Lifecycle state: GA · Sep 2026 → Announced · Sep 2026

    The Winter '27 note says "This requirement isn't enforced in the current release. In a future release, all accounts that use single sign-on must meet this requirement." Evidence: help.salesforce.com ↗

Something wrong or out of date in this record? , ideally with a link to better evidence. How corrections work

Security & certifications on other platforms latest first

All Security & certifications changes →

More from SFMC Engagement in Security & certifications

Report an issue

Tell us what is wrong in this record. Reports are checked against public sources, with the same rules as every entry. How corrections work

Sent through Web3Forms. Nothing you send is published. How reports are handled.