Security · in 45 of 68 releases
MFA, SSO and Login
First in the release notes in Summer ’05, June 2005. 176 notes since, the most in Winter ’14.
- Notes
- 176
- First
- Summer ’05
- June 2005
- Most notes
- Winter ’14
- 10 notes
- Latest
- Winter ’27
A note counts here when its title or opening lines name MFA, SSO and Login, by any of the names Salesforce has used for it.
The first notes, Summer ’05
- Single Sign-Onp. 91
Retirements and deprecations
- Triple DES for SAML Single Sign-On Is No Longer Supportedp. 1467
- Triple DES for SAML Single Sign-On Stops Working in Summer ’26p. 1207
- Triple Data Encryption Standard (Triple DES) for SAML Single Sign-On Stops Working in Winter ’26p. 1055
- Update API Requests to Use Your My Domain Login URLp. 377
- Triple DES Encryption Is No Longer Supported for SAML Single Sign-Onp. 982
- The Multi-Factor Authentication Assistant in Setup Is No Longer Needed and Discontinuedp. 820
- Prepare for the End of Some My Domain Redirectionsp. 604
- SAML Signing Certificate Has Been Retiredp. 502
- SAML Signing Certificate Is Being Retiredp. 501
Every note, by release
Newest first. Each title links to its page in Salesforce’s release notes.
Winter ’271
Summer ’269
- Use Phishing-Resistant Verification Methods for Multi-Factor Authenticationp. 615
- Migrate to a Multiple-Configuration SAML Framework (Release Update)p. 1466
- Triple DES for SAML Single Sign-On Is No Longer Supportedp. 1467
- Disabling External Client Apps Now Blocks SAML Loginp. 1471
- View Phishing-Resistant, Standard, and Weak MFA Methods in the SAML Assertion Validatorp. 1482
- Added, Removed, and Reclassified Single Sign-On Authentication Signals for Multi-Factor Authenticationp. 1483
- External Auth Identity Provider Callback URL Uses My Domainp. 1487
- Authenticate Microsoft Teams Users with Single Sign-Onp. 1591
- Centralize Point of Sale Security with Enterprise Single Sign-Onp. 667
Spring ’266
- Log In Faster with Single Sign-Onp. 1023
- Device Activation Is Required for Single Sign-Onp. 1202
- Migrate SAML-Enabled Connected Apps to External Client Appsp. 1204
- Migrate to a Multiple-Configuration SAML Framework (Release Update)p. 1205
- Triple DES for SAML Single Sign-On Stops Working in Summer ’26p. 1207
- Check Authentication Method Strength with the SAML Assertion Validatorp. 1210
Winter ’262
Summer ’258
- Use Your Org’s My Domain Login URL in API Calls (Release Update)p. 462
- Simplify Single Sign-On Registration with Flow Builderp. 553
- Build Single Sign-On Registration Handlers Without Codep. 1050
- Migrate to a Multiple-Configuration SAML Framework (Release Update)p. 1052
- Triple Data Encryption Standard (Triple DES) for SAML Single Sign-On Stops Working in Winter ’26p. 1055
- Verify SAML Integrations (Release Update)p. 1053
- Integrate Service Providers as External Client Apps with SAML 2.0p. 1060
- Secure Contact Updates with Two-Factor Authenticationp. 339
Spring ’256
- Update API Requests to Use Your My Domain Login URLp. 377
- Use Multi-Factor Authentication for Password Resetp. 974
- Integrate Single Sign-On Service Providers with the External Client Apps Frameworkp. 981
- Migrate to a Multiple-Configuration SAML Framework (Release Update)p. 984
- Triple DES Encryption Is No Longer Supported for SAML Single Sign-Onp. 982
- Verify SAML Integrations (Release Update)p. 983
Winter ’254
Summer ’243
Spring ’243
Winter ’243
Summer ’235
- Multi-Factor Authentication (MFA) Auto-Enablement Continues with Summer ’23p. 87
- Continue to Log My Domain Redirectionsp. 619
- Identify the Origin of Requests to Previous My Domain URLsp. 619
- Build a Native Single Sign-On Experience in a Third-Party Appp. 630
- Track the Source of My Domain Redirectionsp. 638
Spring ’233
Winter ’2310
- Be Ready for Multi-Factor Authentication Auto-Enablementp. 83
- Identify Your Redirected My Domain Hostnamesp. 655
- Plan for a My Domain Changep. 656
- Review New Guidance on Updating Authentication After a My Domain Changep. 656
- Learn More About My Domain Hostnames and Redirectionsp. 656
- My Domain Login Page Was Changedp. 660
- Learn to Enable Multi-Factor Authentication with Trailheadp. 664
- Get More Guidance from the Multi-Factor Authentication Assistantp. 664
- Upgrade SAML Single Sign-On Framework (Release Update)p. 666
- Log Your Redirected My Domain Hostnamesp. 671
Summer ’227
- Set Up Single Sign-On with Microsoft Credentialsp. 303
- Upgrade Your SAML Framework (Release Update)p. 304
- Multi-Factor Authentication Enforcement for Quip Happens in Mayp. 492
- Improve Code Security with My Domain Loginsp. 610
- Enable Multi-Factor Authentication for Your Entire Orgp. 614
- Bypass MFA Challenges for Single Sign-On Auth Provider Logins (Release Update)p. 615
- Upgrade SAML Single Sign-On Framework (Release Update)p. 617
Spring ’229
- Get Ready for the Multi-Factor Authentication Requirementp. 74
- Require Multi-Factor Authentication for Logins to Subscriber Orgs (Release Update)p. 232
- Set Up Single Sign-On with Slack Credentialsp. 348
- Get Ready for Upcoming Multi-Factor Authentication Enforcementp. 481
- Disable Redirections from Your Previous My Domainp. 579
- Salesforce Support Users, Partner Support Users, and Subscribers with High-Assurance Sessions Bypass Multi-Factor Authentication During Log In Asp. 582
- Bypass MFA Challenges for Single Sign-On Auth Provider Logins (Release Update)p. 584
- Manage Single Sign-On User Mappingsp. 584
- Use a SAML Digest Algorithm Based on Your Request Signature Methodp. 585
Winter ’229
- Get Ready for the Future Requirement to Enable Multi-Factor Authentication (MFA)p. 73
- Simplified Multi-Factor Authentication in the Gmail Integrationp. 538
- Simplified Multi-Factor Authentication in the Outlook Integrationp. 542
- Deploy a My Domain (Release Update)p. 564
- Require SOAP API Calls to Log In with My Domainp. 565
- Get Users Ready for Multi-Factor Authentication with Change Management Resourcesp. 570
- MFA Challenges for Authentication Provider Single Sign-On Logins Are No Longer Enforcedp. 570
- Customize How Just-in-Time Provisioning Handlers Process Attributes in SAML Assertionsp. 572
- Require Users to Reauthenticate When Accessing Service Providers with Single Sign-Onp. 571
Summer ’215
- Future Requirement to Enable Multi-Factor Authentication (MFA)p. 68
- Require Multi-Factor Authentication for Logins to Subscriber Orgs (Update, Postponed)p. 254
- Get More Guidance from the Multi-Factor Authentication Assistantp. 587
- Deploy a My Domain (Previously Released Update)p. 595
- Access the Latest Single Sign-On (SSO) Content in Salesforce Helpp. 650
Spring ’215
Winter ’219
- Renamed Two-Factor Authentication User Permissions and Labels in Setupp. 74
- Drive Your Multi-Factor Authentication Implementation from One Placep. 73
- Implement MFA with the Multi-Factor Authentication Assistantp. 505
- We Upgraded to Using Multi-Factor Authentication Terminologyp. 505
- Secure SAML Messages When Salesforce Is the Identity Providerp. 507
- Update Identity Provider SAML Requests to Use Lowercase Sandbox Namesp. 508
- Define a My Domain When Creating a New Salesforce Orgp. 510
- Deploy a My Domain (Update)p. 510
- Ensure That Multi-Factor Authentication Is Configured for License Management Orgsp. 553
Summer ’206
- Set Up Two-Factor Authentication for External Identity with a User Permissionp. 383
- API Only Users Can Register for Two-Factor Authentication in the Salesforce UIp. 476
- Enable Two-Factor Authentication for External Usersp. 475
- Initiate Two-Factor Authentication with Apexp. 475
- Stabilize the Hostname for My Domain URLs in Sandboxes (Update, Enforced)p. 483
- My Domain Name Length Requirement Was Changedp. 484
Spring ’202
Summer ’192
Spring ’192
Winter ’192
Spring ’182
Winter ’183
Summer ’173
Spring ’172
Summer ’162
Spring ’165
- My Domain Now Supported for Salesforce App for Outlookp. 143
- Salesforce Authenticator Mobile App, Version 2.0, for Two-Factor Authenticationp. 237
- Streamlined Setup of Two-Factor Authentication for Communitiesp. 283
- Streamlined Setup of Two-Factor Authentication for Single Sign-On and Social Sign-On Usersp. 372
- Identity Verification Method Added for Two-Factor Authenticationp. 372
Winter ’165
Summer ’157
- Use My Domain with Lightning Componentsp. 275
- Create Single Sign-On Settings from a File or URLp. 320
- Access SAML Metadata URL for a Community or Custom Domainp. 320
- Two-Factor Authentication Available for Contact Manager, Group, and Professional Editions Through Permission Setsp. 323
- Supported Login Flow Typesp. 323
- Get Quicker Updates on My Domain Name Propagationp. 326
- Test Your My Domain Login Page Settings Before You Deploy the Domain to All Usersp. 326
Spring ’152
Summer ’141
Spring ’142
Winter ’1410
- Update Needed for Notification URLs When Enabling My Domainp. 157
- Removed Change My Password Button For Customer Users with Single Sign-Onp. 195
- Entire SAML Assertion Now Signedp. 230
- Creating Service Providers as SAML-Enabled Connected Appsp. 230
- New Location of My Domain in Setupp. 235
- Two-Factor Authenticationp. 233
- Setting up My Domain for the Environment Hubp. 350
- Disabling Single Sign-On in the Environment Hubp. 356
- Mapping Users for Single Sign-On in the Environment Hubp. 356
- Enabling Single Sign-On in the Environment Hubp. 355
Summer ’133
Summer ’101
- Sites Single Sign-Onp. 106
Spring ’101
- My Domain Overviewp. 172
Winter ’101
Winter ’091
Summer ’081
Winter ’061
Summer ’051
- Single Sign-Onp. 91
More in Security
- Permission Sets169 notes
- Sharing and Record Access80 notes
- Shield (Encryption, Event Monitoring)90 notes