Create a multi-factor authentication (MFA) permission set

This article explains how to create a multi-factor authentication (MFA) permission set.

For some MFA approaches, Salesforce recommends the creation of an MFA permission set. It's important to make this permission set available to all your user license types. You can do this by selecting None when you select the type of users who will use the permission set.

To create an MFA permission set:

1. Click on the setup icon and select Setup.
2. Click in the Quick Find search field.
3. Type permission.
4. Click on Permission Sets.
5. Click on the New button.

6. Under Enter permission set information, enter the following settings:
1. Label - Multi-Factor Authentication Required
2. API Name - Multi-Factor_Authentication_Required
3. Description - Requires MFA when users log into Salesforce.

7. Make sure License is set to None.
8. Click on the Save button.

9. Click in the Find Settings... search field.
10. Type system.
11. Select the System Permissions option when it appears below the search field.

12. Click on the Edit button.

13. Scroll down to the Multi-Factor Authentication for User Interface setting and put a tick in the checkbox.

14. Scroll back to the top of the page and click on the Save button.

15. Click on Save again to confirm your permission changes.

16. Once you've saved your changes, click on the Manage Assignments button to start assigning this permission set to your users.