Option to Only Enforce Two-Factor Authentication Outside of Trusted IP Ranges - Ideas - Salesforce Trailblazer Community

All Ideas

Idea Details

Post an Idea
This idea has been delivered and can no longer be voted or commented on. If you’d like to add to this conversation, please post a new idea.
140  Points voting closed
Delivered in Winter 15
Idea is generally available.

Option to Only Enforce Two-Factor Authentication Outside of Trusted IP Ranges

Administration & Sharing

Provide High Assurance as a setting for users outside of a Trusted IP Range so that two-factor authentication is only enforced when users are remote.

Auto-approved for MFA!

If multi-factor authentication is a combination of "Something You Know & Something You Have", then "having"  an originating IP range in your company's Trusted IP Range qualifies for the second half. This will reduce user frustration at having to frequently provide MFA tokens when they're working the office, but enforces it when they are in a hostile environment like the Sochi Winter Olympics or any Starbucks. 

· Flag

Latest Comment from Salesforce

  • IdeaExchange Moderator - 4 years ago

    In the Winter '15 release you can customize and manage user authentication with Login Flows.

    See the Release Notes for more information:
    http://releasenotes.docs.salesforce.com/en-us/winter15/release-notes/rn_forcecom_security_login_flows.htm#rn_forcecom_security_login_flows
  • Upvotes
  • Downvotes

Ideas

Apps

from AppExchange

Questions

Help us to keep IdeaExchange clean by pointing out overlapping ideas. We'll investigate your suggestion and merge the ideas if it makes sense.



 

 

Thanks for your merge suggestion. We will review it shortly and merge the ideas if applicable.

Salesforce takes abuse situations very seriously. Examples of abuse include but are not limited to posting of offensive language or fraudulent statements. To help us process your request as quickly as possible, please fill out the form below describing the situation. For privacy and security reasons, the final outcome of an abuse case may not be revealed to the person who reported it.


 

Thank you for your feedback. We take abuse seriously and will investigate this issue and take appropriate action.