As a Salesforce user, you are most likely familiar with the Identity Confirmation challenge you get when trying to log into Salesforce from a different computer or location. When this happens, Salesforce security directs you to a screen that asks you to send a confirmation code to your email address used in Salesforce. The intention behind this is good, as it increases Salesforce security and helps prevent unauthorized access to your Salesforce account, but at the same time, it can be quite frustrating if you are in a location where you do not have access to your email, like being on a hotel or customer’s computer and your email is behind a corporate firewall. In this case, all of the email verification codes in the world will not help you!
Salesforce has recently introduced a new feature called Salesforce SMS Identity Confirmation that can make your life easier while keeping security high when logging into Salesforce from new locations or computers. Instead of sending you an email, Salesforce can send you a text message with the verification code.
If enabled by your Salesforce administrator, you have probably been taken to a Salesforce SMS Identity Confirmation option page when you logged into Salesforce. This page would have asked you to enter a mobile number and have Salesforce verify it. You could also have Salesforce ask you later or decline this option and continue to use email verification. If you already had a mobile number on your user detail page, or if your Salesforce administrator populated it for you when the feature was activated, then you would not get this option page.
If you got the Salesforce SMS Identity Confirmation option page and entered a mobile number and passed the verification, then you are all set and will receive a text message with the activation code when logging into Salesforce from a different computer or location. If you tell it to ask you later, Salesforce will keep asking you each time you log in until you accept or decline.
[button type=”success” size=”lg” link=”http://bit.ly/1jM4u4K”]For more Salesforce Tips and Tricks
Download our FREE Guide to
Salesforce Best Practices[/button]
If you happened to decline and now want to use this Salesforce security feature, all you need to do is navigate to your user detail page (Setup | Personal Setup | My Personal Information | Personal Information) and use the “Add” link next to the “Mobile” field on the right. This will open a window to allow you to enter a number and validate it. If you already have a number entered here, you can use the “Change” link to verify a new number. This is helpful if you switch phones.
Salesforce even allows the use of both email and SMS verification, but it can only be set by Salesforce administrators. In instances with profiles (Enterprise or Unlimited), administrators can enable the “Allow email-based identity confirmation” permission on the profile or in a permission set. Administrators of instances without profiles (Professional, Group, or Contact) will need to contact Salesforce Support to have this security feature enabled.
For those of you that travel or use different computers to log into Salesforce, Salesforce’s SMS Identity Confirmation feature provides additional security options and should make your life easier when logging into Salesforce. For those of you that always log into Salesforce from the office, you will not need this feature but it may still be helpful if you have to log into Salesforce from a co-worker’s computer and your company IP address is not whitelisted. Safe travels to all of you.
StarrForce is a Salesforce Partner that believes marketing, selling, and supporting customers should be simpler and has expertise in Salesforce security. If you would like information on the services we offer call us at (888) 391-4493 x101.