ADM-201 · Question #231
An administrator has assigned a permission set group with the two-factor authentication for User Interface Logins permission and the two-factor authentication for API Logins permission to a group of…
The correct answer is A. Users need to connect an authenticator app to their Salesforce account. C. Users need to download and install an authenticator app on their mobile device. When a user logs into Data Loader with 2FA for API logins enabled, they will be prompted to connect an authenticator app, requiring them to first download and install one on their device.
Question
An administrator has assigned a permission set group with the two-factor authentication for User Interface Logins permission and the two-factor authentication for API Logins permission to a group of users. Which two prompts will happen when one of the users attempts to log In to Data Loader? Choose 2 answers
Options
- AUsers need to connect an authenticator app to their Salesforce account.
- BUsers need to get a security token from a trusted network using Reset My Security Token.
- CUsers need to download and install an authenticator app on their mobile device.
- DUsers need to enter a verification code from email or SMS, whichever has higher priority.
How the community answered
(38 responses)- A92% (35)
- B5% (2)
- D3% (1)
Why each option
When a user logs into Data Loader with 2FA for API logins enabled, they will be prompted to connect an authenticator app, requiring them to first download and install one on their device.
The 'two-factor authentication for API Logins' permission mandates identity verification via a connected authenticator app when accessing Salesforce through APIs, such as Data Loader, prompting users to connect one if they haven't already.
Security tokens are an older method for API access from untrusted networks, and 2FA for API logins typically supersedes or replaces the need for them, especially when an authenticator app is configured.
Before a user can successfully connect an authenticator app to their Salesforce account, they must first download and install a compatible authenticator application on their mobile device, which is a prerequisite for the 2FA setup process.
While email or SMS verification can be used for multi-factor authentication in some scenarios, for explicit 2FA for API logins, an authenticator app is the primary and required method, not email or SMS codes.
Concept tested: Two-factor authentication for API logins
Source: https://help.salesforce.com/s/articleView?id=sf.mfa_api_access.htm&type=5
Topics
Community Discussion
No community discussion yet for this question.