An administrator has assigned a permission set group with the two-factor authentication for User Interface Logins permissions and the two-factor authentication for API Logins permission to a group…

Question

Options

• AUsers need to connect an authenticator app to their Salesforce account.
• BUsers need to get a security token from a trusted network using Reset My Security Token.
• CUsers need to download and install an authenticator app on their mobile device.
• DUsers need to enter a verification code from email or SMS, whichever has higher priority.

• A
  83% (20)
• B
  8% (2)
• D
  8% (2)

Explanation

Data Loader uses the Salesforce API to connect, so the 'Two-Factor Authentication for API Logins' permission applies. When this permission is enabled and the user has not yet set up an authenticator app, they will be prompted to (C) download and install a compatible authenticator app on their mobile device, and then (A) connect/register that authenticator app to their Salesforce account by scanning a QR code. Option B (security token) applies to standard API authentication without MFA - it is not the flow triggered by the MFA permission. Option D (email/SMS code) describes a different MFA method; when an authenticator app is required by permission, app-based verification is what gets prompted.

No community discussion yet for this question.