Salesforce enforcing additional login requirements (MFA & Phishing-Resistant MFA)

CIT staff have worked this morning on some improvements on how our Calvin authentication communicates with Salesforce, and should eliminate the passkey signup prompts for most users. System administrators and some users with additional permissions on objects are still required to abide by the enhanced security measures. We are looking at long-term solutions to simplify login for those users.

Salesforce has recently begun enforcing new requirements for logins to prevent certain classes of attacks against the platform. At login, users are receiving a prompt to sign up for passkeys in our production systems: this is a legitimate request and you can proceed with the instructions given at login.

We did not anticipate this would apply to all our users: CIT staff are investigating if we can make adjustments so you can return to logging in via Calvin Single-Sign On without additional steps.

If you need assistance with login or are unable to complete the steps Salesforce outlines, please create a ticket with the helpdesk.