Reused or weak passwords have resulted in an increase in security breaches. Back in February 2022, Salesforce made Multi-Factor Authentication (MFA) required in order to use Salesforce products in compliance with the End User Licence Agreement (that you signed when becoming a customer).
Now, Marketing Cloud (SFMC) are stepping up security. As a separate platform from the core Salesforce platform, your SFMC login credentials, that you use for members.exacttarget.com, are separate from your Salesforce login.
SFMC Admins will need to enable MFA and users choose a Verification Method. MFA for Marketing Cloud is coming in June/July 2022, but Salesforce recommend you take action before your organization updates to the Summer ‘22 release (check your dates here). Don’t be the person that thinks “oh yeah, I will get to that”. That key date is just around the corner.
What is MFA?
Multi-factor authentication (MFA) is a process that requires a user to verify their identity two or more times before they are able to log into their Marketing Cloud account – to prove that they are who they say they are.
You will use one of the Salesforce approved MFA methods:
- Salesforce Authenticator app.
- USB, Lightning, or NFC device.
- A third-party authenticator app, e.g. Authy, Microsoft Authenticator, or Google Authenticator.
When you log in for the first time after MFA has been enabled for your account, Marketing Cloud sends a verification code to the email address associated with your Marketing Cloud account.
To update your chosen method, hover over your name → click Cloud Preferences → find the Multi-Factor Authentication section → click Register (and Revoke any unused methods).
How to Enable Marketing Cloud MFA
Follow the steps outlined here, or watch the video below:
There are best practices to consider, such as ensuring MFA-related IP addresses are on your email system’s allowlist (so emails get delivered), and setting up a second admin.
Any tips you’d like to share, please comment below!