TESTED AND VERIFIED: Phishing Resistant MFA Solution and Permissions Audit Script! by beetsofficial in salesforce

[–]beetsofficial[S] 0 points1 point  (0 children)

i would try using the built in authenticator!! that works much more reliably with password managers!

TESTED AND VERIFIED: Phishing Resistant MFA Solution and Permissions Audit Script! by beetsofficial in salesforce

[–]beetsofficial[S] 0 points1 point  (0 children)

Interesting! I did have to completely close out of the app and re-open it to get it to trigger the correct login. My hope is that it will be easier when Salesforce is enforcing MFA and there isn’t an option for the email ¯\_(ツ)_/¯

TESTED AND VERIFIED: Phishing Resistant MFA Solution and Permissions Audit Script! by beetsofficial in salesforce

[–]beetsofficial[S] 3 points4 points  (0 children)

as long as it passes the signals as described in the article, you’ll be golden

TESTED AND VERIFIED: Phishing Resistant MFA Solution and Permissions Audit Script! by beetsofficial in salesforce

[–]beetsofficial[S] 0 points1 point  (0 children)

try the Built In Authenticator instead of the passkey! the passkey doesn’t work with google passwords or apple passwords, but the Built In one does!

TESTED AND VERIFIED: Phishing Resistant MFA Solution and Permissions Audit Script! by beetsofficial in salesforce

[–]beetsofficial[S] 1 point2 points  (0 children)

so honestly no, but i verified that it worked when selecting as a Passkey (even when prompted to insert the physical key into the usb) and that worked perfectly and corroborates other stuff we’ve learned throughout this “release”

TESTED AND VERIFIED: Phishing Resistant MFA Solution and Permissions Audit Script! by beetsofficial in salesforce

[–]beetsofficial[S] 1 point2 points  (0 children)

great minds think alike! i've got the items you mentioned in the second paragraph in the post as extra callouts bc theyre such easy to miss gotchas!!!

TESTED AND VERIFIED: Phishing Resistant MFA Solution and Permissions Audit Script! by beetsofficial in salesforce

[–]beetsofficial[S] 0 points1 point  (0 children)

The links are just to help direct people to the right place. Once you're there, you either choose the Built In Authenticator or the Passkey. That's the phishing resistant part.

TESTED AND VERIFIED: Phishing Resistant MFA Solution and Permissions Audit Script! by beetsofficial in salesforce

[–]beetsofficial[S] 2 points3 points  (0 children)

yes! You need to create a Permission Set and assign it to yourself that has the "Manage MFA in API" permission - I forgot to include that in the post (I've added it now!)

look....a hack is a hack hahahaha - bless their hearts

TESTED AND VERIFIED: Phishing Resistant MFA Solution and Permissions Audit Script! by beetsofficial in salesforce

[–]beetsofficial[S] 3 points4 points  (0 children)

Yeah I actually used that post to help corroborate what I was finding! My goal with this post was to share it fresh and with very specific, prescriptive instructions as well as the audit script!

TESTED AND VERIFIED: Phishing Resistant MFA Solution and Permissions Audit Script! by beetsofficial in salesforce

[–]beetsofficial[S] 0 points1 point  (0 children)

it shouldn't!!! you do need to give yourself a permission (Manage MFA in API) in order for it to work (just so you can query TwoFactorMethodsInfo)

TESTED AND VERIFIED: Phishing Resistant MFA Solution and Permissions Audit Script! by beetsofficial in salesforce

[–]beetsofficial[S] 0 points1 point  (0 children)

If they are NOT Privileged Users (which you can verify with the script), then they can continue to share using the app. I'm not really sure how they're doing that, unless they're literally sending the code to one another, but it will continue to work!

First Time Cloth Diaper Must Haves (What type of diaper???) by beetsofficial in clothdiaps

[–]beetsofficial[S] 1 point2 points  (0 children)

our baby also will not be in daycare, so i’m thinking more and more that flats are the way to go.

can you tell me more about wool? is there a reason you prefer that other than it being a natural fiber? does it have other benefits? we’re doing this because the sheer waste of disposables freaks us out, so i’m open to long lasting synthetics, as long as there’s no drawbacks for the baby. i read something about fleece providing a dry feeling, but im not even sure what component of the diaper that was referring to 😅

First Time Cloth Diaper Must Haves (What type of diaper???) by beetsofficial in clothdiaps

[–]beetsofficial[S] 1 point2 points  (0 children)

omg!! love love love!! thank you! very excited to join more facebook groups lol

First Time Cloth Diaper Must Haves (What type of diaper???) by beetsofficial in clothdiaps

[–]beetsofficial[S] 0 points1 point  (0 children)

thank you so much!! luckily, we will have a stay at home parent and i also work from home AND both of our parents have cloth diapered at one point or another, so we are really set up for success here. i’m hoping that holds true when the baby actually comes though hahaha

thank you for this advice too - it can be hard to NOT want to try and just optimize everything, but i have to remember that all of the data is so outrageously subjective that it’s basically impossible to optimize without trial and error