On February 1, 2022, Salesforce will require MFA on all products developed on the Salesforce platform - including Salesforce Sales Cloud and Tableau Online. You can view the announcement & FAQ here!
We've outlined the potential impact and we've included measures to avoid disruptions to your data pipeline below:
For Zuar Mitto customers, we have identified the following areas that might be impacted:
- Salesforce jobs in Mitto using the Salesforce API
- Tableau Extract Refresh Jobs updating Extracts in Tableau Online
Salesforce Jobs in Mitto using the Salesforce API
Salesforce has outlined the scenarios where MFA is required in order to be compliant with the new policy. For API/Integration Logins, MFA is not required.
The following instructions are to help your Salesforce Admin deploy MFA in a way that is compliant and will not negatively impact API calls being made to your Salesforce system.
From the above table, Mitto relies on the API / Integration Login authentication type to access data from your Salesforce deployment.
Salesforce has outlined many of the what, why's, and how to's set up MFA to meet the compliance in this pdf.
Key Steps to ensure Mitto can still access your Salesforce Data
After creating a new Permissions Group you then need to specify what the permission group/set does. You will be presented with 2 possible System Permissions options for Multi-Factor Authentication:
- Multi-Factor Authentication for API Logins
- Multi-Factor Authentication for User Interface Logins
In order to be compliant with Salesforce MFA, Salesforce Admins only need to enable Multi-Factor Authentication for User Interface Logins.
Since Mitto uses the API for access, you must avoid setting MFA for any of the API authentication methods!
Unless absolutely necessary, we advise against requiring MFA for API logins as that would require confirmation each time a job runs. This would negatively impact continuously running jobs, jobs in sequences, or the majority of automation benefits customers receive in utilizing Mitto for Salesforce.
If your organization is requiring MFA for API Logins or you are utilizing SSO/SAML with MFA, please contact us for assistance.
Tableau Extract Refresh Jobs updating Extracts in Tableau Online
Tableau Extract Refresh Jobs updating Extracts in Tableau Online will work differently once an organization has enabled MFA within their Tableau Online instance. Instead of credentials containing a username and password, these jobs will run utilizing a personal access token.
Zuar is releasing a new Mitto update to support personal access tokens for Tableau Extract Refresh Jobs. For Zuar-hosted Mitto instances, we will be contacting you when an upgrade is underway. For on-prem Mitto instances, schedule time on this Calendly and our team will be in touch!
If you have a special circumstance, questions, comments, or concerns please reach out to Greg Rossi.