On February 1, 2022, Salesforce began requiring MFA on all products developed on the Salesforce platform - including Salesforce Sales Cloud and Tableau Cloud. You can view the announcement & FAQ here!
We've outlined the potential impact and we've included measures to avoid disruptions to your data pipeline below:
Impact
For Zuar Mitto customers, we have identified the following areas that might be impacted:
- Salesforce jobs in Mitto using the Salesforce API
- Tableau Extract Refresh Jobs updating Extracts in Tableau Cloud
Salesforce Jobs in Mitto using the Salesforce API
Salesforce has outlined the scenarios where MFA is required in order to be compliant with the new policy. For API/Integration Logins, MFA is not required.
The following instructions are to help your Salesforce Admin deploy MFA in a way that is compliant and will not negatively impact API calls being made to your Salesforce system.
From the above table, Mitto relies on the API / Integration Login authentication type to access data from your Salesforce deployment.
Salesforce has outlined many of the what, why's, and how to's set up MFA to meet the compliance in this pdf.
Key Steps to ensure Mitto can still access your Salesforce Data
After creating a new Permissions Group you then need to specify what the permission group/set does. You will be presented with 2 possible System Permissions options for Multi-Factor Authentication:
- Multi-Factor Authentication for API Logins
- Multi-Factor Authentication for User Interface Logins
In order to be compliant with Salesforce MFA, Salesforce Admins only need to enable Multi-Factor Authentication for User Interface Logins.
Since Mitto uses the API for access, you must avoid setting MFA for any of the API authentication methods!
Unless absolutely necessary, we advise against requiring MFA for API logins as that would require confirmation each time a job runs. This would negatively impact continuously running jobs, jobs in sequences, or the majority of automation benefits customers receive in utilizing Mitto for Salesforce.
If your organization is requiring MFA for API Logins or you are utilizing SSO/SAML with MFA, please contact us for assistance.
Tableau Extract Refresh Jobs updating Extracts in Tableau Cloud
Tableau Extract Refresh Jobs updating Extracts in Tableau Cloud will work differently once an organization has enabled MFA within their Tableau Cloud instance. Instead of credentials containing a username and password, these jobs will run utilizing a personal access token.