Resources

As of August 12, 2026, customers cannot install or demo an app from a private or unpublished AgentExchange listing until it has passed Salesforce Security Review.

Salesforce is enforcing phishing-resistant MFA for privileged users and admins, amongst other requirements.

Salesforce is enforcing phishing-resistant MFA for privileged users and admins. This guide covers implementation steps and additional considerations.

Salesforce now requires verification for all email-sending domains. Here are the enforcement dates, risks, and exact setup steps.

With hackers exploiting vulnerable security flaws, Salesforce is enforcing stronger MFA and related security controls in 2026.

Salesforce is enforcing or moving toward enforcement of email verification, MFA, phishing-resistant admin auth, IP controls, and export policies by June 2026.