Require Identity Confirmation When Adding Two-Factor Authentication

Previously, users could add two-factor authentication, such as Salesforce Authenticator, without confirming their identities. To enhance the security of your org, require users to verify their identity before allowing them to add the authentication method. This option is enabled by default. This change applies to both Lightning Experience and Salesforce Classic.
Available in: All Editions

image of Session Settings Setup page with "Require indentity verification during two-factor authentication registration" selected