Authentication and Identity: Enhanced Two-Factor Authentication, Federation IDs, and Delegated Authentication Enablement

You can initiate two-factor authentication with two new Apex methods and enable it for external identity with a user permission. In addition, API-only users can register for two-factor authentication in the Salesforce UI. For easier integration with third-party identity providers, turn off case-sensitivity of Federation IDs for your Salesforce org. And stop your users from signing in to external identity providers with their Salesforce credentials, even when single sign-on is configured, by enabling delegated authentication through a Salesforce org preference.