Salesforce Facts by Abhishek

Lightning Login is a passwordless, faster login approach we have in Salesforce. Let's see how we can enable it for the users. Go to Quick Search -> Session Settings -> Under Lightning Login, check 'Allow Lightning Login' checkbox, if we want to make the feature available based on permission set, we select the checkbox 'Allow only for users with Lightning Login User permission'. Create a PS with the 'Lightning Login User' system permission enabled ->  Assign the PS to the required users -> Login with the user and click on Enroll in Lightning Login option in User details page. And that's it! Note: Lightning login is not supported for external users. Reference:  https://help.salesforce.com/s/articleView?id=xcloud.security_ll_enable.htm&type=5

How to ensure that users can login using SSO only? First we need to enable the 'Disable login with Salesforce credentials' checkbox under Single Sign-on settings in setup -> Create a PS with the system permission 'Is Single Sign-On Enabled' checked -> Assign this PS to the intended users. Now, the users can login only using SSO, and not using username/password. Failed login attempts are shown as 'The Single Sign-On Gateway Url is invalid' in login history. Note: We should not assign this PS to admin users as they should always have option to login via username/password option to review any system issue on urgent basis. Reference:  https://help.salesforce.com/s/articleView?id=sf.sso_enforce_sso_login.htm&type=5