← back to the release
enforced release updatedeadline 2026-06-12Identity
Permission to bypass MFA for UI logins is removed
The PermissionsBypassMFAForUiLogins permission no longer exempts users from multi-factor authentication. Every UI login is challenged.
identifiers
PermissionsBypassMFAForUiLoginsMultiFactorAuthentication
metadata types
PermissionSetProfile
flags
enabled by defaultrequires action
- how
- Remove the permission from permission sets and profiles, and enrol affected users in MFA.
- who
- Users assigned permission sets that grant the bypass.
- when
- Auto-enabled in Summer '26.
- where
- All editions.