Enable MFA for SFDC Tab + Frontdoor

[joleary]

Customers who leverage the SFDC tab rely on MFA through SFDC. SSO is not enabled in the Anaplan platform as a result (or users are set as exception users if SSO is enabled).

The consequence of this configuration is that end users have the ability to access Anaplan via the front door without any kind of MFA. This is a control risk for clients.

Would it be possible to reconfigure Anaplan access to limit or restrict front door access based on a setting....so that clients who want their users to access the platform via SFDC do not have to worry about those same users also gaining access to the platform in a less secure manner using the standard login? @rupert_tagnipes

[rupert_tagnipes]

We have customers who have used Salesforce as the IDP in a SAML flow. By configuring authentication with a SAML flow and not the SFDC Tab flow, this will allow customers to take advantage of Salesforce capabilities like MFA and to restrict access to just IDP authentication.