Problem:
Veeva CRM users logging into Salesforce online are now being prompted with a Salesforce identify verification requirement, where they were not previously required to. The Salesforce dialog box states:
Verify Your Identity
You're trying to log in to Salesforce. To make sure your Salesforce account is secure, we have to verify your identity.
Enter the verification code we emailed to <user email address>.
This is occurring for users who do not use MFA or SSO, and in Salesforce Orgs where MFA requirements are disabled.
Root Cause:
Salesforce is updating its login security for all customers and will now require Device Activation for users who do not log in with Multi-Factor Authentication (MFA) or Single Sign-On (SSO). This change will primarily affect admin and support users who share logins. Once the update is active in your org, users who log in without MFA or SSO will be prompted to verify their identity if they haven’t already verified the device they’re using.
The rollout for this began the week of October 17, 2025.
Salesforce's announcement regarding this is available at:
Resolving Unexpected or More Frequent Device Activations
What is Device Activation?
Device Activation is a Salesforce security feature that verifies a user’s identity when logging in from a new or unrecognized browser, device, or location.
- Typically, the user receives a verification code via email during login.
- If stronger authentication methods (e.g., Salesforce Authenticator, Security Key, or SMS) are enabled, those are used instead.
- Once verified, the device is recognized and users aren’t prompted again unless something changes (e.g., new device, cleared cache, or updated IP range).
What’s changing:
Salesforce is now enforcing Device Activation more frequently in certain orgs to strengthen account security.
- For Production and Sandbox orgs, Device Activation will now be required for username/password logins if:
- Your defined Org or Profile IP ranges cover more than 16,777,216 total IP addresses, or
- Multi-Factor Authentication (MFA) is not enforced for the user.
What’s not changing:
- Logins with SSO are not affected.
- Users with MFA enabled will not be prompted for Device Activation.
- API logins such as those for integration users are not affected.
Solution:
Details on meeting the new Salesforce requirements can be found at the linked Salesforce Help page mentioned above, and listed in the Related Documentation section at the bottom of this article.
To summarize, the options to resolve this issue are:
1. Review and tighten IP ranges
- Go to Setup → Security → Network Access and Profile → Login IP Ranges.
- Limit ranges to those used by your company or VPN.
2. Enable MFA
- MFA-enforced users won’t see additional Device Activation prompts.
3. Ensure all other users have a valid email access
- If Device Activation is triggered, users will need access to their registered email or authenticator to complete login.
It is important to note that for all Free and Trial Orgs, Scratch Orgs and Non-Sandbox Demo Orgs (Non-Revenue), device Activation will be prompted regardless of the IP address range configured for the Org or User’s Profile.
Device Activation: Temporary Override Request Process (Updated)
If a customer requests to disable the device activation change, you must immediately open an SFDC case requesting a temporary override (up to 30 days).
To ensure the request is processed, the SFDC case must include the following three details:
- Reason: The specific reason why Device Activation is not possible for the customer.
- Impact: The business impact that will result if the override is not granted.
- Resolution Plan & Timeline: The customer's detailed resolution plan for enabling Device Activation, including a specific end date within the maximum 30-day limit. 30 days is the maximum allowed time for an expedited approval. Requests without end date will be rejected.
Important Note: The request will be added to a process queue, so the change will not take effect immediately.
Related Documentation:
- Veeva Connect: Update on Salesforce Device Activation Change
- Salesforce Help: Resolving Unexpected or More Frequent Device Activations