Multi-Factor Authentication (MFA) – Now Mandatory for All Users, Including Admins, in Sandbox & Production Orgs

Starting in June and July of 2026, Multi-Factor Authentication (MFA) will be required for all users in Sandbox & Production orgs, including admins. Ensure MFA is fully configured for your users ahead of Salesforce's MFA deadlines. While phishing-resistant MFA is not required for standard (non-privileged) users, it is strongly recommended. For details, see Salesforce Security Updates and MFA Requirements.

Salesforce Security Updates – Action May Be Required

Salesforce is implementing several security updates throughout June and July 2026. Action may be required for the following:

• Authentication for Reports - Salesforce is implementing identity verification for high-sensitivity report actions. Ensure each of your users has at least one of the following: a supported MFA verification method registered with Salesforce, a current email address, or a mobile phone number registered to their login.
• Preventing Connections from Anonymizing VPNs, Proxies and High-Risk IP Addresses - Salesforce is expanding its automated security protections to detect and block connections originating from anonymizing VPNs, proxies, and other high-risk IP addresses. Customers should review any integrations, middleware, VPN configurations, proxy services, or automated processes that connect to Salesforce APIs or Connected Apps to ensure they are not routing traffic through anonymizing or high-risk network services.
• Transaction Security Policy Enhancements - For Shield or Events Monitoring customers only: if your org does not have a TSP restricting large data exports, Salesforce will automatically enable a default policy in June 2026.

For details, see Salesforce Security Updates and MFA Requirements.

Changes to Salesforce Security Control Requirements

Salesforce plans to require the implementation of additional security controls and settings (...)

Changes to Public Key Infrastructure in Salesforce

Salesforce has announced upcoming mandatory changes to Public Key Infrastructure (...)

Supporting iPadOS and iOS 26

Veeva CRM supports the iPadOS and iOS 26 releases on iPad and iPhone devices (...)

End of Support

See End of Support for a list of deprecated features, devices, and OS versions.