Agent skill · forcedotcom
experience-ui-bundle-mfa-configure
Configure Multi-Factor Authentication (MFA) for Salesforce Experience Site users. TRIGGER when: user wants to enable MFA on a community, enforce two-factor authentication for portal users, add MFA to a React Experience Site / Web App, configure ForceTwoFactor permission, create MFA permission sets for external users, or troubleshoot MFA not appearing on login. Also triggers on: MFA community, two-factor portal, ForceTwoFactor permission set, MFA Experience Cloud, MFA React site, identity verification community, MFA experience site, ForceTwoFactor permissionset-meta.xml, MFA permissionset-meta.xml. DO NOT TRIGGER when: configuring org-wide MFA for internal users (that's Setup > Identity Verification), building custom login UI components (use experience-ui-bundle-frontend-generate), or generating generic permission sets without MFA context (use platform-permission-set-generate).
What it needs
About 11k tokens when loaded.
What this skill does
Enabling MFA on Experience Sites Enable Multi-Factor Authentication for Experience Site (Community) users by deploying the correct permission sets and verifying the platform-handled MFA challenge flow. Scope In scope: Deploying ForceTwoFactor permission set for community users Deploying ApiEnabled permission set (required for post-login API calls) Assigning permission sets to community users Troubleshooting MFA not appearing on login Customizing MFA/login page branding via NetworkBranding metadata Out of scope — delegate elsewhere: Building custom login UI → experience-ui-bundle-frontend-generate Creating generic permission sets → platform-permission-set-generate Assigning permission sets (if already deployed) → dx-org-permission-set-assign Deploying metadata to org → platform-metadata-deploy Org-wide MFA for internal Salesforce users → Setup > Identity Verification (not a skill) --- Prerequisites Before using this skill, ensure the following are already in place: Prerequisite Why ------------- ----- Experience Cloud site deployed and active MFA applies to community login — no site means no login flow to protect Community users exist (or will self-register) Permission sets are assigned to community users; the site must have a community-enabled profile Customer Community or Customer Community Login license enabled Required for community user profiles — without it, user creation and profile deployment will fail Network/Site published at least once The site must be reachable at its URL for login + MFA challenge to appear Note: This skill does NOT handle org setup, license provisioning, or Experience Cloud site creation. If these prerequisites are missing, set them up first via Setup > Digital Experiences > All Sites > New, or deploy your site's base app bundle. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills forcedotcom/experience-ui-bundle-mfa-configure--ca96bb