Requiere TOTP for sensitive information or actions
While TOTP (Time-Based One-Time Password) is typically used for user login authentication in Salesforce, its implementation can be extended to enhance security for accessing sensitive information and performing critical operations within the system. This additional layer of security ensures that even after a user has logged in, specific actions that involve sensitive data require another verification step using TOTP.
HACKS
Clone the repository or download the zip file from https://github.com/mpdigitals/totp-service-sfdc
Deploy the TOTPService class.
Optionally, deploy the TOTP_Triggered_flow_Action_Account Flow and fields (TOTP__c and VIP__c) for testing.
Drag the account fields to the Account Lightning page.
Configuration
Invocable Method
The TOTPService class provides an invocable method verify TOTP that can be used in Salesforce Flows. This method verifies the provided TOTP code and returns the verification result.
Example Usage in Flow:
Add an action in your Triggered-Flow and select Verify TOTP.
Provide the necessary inputs (TOTP code).
Use the output of the action to handle the verification result in your Flow logic.
Usage
Apex
You can also use the TOTPService class directly from Apex code. Here's an example of how to call the service from an anonymous Apex block: