Salesforce updates
Important If you have a notification from Salesforce that you don't see listed here, raise a case with our support team.
Note The time frames we've given can be subject to change, by Sage or Salesforce, and we've given them as a guide only.
| Salesforce email date and title | Security update | Enforcement dates | Sage People article |
|---|---|---|---|
| 20 May, 2026 - Product and service notification 7 July, 2026 - ACTION REQUIRED: Update Unsupported Platform SOAP API login |
SOAP retirement |
|
SOAP API retirement |
| 15 May, 2026 - Prepare for certificate changes starting June 2026 | Root certificate transition | 5 February, 2026 | Root certificate changes |
| 15 May, 2026 - Prepare for certificate changes starting June 2026 | Deprecation of dual-use certificates | Effective 15 June, 2026 | Deprecation of dual use certificates |
| 6 May, 2026 - Action required: Upgrade the security of your Salesforce experience 7 July, 2026 - New Enforcement Timelines for Phishing-Resistant MFA and MFA for All |
Phishing resistant MFA |
|
Phishing-resistant Multi-Factor Authentication (MFA) for privileged users and admins |
| 11Sept,2026 - Prepare for Email to Become the Default Login Experience | Prepare for email to become the default login experience |
|
Prepare for email to become the default login experience |
| N/A | OAuth 2.0 username - password flow for connected apps | February 2027 | OAuth 2.0 - username - password flow for connected apps |
| N/A (popups in your org) | Using Help Agent inside the Salesforce platform | No enforcement, rolling out across orgs from late September | Using Salesforce Help Agent within your Sage People org |
| N/A | Disabling email address verification | No enforcement | Disable email verification |