As of February 9, 2026, Salesforce requires a "device activation" prompt for SSO logins from new devices. On February 23, Okta released an official solution.
What's the issue?
Users who authenticate with Okta to access Salesforce are being prompted for an email-based code to activate the device they are using to log in. This negatively impacts user experience, not service.
Who is affected?
Users configured for Okta SSO access to any version of Salesforce.