When users log in to Salesforce via the user interface, the system checks for authentication based on their profile settings and permissions. One of the settings is login hours, which specify the time range when users can log in to Salesforce based on their profile. Another setting is Two-Factor Authentication for User Interface Logins permission, which requires users to enter a verification code along with their username and password when they log in to Salesforce via the user interface. References: https://help.salesforce.com/s/articleView?id=sf.users_profiles_loginhours.htm &type=5 https://help.salesforce.com/s/articleView?id=sf.security_2fa_perm_ui_logins.htm &type=5