Login History versus Identity Verification History
Key Takeaway
Use Login History to see attempts to log in. Use Identity Verification History to see each identity verification attempt, including what triggered it (Triggered By) and how it ended (Status).
Salesforce keeps two separate histories that admins use to watch sign-in security. Think of Login History as the log of the front door and Identity Verification History as the log of ID checks. Login History records the login itself. Identity Verification History records each extra proof of identity Salesforce asked for, such as an MFA prompt, at login or later in the session. Each history answers different troubleshooting questions, so knowing which one to open is the core skill.
What each history records
Login History tracks all attempts to log in to Salesforce and to your Experience Cloud sites. Identity Verification History tracks users' identity verification attempts. For example, when a user enters a time-based one-time password (TOTP) during multi-factor authentication (MFA), that attempt is recorded in Identity Verification History.
| Login History | Identity Verification History | |
|---|---|---|
| Records | Each attempt to log in to Salesforce and your Experience Cloud sites | Each identity verification attempt |
| Shows | Who logged in, at what time, from where, and whether the login succeeded | What triggered the challenge, how the user tried to verify, and how the challenge ended |
| Open it from Setup | Enter Login History in the Quick Find box | Enter Identity Verification History in the Quick Find box |
Both pages show up to 20,000 records from the past 6 months. Both pages let you create custom views to filter records and add columns.
Location fields in both histories come from geolocation, so country, city, and postal code can be inaccurate.