Edit an Organization

As an Account Administrator, you can edit an organization to specify a password policy,  allow your users to link their Account Manager account to an existing account in your organization in the Salesforce Platform, and specify the multi-factor authentication (MFA) verification methods that are available for users to verify their identity when logging in to Commerce Cloud B2C applications. MFA is required for all Account Manager users to improve security and reduce the risk of unauthorized access and account compromise.

1. Log into Account Manager.
2. Click Organization.
3. Click the organization you want to edit.
   The organization detail page opens.
4. (Optional) In the Organization Name field, modify the name.
5. (Optional) In the Password Policy section, set the values for the following fields:

   Option	Description
   Minimum Password Length	Specifies the minimum length allowed for passwords. In general, the longer the password, the more secure it is.
   Length of Password History	Specifies the length of the password history. Passwords that have been used already are not allowed, and the password history determines how many past passwords are remembered by Account Manager.
   Days Until Password Expires	Specifies how long passwords are retained before they expire and must be reset.

   In addition to the Password Policy settings that you can specify. the following policies apply:

   • Minimum number of alphabetic characters in a password: 1
   • Minimum number of digits in a password: 1
   • Maximum number of failed login attempts until an account is locked for 30 minutes: 6
6. (Optional) In the Identity Federation with Salesforce Identity section, you can allow your users to link their Account Manager accounts with their Salesforce accounts in your Salesforce organization to provide Single-Sign-On (SSO) across your Salesforce products:
   • Allowed: Users can choose to link their Account Manager account to Salesforce Identity
   • Enforced: Users are forced to link their Account Manager account to Salesforce Identity
   • Disabled: Users cannot link their Account Manager account to Salesforce Identity. Already linked accounts cannot login to Account Manager. (Linked users can be unlinked by resetting their accounts)
   • The My Domain Subdomain Name of your organization in Salesforce Core needs to be specified
   • The IP Relaxation for the Connected App Commerce Cloud Account Manager in your Salesforce Core organization might need to be changed to Relax IP restrictions.
7. In the MFA Verification Method Settings section, define which multifactor authentication methods your users can choose: Salesforce Authenticator, TOTP authenticator apps, or FIDO U2F/WebAuthn (FIDO2) compatible security keys.
8. Click Save.