An Administrator needs to configure an extra layer of security for user accounts on their...

Multi-Factor Authentication adds an additional authentication factor beyond a username and password, substantially strengthening account-login security. Salesforce describes MFA as requiring users to provide two or more pieces of evidence to establish their identity, reducing the risk associated with compromised credentials, phishing, and account takeover. B2B Commerce is built on the Salesforce Platform and supports Salesforce MFA capabilities. Profiles, permission sets, and permission set groups primarily determine authorization—what applications, objects, fields, and functions an authenticated user can access. They do not, by themselves, provide an additional authentication factor during sign-in. Because the requirement specifically asks for an extra security layer for user authentication on the storefront, Multi-Factor Authentication is the appropriate configuration.

================