{"type":"video","version":"1.0","html":"<iframe src=\"https://www.loom.com/embed/f456cefc8abb4a4d86007bb2cd8fbdf4\" frameborder=\"0\" width=\"1920\" height=\"1440\" webkitallowfullscreen mozallowfullscreen allowfullscreen></iframe>","height":1440,"width":1920,"provider_name":"Loom","provider_url":"https://www.loom.com","thumbnail_height":1440,"thumbnail_width":1920,"thumbnail_url":"https://cdn.loom.com/sessions/thumbnails/f456cefc8abb4a4d86007bb2cd8fbdf4-65d6d2e5c446ead4.gif","duration":809.3,"title":"Salesforce Phishing-Resistant MFA Update for Copado Robotic Testing Customers","description":"This Loom explains how to switch Salesforce robotic testing from username and password authentication with OTP to JWT authentication using an external client app and permission set. It notes that phishing-resistant and MFA enforcement will break standard privileged-user logins in sandbox by June 22 and in production by July, making JWT the most future-proof option. The walkthrough covers generating an RSA key pair, creating a permission set assigned to the automation user, setting up an OAuth-enabled external client app with JWT bearer flow using server.crt, and storing the client ID and private key as sensitive Robot variables. It then demonstrates using the JWT login keyword to sign into the Salesforce org."}