For: Territory Managers / Marketers
Questions: Carson (d.carson@medrockpharmacy.com)

---

How This Works (the whole flow at a glance)

1. First login — Carson resets your password and sends you a welcome email with a temp password. You log in, change your password, and you're in. No MFA yet.
2. Second login — Salesforce asks you to set up MFA. You pick one of two authenticator apps — Google Authenticator (type a 6-digit code) or Salesforce Authenticator (tap to approve) — and connect it to your phone.
3. Every login after that — Username + password, then verify on your phone: type the 6-digit code from Google Authenticator, or tap Approve on the Salesforce Authenticator prompt.

You'll need two apps by the end of setup — the Salesforce CRM app, plus one of the two authenticator apps below:

Pick one authenticator, not both. Google Authenticator is simpler if you already use it for other sites. Salesforce Authenticator is faster day-to-day (no code to type, just tap Approve). Both are fully supported — pick whichever you prefer.

---

Part 1 — First Login: Set Your Password (5 min, laptop or tablet)

You'll get a welcome email from MedRock (not from Salesforce) with the subject line "Welcome to MedRock Salesforce". It contains:

• Your username (usually your email address)
• A temporary password
• A login link to medrock.my.salesforce.com

⚠️ Do this setup on a laptop, desktop, or tablet — NOT on your phone. In Part 3, Salesforce will show a QR code (Google Authenticator) or a two-word phrase (Salesforce Authenticator) that you'll scan or type into your phone. You need a second screen. A tablet works best — bigger screen than a laptop can make the camera focus easier.

Steps:

1. On your laptop, desktop, or tablet, open the welcome email.
2. Click the login link (or go to https://medrock.my.salesforce.com).
3. Enter your username and the temporary password from the email → Log In.
4. Salesforce immediately asks you to create a new password.
   • Must be 8+ characters, mix of letters/numbers.
   • Write it down somewhere safe — a password manager, your notes, etc.
5. Click Change Password.

You're now logged in. This first login doesn't ask for MFA. You can click around, or just log out — either way, MFA will prompt you on your next login (Part 3).

Can't find the welcome email? Check spam/junk — it's from a MedRock address, not @salesforce.com. Still missing? Send Carson a whatsapp message and he'll resend it.

Temp password didn't work? It may have expired (they're only good for a few days). Email Carson for a fresh one.

---

Part 2 — Install an Authenticator App (2 min, phone)

Before your next login, install one of the two authenticator apps on your phone so it's ready for MFA setup. Don't install both.

Option A — Google Authenticator (type a 6-digit code every login)

1. On your phone, open the App Store (iPhone) or Google Play (Android).
2. Search Google Authenticator (grey "G" with a keyhole — made by Google LLC).
3. Install and open it.
4. First launch: tap Get Started. You can sign in with a Google account to back up your codes (recommended — this protects you if you lose your phone) or skip and use it locally.

Option B — Salesforce Authenticator (tap Approve on a push notification every login)

1. On your phone, open the App Store (iPhone) or Google Play (Android).
2. Search Salesforce Authenticator (white cloud on teal — made by salesforce.com).
3. Install and open it.
4. Tap through the intro screens. If it asks for a two-word phrase, leave it for now — you'll enter one in Part 3.

That's it for now. The app will be empty — you'll add the Salesforce entry in Part 3.

---

Part 3 — Second Login: Connect MFA (5 min, phone + tablet/laptop)

Reminder: open Salesforce on your tablet or laptop — not on the same phone where the authenticator lives. You need two screens: one to show the QR code / two-word phrase, one to scan or type it in.

On your tablet/laptop:

1. Go to https://medrock.my.salesforce.com.
2. Enter your username and the new password you just set in Part 1 → Log In.

Screen 1: "Choose a Verification Method"

Salesforce shows four options:

• Use a built-in authenticator on your device
• Use a Universal Second Factor (U2F) or WebAuthn (FIDO2) key
• Use the Salesforce Authenticator mobile app ← pick this for Option B
• Use verification codes from an authenticator app (such as Google Authenticator or Authy) ← pick this for Option A

3. Pick whichever matches the app you installed in Part 2 and click Continue.

If you chose Google Authenticator (Option A)

Salesforce shows a QR code and a Verification Code text box.

On your phone:

4. Open Google Authenticator.
5. Tap the + button in the bottom right corner.
6. Choose Scan a QR code — this opens your phone camera.
7. Point the camera at the QR code on your tablet/laptop screen. It'll scan automatically.
8. Google Authenticator adds a new entry called something like "Salesforce (yourname@medrockpharmacy.com)" with a rotating 6-digit code that changes every 30 seconds.

Back on your tablet/laptop:

9. Type that 6-digit code into the Verification Code box.
10. Click Connect.

Done. From this login forward, every login will ask for a 6-digit code from Google Authenticator.

The code expired before you typed it in? No problem — it refreshes every 30 seconds. Just type in the new one.

Camera can't scan the QR code? On the Salesforce screen, click "I Can't Scan the QR Code" — it'll give you a long text key. In Google Authenticator, tap + → Enter a setup key → type or paste the key.

If you chose Salesforce Authenticator (Option B)

Salesforce shows a two-word phrase (like "brave tiger") and a Connect button.

On your phone:

4. Open Salesforce Authenticator.
5. Tap Add an Account.
6. Type the two-word phrase shown on your tablet/laptop exactly as it appears.
7. Tap Connect.
8. Your phone shows a confirmation with your username and login details. Tap Approve.

Back on your tablet/laptop: The screen advances automatically once you approve.

Done. From this login forward, every login will send a push notification to your phone — just tap Approve.

No push notification? Check your phone's notification permissions for Salesforce Authenticator (Settings → Notifications → Salesforce Authenticator → Allow). Also make sure you have internet/cell signal.

---

Part 4 — Install the Salesforce Mobile App (5 min, phone)

This is the CRM app — the one you'll actually use in the field.

1. In the App Store / Google Play, search Salesforce (white cloud on blue — NOT the teal Authenticator one).
2. Install and open it.
3. When it asks which server, leave the default (Production) and tap Log In.
4. Log in with the same username and password you set in Part 1.
5. Salesforce asks you to verify:
   • Google Authenticator users: open Google Authenticator, find the Salesforce entry, and type the current 6-digit code.
   • Salesforce Authenticator users: your phone gets a push notification — tap Approve. (Yes, the phone approves itself. That's fine.)
6. The Salesforce app loads. You're in.

One-time setup inside the app:

7. Tap the ☰ menu (top left or bottom).
8. Look for the app switcher (tap the small dropdown or app name at the top).
9. Switch to the MedRock Rep app.
10. Your home screen should now show your quota gauge and quick-action tiles (Log Visit, New Follow-Up, Add Provider, My Providers, Recent Visits, My Tasks, Maps, My Schedule).

---

Daily Login — What It Looks Like Going Forward

On desktop:

1. Go to https://medrock.my.salesforce.com (bookmark it).
2. Enter username + password → Log In.
3. Verify on your phone:
   • Google Authenticator: type the current 6-digit code into Salesforce.
   • Salesforce Authenticator: tap Approve on the push notification.
4. You're in.

On the mobile app:

1. Open the Salesforce app.
2. It stays logged in most of the time. When it does ask: enter password, then verify on your phone (6-digit code or tap Approve). (Salesforce Authenticator users: yes, the phone approves itself — that's fine.)

---

Common Problems