Token touts biometric assured identity products for customers seeking safer Salesforce access

Token, a biometrics-focused identity verification company based in Rochester, New York, announced that its TokenCore Wearable and TokenCore Portable products are intended to provide biometric assured identity protection for Salesforce access. The announcement positions the offerings as a way to reduce reliance on traditional log-in credentials by tying access to a biometric identity announcement that Token says can be “assured.”

The company said the products are aimed at Salesforce customers and Salesforce partners, suggesting it is targeting enterprise deployments where access to Salesforce data and workflows is a high-value target. Token did not disclose which Salesforce apps, authentication flows, or administrative tooling its solution plugs into in the public post promoting the announcement.

TokenCore is presented by Token as a biometric authentication approach, with two form factors. The “Wearable” version is designed for people who carry an approved device, while the “Portable” version is positioned as a more flexible option for identity assurance. Beyond that basic framing, the announcement did not provide operational details such as setup requirements, device management, enrollment processes, or whether organizations must replace existing identity systems.

Salesforce has made “trusted access” a recurring theme across its platform and security roadmap, with enterprise customers often seeking stronger authentication for users accessing business-critical customer relationship management data. In that context, Token’s pitch suggests an attempt to fit into the broader market demand for multi-factor and biometric authentication, especially for organizations that want a consistent access control method across cloud services.

Still, the announcement did not quantify the impact of TokenCore on security metrics like phishing resistance, account takeover rates, or help-desk costs. It also did not state whether TokenCore supports common enterprise standards for identity and authentication, such as SSO integrations, hardware-backed biometrics, or specific policy controls within Salesforce.

For Salesforce partners, the implication is that Token could be packaged into partner security offerings, helping integrators and ISVs recommend biometric assurance to customers implementing or extending Salesforce. However, Token did not name any specific partner programs, co-sell arrangements, or deployment references in the information made available in the announcement headline and summary.

What remains unclear is how “assured identity” is implemented in practice. The announcement did not describe the underlying biometric verification method, whether identity assurance is performed client-side or via a service, or what verification guarantees organizations can expect. It also did not address failover scenarios such as lost devices, employee turnover, or how access is revoked when biometric credentials change.

Looking ahead, organizations evaluating the claim will likely want specifics that the announcement does not yet provide: integration diagrams or a documented authentication workflow, details on identity enrollment and lifecycle management, and evidence from pilot deployments. For Salesforce and its ecosystem, the next indicates to watch are any official confirmation from Salesforce regarding certified compatibility and any follow-on disclosures from Token about performance, governance, and measurable security outcomes.