Loading
Feature degradation | Gmail Email delivery failureRead More
Set Up and Maintain Your Salesforce Organization
Table of Contents
Filter by (0)Add
Select Filters

          No results
          No results
          Here are some search tips

          Check the spelling of your keywords.
          Use more general search terms.
          Select fewer filters to broaden your search.

            Search all of Salesforce Help
            Search all of Salesforce Help
            Create an Interview-Based Login Page with My Domain Login Discovery

            You are here:

            1. Salesforce Help
            2. Docs
            3. Set Up and Maintain Your Salesforce Organization

            Create an Interview-Based Login Page with My Domain Login Discovery

            Configure My Domain with Login Discovery to simplify the login process for users. Login Discovery is sometimes called interview-based login because it’s a two-step process. First, users identify themselves with an email address or phone number at the login page. Next, users verify themselves depending on the identifier entered. Users can verify themselves with a password, their single sign-on (SSO) credentials, or Lightning Login. You set up Login Discovery from the My Domain Setup page after you create an Apex class that implements the MyDomainLoginDiscoveryHandler interface.

            Required Editions

            Available in: both Salesforce Classic and Lightning Experience
            Available in: Group, Essentials, Professional, Enterprise, Performance, Unlimited, and Developer Editions
            User Permissions Needed
            To customize a My Domain login page: Customize Application

            Login Discovery eliminates the onerous task of managing forgotten usernames. With Login Discovery, your users can log in with something they’re likely to remember, like their email address or phone number. Also, if your org is configured with multiple identity providers (IdP) for SSO, Login Discovery can direct users to the suitable IdP. If your login page contains an SSO button along with the username and password fields, users can miss the button or not know what it’s used for. If you’re using Login Discovery, no decisions are required.

            Login Discovery is helpful when you have different login processes depending on the situation, such location or device type. For example, if you have separate IdPs for mobile and desktop users. Instead of having a login page with buttons for both, Login Discovery determines where users are logging in from and directs them to the suitable IdP.

            To configure Login Discovery for My Domain, create a handler in Apex and then reference the handler from the My Domain Setup page. The Apex class implements the MyDomainLoginDiscoveryHandler interface. The handler includes logic that defines how to look up a user based on the identifier value entered on the login page. Then it determines which authentication service to invoke.

            Note
            Note Authentication configuration settings apply to your org’s deployed and provisioned My Domains.
            1. From Setup, in the Quick Find box, enter My Domain, and then select My Domain.
            2. Under Authentication Configuration, click Edit.
            3. For Login Page Type, select Discovery.
            4. Optionally, for Login Prompt, enter the text or custom label.
              For example, you can use a custom label to localize the text, such as $Login.loginPrompt.
            5. Locate the Login Discovery Handler that you created by implementing the MyDomainLoginDiscoveryHandler interface. From Setup, in the Quick Find box, enter Apex Classes, and then select Apex Classes. Select the handler from the list.
            6. Optionally, for Execute Login As, choose a Salesforce admin with Manage Users permission.
              By default, the handler runs in system mode.
            7. Save your changes.
            Tip
            Tip If you can’t log in after setting up Login Discovery, modify the URL to return to the standard login page, which prompts for a username and password. You can add login as a URL query string parameter, for example, https://MyDomainName.my.salesforce.com/?login. Or you can add login=true to the URL, for example, https://MyDomainName.my.salesforce.com/?login=true.

            See Also

             
            Loading
            Salesforce Help | Article