Loading
Set Up and Maintain Your Salesforce Organization
Table of Contents
Filter by (0)Add
Select Filters

          No results
          No results
          Here are some search tips

          Check the spelling of your keywords.
          Use more general search terms.
          Select fewer filters to broaden your search.

            Search all of Salesforce Help
            Search all of Salesforce Help
            Customize Your My Domain Login Page for Mobile Auth Methods

            You are here:

            1. Salesforce Help
            2. Docs
            3. Set Up and Maintain Your Salesforce Organization

            Customize Your My Domain Login Page for Mobile Auth Methods

            By default, mobile apps built with Salesforce Mobile SDK use standard authentication. With standard authentication, a user logs in and approves access to their Salesforce data within the mobile app. For improved security and better performance on mobile apps, configure advanced browser-based authentication from the My Domain Setup page. With browser based-authentication, mobile users are taken to their native browser for authentication. After they log in and approve data access, they’re redirected to the mobile app.

            Required Editions

            Available in: both Salesforce Classic and Lightning Experience
            Available in: Group, Essentials, Professional, Enterprise, Performance, Unlimited, and Developer Editions
            User Permissions Needed
            To customize a My Domain login page: Customize Application

            Browser-based authentication is required for mobile users logging in to your My Domain URLs with these authentication methods.

            • Certificate-based login
            • Single sign-on (SSO) configurations that use certificates

            For SSO configurations that don’t use certificates, browser-based authentication is recommended for better performance but not required. If you set up browser-based authentication with Google as an SSO identity provider, mobile users who are already logged in to Google aren’t required to log in again. When your mobile app directs users to their native browser for authentication, they can select an option to continue with their Google account. With standard authentication, users don’t get this benefit.

            Browser-based authentication is also supported for delegated authentication and authentication with Windows NT LAN Manager (NTLM).

            Changing these settings can break your mobile authentication flows. We recommend testing your changes in a sandbox before you implement them in production.

            Note
            Note Authentication configuration settings apply to your org’s deployed and provisioned My Domains.
            1. From Setup, in the Quick Find box, enter My Domain, and then select My Domain.
            2. Under Authentication Configuration, click Edit.
            3. Select Use the native browser for user authentication on iOS or Use the native browser for user authentication on Android.
              With these settings selected, mobile users are directed to Safari if using iOS, and to Chrome if using Android.
            4. Save your changes.

            Advanced browser-based authentication also requires some configuration in your mobile app. For more information, see Using Advanced Authentication in the Mobile SDK Development Guide.

            See Also

             
            Loading
            Salesforce Help | Article