Configure Your Experience Cloud Site as a Service Provider or Relying Party

To let users log in to your Experience Cloud site with credentials from a third-party provider, configure your site as a service provider or relying party. For single sign-on (SSO) authentication only, you can use SAML to configure your site as a service provider. Or, if you want the third party to authenticate users and authorize them to access third-party data, set up an authentication provider to configure SSO with your site as the relying party.

Required Editions

Available in: both Salesforce Classic and Lightning Experience

Available in: Professional, Enterprise, Unlimited, and Developer Editions

Configure Your Site as a SAML Service Provider

Note There are many terms to remember for SSO. If you need a refresher, check out Single Sign-On Terminology in Salesforce Help.

To set up SAML SSO with a third-party identity provider, use these resources.

• For configuration steps, see Configure Salesforce as the Service Provider with SAML Single Sign-On.
• Optionally, you can set up Just-in-Time (JIT) provisioning to quickly create and update user accounts. For more information, see Just-in-Time Provisioning for SAML.

Configure Your Site as the Relying Party with Authentication Providers

Use authentication providers to set up SSO using OpenID Connect or similar authentication protocols. Most authentication providers handle both SSO and third-party data access. For more information on how authentication providers work, visit Authentication Providers. To get started with setting up your authentication provider, you can use one of these methods.

• Use a predefined authentication provider, such as Apple, Facebook, or Google. For instructions, see Configure a Predefined Authentication Provider in Salesforce Help.
• Use an external authentication provider that uses the OpenID Connect protocol, such as Amazon and PayPal. For instructions, see Configure an OpenID Connect Authentication Provider in Salesforce Help.
• Create a custom authentication provider for a third party that supports OAuth 2.0, but not OpenID Connect. For instructions, see Create a Custom External Authentication Provider in Salesforce Help.