Salesforce Customer Identity

Salesforce Customer Identity is an Identity and Access Management (IAM) service that improves your engagement with your customers and partners. Create sites for your customers and partners that are customized to your needs and best represent your brand. Use various tools to customize how your users log in, register, verify their identity, and use single sign-on to access your web pages and apps.

Customer Identity is similar to Salesforce Identity for Employees, but focuses on how customers and partners connect to your org and experience your brand.

Before you get started, make sure you have the External Identity license or the Community license. For more information, see Salesforce Identity Licenses.

Here are some additional resources outside of Salesforce Help, where you can learn more about identity features for customers, partners, and Experience Cloud sites.

Follow these topics in this order to guide you through the process of implementing Customer Identity features in your Salesforce production org. Keep in mind that you can activate your Experience Cloud site at any point after it’s enabled and your login page is set up.

• Prepare Your Org for Salesforce Customer Identity
  Before you get started with Salesforce Customer Identity, complete administrative tasks to integrate Salesforce Customer Identity features with customer and partner business processes.
• Passwordless Login
  To make login and registration more accessible to your users, configure passwordless login. With passwordless login, users can log in, sign up, and even register identity verification methods without the trouble of remembering usernames or passwords.
• Self-Registration
  Use self-registration to invite new visitors to join your Experience Cloud site. When new users access your site’s login page, they see a self-registration option that leads them to a page where they can sign up. Depending on your use case, you can configure self-registration for business accounts, which allows users to register themselves as contacts under an account associated with a company. Or you can configure self-registration for person accounts to support a business-to-consumer (B2C) model where users register as individuals.
• Single Sign-On for Salesforce Customer Identity
  With single sign-on (SSO) for Salesforce Customer Identity, users can log in to multiple applications with one set of credentials. Depending on your use case, you can configure your site as a service provider or relying party so users can log in with credentials from a third party, such as Google. Or you can set up your site as an identity provider so it can authenticate users for a third-party app. You can also set up SSO between your site and mobile apps.
• Headless Identity for Customers and Partners
  Headless identity helps you separate back-end authentication processes from front-end identity experiences. With Salesforce headless identity, use the power of Salesforce Customer Identity for authentication while maintaining control of the user experience in an off-platform app. Salesforce offers headless username-password login, passwordless login, registration, forgot password, and guest user flows. You can also link a single sign-on (SSO) provider to your headless app to create a native SSO experience.
• Embedded Login
  With Salesforce Identity Embedded Login, you can integrate Salesforce login capabilities into your own external website. When customers access your external website, they see a login form that prompts them to enter a username and password. Depending on the use case, you can use Embedded Login as a single sign-on (SSO) alternative for your external webpages. Or use Embedded Login to add a layer of authentication to purchases by requiring customers to log in first.
• Customize Login, Logout, and Password Management Pages
  Control the look and behavior of the pages users see when they log in to your site. Depending on the type of login page, you can further customize it with Experience Builder, Apex, and Visualforce. You can also customize the pages users see when they log out and when they manage their passwords, including Reset Password and Forgot Password Pages.
• Customized One-Time Password Delivery for Experience Cloud Identity Verification
  For more control over identity verification for external users, use a messaging provider of your choice to send one-time passwords (OTPs) via SMS. With a custom messaging provider, you can take charge of your branding. Personalize the content of messages and the SMS short code that shows who sent the message to the user's phone number.
• Brand Your Identity Pages with Dynamic URLs
  With dynamic branding, you can customize the branding of your login experience depending on context, such as who the user is or where they're logging in from. For example, change which logo you display depending on whether the user is an employee or customer. Or display a particular self-registration page based on the user's country code.
• Manage Sites with Contactless Users
  The contactless users feature provides flexibility and efficiency in managing your customer and partner user data. You can maintain a lightweight directory of these types of user records to preserve community licenses. And if these users need access to your site’s features and licenses, you can upgrade them to licensed users.