Loading
Upcoming Mandatory Changes to Public Key Infrastructure (PKI)Read More
Salesforce Enforces New Security Requirements in Summer 2026Read More
Get Started with B2C Commerce
Table of Contents
Filter by (0)Add
Select Filters

          No results
          No results
          Here are some search tips

          Check the spelling of your keywords.
          Use more general search terms.
          Select fewer filters to broaden your search.

            Search all of Salesforce Help
            Search all of Salesforce Help
            Configure SSO Using Account Manager as the IdP

            You are here:

            1. Salesforce Help
            2. Docs
            3. B2C Commerce for Merchandisers and Administrators

            Configure SSO Using Account Manager as the IdP

            If you’re using Account Manager as an IdP, complete these tasks for the B2C Commerce Merchant Agent to work.

            Make sure that you have access to Business Manager and the connected Salesforce org.

            Add an API Client in Business Manager

            The API client provides the Consumer Key and Consumer Secret that Salesforce uses to communicate with Account Manager.

            1. Log in to Account Manager at https://account.demandware.com/.
            2. Go to the API Client section and click Add API Client.
            3. Fill in the client details:
              1. Display Name: Enter a recognizable name (for example, "Salesforce SSO – Your Org Name")
              2. Password: Set a strong secret. This value becomes your Consumer Secret.
              3. Organizations: Select the organizations that this client can access.
              4. Token Endpoint Auth Method: Select client_secret_basic.
              5. Redirect URIs: Leave this entry blank for now. You add the Salesforce callback URL later.
            4. Click Save.
            5. Record these values. You use them when you create the Auth Provider:
              1. Consumer Key: The Client ID (UUID) displayed by Account Manager
              2. Consumer Secret, which is the password you set earlier.
            Warning
            Warning Assign this API client to a single organization only. Salesforce is deprecating multi-organization assignment, so Account Manager blocks them and removes existing ones. To use Salesforce SSO for more organizations, create a separate API client for each organization.

            Add Account Manager as an Auth Provider

            In your Salesforce org, add Account Manager as an Auth Provider so your users can log in to Salesforce with single sign-on (SSO).

            1. Log in to your Salesforce org.
              Log in at login.salesforce.com or at your My Domain URL, if your admin configured it, for example, https://company.my.salesforce.com.
            2. In the top-right corner, click Setup then select Setup.
            3. In the Quick Find box, enter Auth Providers and select Auth. Providers.
            4. Click New.
            5. Fill in the Authentication Provider Edit form:
              Field Value
              Provider Type Commerce Cloud Account Manager
              Name Account Manager or any descriptive name
              URL Suffix Account_Manager (used in the callback URL)
              Consumer Key The Client ID from your API Client
              Consumer Secret

              The password you set for your API Client.

              Keep the secret private. Store it in a secure place, such as a secrets manager. Don't commit the secret to source control or share it over insecure channels.
              Authorize Endpoint URL https://account.demandware.com/dwsso/oauth2/authorize
              Token Endpoint URL https://account.demandware.com/dwsso/oauth2/access_token
              User Info Endpoint URL https://account.demandware.com/dw/rest/v1/users/current
              Link to messaging components Leave deselected.
              Use Salesforce MFA for this SSO Provider Leave deselected unless your security policy requires it.
            6. Click Save.

              The Salesforce Configuration section appears at the end of the Auth Provider detail page.

            7. Copy the Callback URL and the Single Sign-On Initialization URL from the configuration details. The Callback URL format is: https://<your-domain>.my.salesforce.com/services/authcallback/Account_Manager
            8. Register the Callback URL in Account Manager.
              1. Return to Account Manager and open the API Client that you created earlier.
              2. In the Redirect URIs field, paste the Callback URL you copied from Salesforce.
              3. Click Save.
            9. Verify the connection.
              1. Paste the Single Sign-On Initialization URL into a new browser tab.
              2. Log in with your Account Manager credentials.
                A successful login confirms that you configured the Auth Provider correctly.
             
            Loading
            Salesforce Help | Article