Salesforce Customer Identity

Learn about Salesforce customer identity.

• Control Authorization with Custom Profiles and Roles
  This control requires Salesforce admins to clone the standard "External Identity User" profile to create a custom version.
• Control User Access to Your Experience Cloud Site
  This control involves explicitly adding specific Profiles or Permission Sets to the "Members" section of a site’s Administration settings to define exactly which user groups are authorized to log in.
• Salesforce Customer Identity: Passwordless Login
  This control lets an org replace the generic Salesforce verification screen with a custom-branded page that handles the passwordless login.
• Self-Registration
  This control involves deactivating the self-registration feature and its associated Visualforce components to make sure that new site members can only be added through an authorized, administrator-led invitation process.
• Single Sign-On for Salesforce Customer Identity
  This enables Federated Authentication (SAML or OpenID Connect), allowing customers to use a single, trusted set of credentials from an external identity provider (IdP) to access multiple Salesforce sites and integrated applications.
• Headless Identity for Customers and Partners
  Secures the backend API handshake for custom login UIs.
• Embedded Login
  Embedded Login is a legacy feature that lets you put a login form directly on an external webpage using a small piece of JavaScript.