Identity Implementation Guide

What Is Salesforce Identity?
How to Use Identity
My Domain
Brand Your Salesforce Org’s Domains
What Is My Domain?
Set Up My Domain
Choose a My Domain Name
Change Your My Domain Details
Deploy Your New My Domain
Update Your Salesforce Org for Your New Domain
Test Your New My Domain
Remove Your Previous My Domain
Salesforce Edge Network
Enhanced Domains
Configure My Domain Settings
My Domain URL Formats
Get System Performance and Maintenance Information with My Domain
Connected Apps
Configure and Use the App Launcher
Single Sign-On from an External Identity Provider
Multi-Factor Authentication
Synchronize Your Salesforce and Active Directory Users with Identity Connect
Customer 360 Identity
Monitor Apps and Run Reports
Get More Information About Salesforce Identity, Single Sign-On, and Security
PDF

Choose a My Domain Name

If your Salesforce org doesn’t already have a My Domain, choose the name for your subdomain, and register it with Salesforce domain registries worldwide. You can try out a name and check availability before registering it.
Available in: both Salesforce Classic (not available in all orgs) and Lightning Experience
My Domain available in: Group, Essentials, Professional, Enterprise, Performance, and Unlimited Editions
Enhanced domains available in: Group, Essentials, Professional, Enterprise, Performance, and Unlimited Editions

User Permissions Needed
To define a My Domain name: Customize Application

AND

Modify All Data
Before you choose a My Domain name, verify that you don’t already have a deployed My Domain. Production orgs created in Winter ’21 and later have a My Domain by default.

Not sure if you have a deployed My Domain in your org? From Setup, in the Quick Find box, enter My Domain, and then select My Domain.

  • If you see My Domain Settings, you have a My Domain deployed, and your org’s current My Domain login URL is displayed.
  • If you see My Domain Step 1, you haven’t selected a My Domain for your org.
  • If you see Step 2 or 3, a My Domain request is in progress, and the My Domain isn't yet deployed.

Tip

Before updating production, we recommend that you test deploying a My Domain in a sandbox.

  1. From Setup, in the Quick Find box, enter My Domain, and then select My Domain.
    In orgs without a provisioned or deployed My Domain, the system shows Step 1: Choose and Register a My Domain.

    My Domain Settings screen with Step 1 displayed

    If you see My Domain Details, you have a deployed My Domain. To change your existing My Domain name, see Change Your My Domain Details.

  2. Enter the name that you want to use for your My Domain subdomain.

    In production and sandbox orgs, your name must contain at least 3 characters and no more than 34 characters. In Developer Edition orgs, your name must contain at least 3 characters and no more than 27 characters. It can include letters, numbers, and hyphens, but you can’t start the name with a hyphen.

    Choose a name that's unique and meaningful, such as your company name, which would make the URL https://companyname.my.salesforce, or something more specific within your company, like https://companyEU.my.salesforce.com. Avoid entering personal information in your domain name. Instead, enter only public information.

    Note

    Salesforce adds the rest of the domain name. Your production org has the my.salesforce.com domain suffix. In a developer org, the suffix is -dev-ed.my.salesforce.com. When you add a My Domain in a sandbox org, the sandbox name is added to the URL.

  3. Click Check Availability. If your name is already taken, choose a different one.
  4. If more suffixes are available for your org’s My Domain, a suffix dropdown list appears. Select a suffix.

    Unsure which suffix to pick? For most orgs, the Standard (*.my.salesforce.com) suffix is the best option.

    Tip

  5. If your suffix is Standard (my.salesforce.com), select Use enhanced domains.
    We recommend enhanced domains for all Salesforce orgs. They are required in Summer ’22. This feature allows your Salesforce login process and related URLs to meet the latest browser requirements. It also stabilizes your My Domain URL by removing the Salesforce instance, preventing user login disruption when your org moves to another Salesforce instance.

    Enhanced domains are available in Hyperforce orgs and in orgs with a deployed My Domain routed through Salesforce Edge Network. They aren’t available in Developer Edition or in scratch orgs. For more information on the availability of this feature, join the discussion on the My Domain and Enhanced Domains group in the Trailblazer Community.

    Note

  6. Optional: If you selected the Standard (*.my.salesforce.com) suffix and didn’t enable enhanced domains, stabilize your Visualforce, Experience Builder, Site.com Studio, and content file URLs.
    If enhanced domains are enabled, these URLs are stabilized and these settings have no effect. Several browsers and operating systems updated their URL requirements after this option was first made available. Enhanced domains provide the latest standard for stabilizing your Salesforce org’s URLs.
    1. Select Stabilize Visualforce, Experience Builder, Site.com Studio, and content file URLs.
      This setting is enabled by default. To avoid disruption during org migrations, your org’s instance name isn’t included in these URLs. For details, see My Domain URL Formats in Salesforce Help.
    2. Select Include the instance name in Visualforce URLs when third-party cookies are blocked.
      This setting is enabled by default. Third-party cookie blocking can cause issues loading Visualforce pages with stabilized URLs. This setting is only applicable when Visualforce URLs are stabilized.
  7. Click Register Domain.
    My Domain Settings page with Register Domain button available
  8. Salesforce provisions your My Domain.
    The provisioning process usually finishes in a few minutes, but it can take up to 24 hours. You receive an email when your My Domain is ready to be deployed and tested.