Identity Implementation Guide

What Is Salesforce Identity?
How to Use Identity
My Domain
Brand Your Salesforce Org’s Domains
What Is My Domain?
Set Up My Domain
Salesforce Edge Network
Enhanced Domains
Configure My Domain Settings
Set the My Domain Login Policy
Customize Your My Domain Login Page with Your Brand
Create an Interview-Based Login Page with My Domain Login Discovery
Add Identity Providers to the My Domain Login Page
Customize Your My Domain Login Page for Mobile Auth Methods
My Domain URL Formats
Get System Performance and Maintenance Information with My Domain
Connected Apps
Configure and Use the App Launcher
Single Sign-On from an External Identity Provider
Multi-Factor Authentication
Synchronize Your Salesforce and Active Directory Users with Identity Connect
Customer 360 Identity
Monitor Apps and Run Reports
Get More Information About Salesforce Identity, Single Sign-On, and Security
PDF

Add Identity Providers to the My Domain Login Page

Allow users to authenticate using alternate identity provider options directly from your My Domain login page. If you enabled single sign-on (SSO) and configured SAML, or set up external authentication providers, you can display them on the login page. Users are sent to the identity provider’s login screen to authenticate and then redirected back to Salesforce.
Available in: both Salesforce Classic (not available in all orgs) and Lightning Experience
Available in: Group, Essentials, Professional, Enterprise, Performance, Unlimited, and Developer Editions

User Permissions Needed
To customize a My Domain login page: Customize Application

Available authentication services include all providers configured as SAML SSO identify providers or external authentication providers, except Janrain. You can’t use Janrain for authentication from the login page.

Authentication configuration settings apply to all your org’s deployed and provisioned My Domains.

Note

  1. From Setup, in the Quick Find box, enter My Domain, and then select My Domain.
  2. Under Authentication Configuration, click Edit.
  3. Select the authentication services you want to make available on the login page.
  4. Save your changes.
You can list all your org’s available SSO identity providers on your login page. If you have several, consider setting up your login page with the Login Discovery page type. For details, see Create an Interview-Based Login Page with My Domain Login Discovery in Salesforce Help.

If an error prevents you from logging in to Salesforce via SSO, you can still log in with a username and password. Append ?login to the login URL, for example, https://MyDomainName.my.salesforce.com/?login. After logging in, if necessary, you can disable SSO while you troubleshoot the issue.

Tip