Set Up an Authentication Provider for Single Sign-On

Authentication providers are one way of setting up single sign-on (SSO) from an external identity provider, like Google, into Salesforce. With a single parameter, you can link an authentication provider to your app to create an SSO experience that feels native. For this example, we set up a Google authentication provider so that your users can log in to Google from your app.

Required Editions
Available in: both Salesforce Classic (not available in all orgs) and Lightning Experience
Available in: Enterprise, Unlimited, and Developer Editions

This guide shows you how to create a registration handler, set up an authentication provider, and add it to your Experience Cloud site. This guide doesn’t cover a Postman example for configuring the OAuth 2.0 web server flow or user-agent flow to use the sso_provider parameter. For full setup instructions, see Create a Native Single Sign-On Experience in Your App in Salesforce Help.

Create an Authentication Provider Registration Handler

Create an Apex registration handler to use with your authentication provider. When users log in to your third-party app with an external single sign-on (SSO) provider, the registration handler creates and updates their user records.
Configure a Google Authentication Provider

For this example, configure a Google authentication provider so that users can log in with Google.