Set Up an Authentication Provider for Single Sign-On

Authentication providers are one way of setting up single sign-on (SSO) from an external identity provider, like Google, into Salesforce. With a single parameter, you can link an authentication provider to your app to create an SSO experience that feels native. For this example, we set up a Google authentication provider so that your users can log in to Google from your app.

This guide shows you how to create a registration handler, set up an authentication provider, and add it to your Experience Cloud site. This guide doesn’t cover a Postman example for configuring the OAuth 2.0 web server flow or user-agent flow to use the sso_provider parameter. For full setup instructions, see Create a Native Single Sign-On Experience in Your App in Salesforce Help.

• Create an Authentication Provider Registration Handler

  Create an Apex registration handler to use with your authentication provider. When users log in to your third-party app with an external single sign-on (SSO) provider, the registration handler creates and updates their user records.

• Configure a Google Authentication Provider

  For this example, configure a Google authentication provider so that users can log in with Google.