Configure Authentication If You Are a Salesforce Voice with Telephony Providers Customer

If you are a Salesforce Voice with Telephony Providers customer, Salesforce manages the token for you. The JwtTokenRotatorFunction Lambda function runs every 55 minutes and writes a new 60-minute token to <identity>-salesforce-jwt-secret.

1. To access the JwtTokenRotatorFunction Lambda function and create the JWT secret, you must have Salesforce Contact Center version 22.1 or later. To update your contact center, see Manage Contact Center Updates.
2. In AWS Secrets Manager, open <identity>-salesforce-jwt-secret and confirm that it contains a JWT, not PLACEHOLDER-AFV-JWT-TOKEN.
   Amazon Connect reads the token from that secret when it calls Salesforce.
   
3. Get and save the JWT secret ARN from the Secret ARN field. You’ll need it in multiple steps when setting up Real-time Streaming.
   In Register the A2A Application, set the JWT secret ARN in the CredentialProviderIdentifier parameter. Don’t create a second API-key secret.