---
schema_version: "1"
id: 9ad31a1f7ac683d0df7da82a72f2b0bed2d23aa0cc9d8d600b9c79895024dd92
title: Configure Authentication If You Are a Salesforce Voice with Telephony Providers Customer
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/ai/264-0-0/agentforce_voice_realtime_streaming_auth_managed.md
canonical_url: https://help.salesforce.com/s/articleView?id=ai.agentforce_voice_realtime_streaming_auth_managed.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 937c4ae344f9c14f63c2b1ad9f262740b3032c5174a73dd420a2f85a2aceff3b
description: If you are a Salesforce Voice with Telephony Providers customer, Salesforce manages the token for you. The JwtTokenRotatorFunction Lambda function runs every 55 minutes and writes a new 60-minute token to <identity>-salesforce-jwt-secret.
products:
  - Agentforce
  - Cross Cloud
release: "264"
---
# Configure Authentication If You Are a Salesforce Voice with Telephony Providers Customer

If you are a Salesforce Voice with Telephony Providers customer, Salesforce manages the token for you. The `JwtTokenRotatorFunction` Lambda function runs every 55 minutes and writes a new 60-minute token to `<identity>-salesforce-jwt-secret`.

1. To access the `JwtTokenRotatorFunction` Lambda function and create the JWT secret, you must have Salesforce Contact Center version 22.1 or later. To update your contact center, see [Manage Contact Center Updates](https://help.salesforce.com/s/articleView?id=service.voice_cc_updates.htm&language=en_US).
2. In AWS Secrets Manager, open `<identity>-salesforce-jwt-secret` and confirm that it contains a JWT, not `PLACEHOLDER-AFV-JWT-TOKEN`.
    
    Amazon Connect reads the token from that secret when it calls Salesforce.
    
    ![JWT stored in the Salesforce JWT secret](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-ai-generative_ai-264-0-0-production-enus/f8ef6498-d7b2-44e3-9b34-ffd5a850aae9/generative_ai/images/websocket_amazon_connect_jwt_secret.png)
3. Get and save the JWT secret ARN from the Secret ARN field. You’ll need it in multiple steps when setting up Real-time Streaming.
    
    In [Register the A2A Application](https://help.salesforce.com/s/articleView?id=ai.agentforce_voice_register_a2a_application.htm&release=264.0.0&type=5 "Create an Agent-to-Agent (A2A) server application that points Amazon Connect at your public Agentforce WebSocket URL and JWT secret. Save the application ID and ARN, and confirm the application type, URL, authentication type, and JWT secret ARN."), set the JWT secret ARN in the `CredentialProviderIdentifier` parameter. Don’t create a second API-key secret.