---
schema_version: "1"
id: 94d71e293af96af0a37d1143c196fdb9a729460a015fbaaeb5e4a11289d28c90
title: Identity Federation with Salesforce Identity in B2C Commerce
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/cc/264-0-0/b2c_account_manager_identity_federation.md
canonical_url: https://help.salesforce.com/s/articleView?id=cc.b2c_account_manager_identity_federation.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: e25fe69324a3bfa8136abe40c4ef8a51be49538acf82e1a97083906453c05e66
description: Identity federation enables users to access multiple applications or systems with a single set of credentials. Account Manager uses identity federation to enhance security and the app login experience.
products:
  - Commerce
  - B2C Commerce
release: "264"
---
# Identity Federation with Salesforce Identity in B2C Commerce

Identity federation enables users to access multiple applications or systems with a single set of credentials. Account Manager uses identity federation to enhance security and the app login experience.

[Which Salesforce Commerce Product Do I Have?](https://help.salesforce.com/s/articleView?id=commerce.comm_what_product.htm&language=en_US)

Before you enable identity federation in Account Manager, review the available options and their impact on your federated user experience. See [User Management with Identity Federation In Account Manager](https://help.salesforce.com/s/articleView?id=cc.b2c_account_manager_user_management_with_identity_federation.htm&language=en_US)

## Salesforce My Domain

Account Manager uses Salesforce My Domain to identify the subdomain of a user’s org in Salesforce (Salesforce Identity Management (SFIDM)). If their organization's Salesforce My Domain is used by more than one Account Manager organization, users select their Account Manager organization during the SSO process. This one-time selection is required for account linking. For My Domain verification, the user’s Account Manager and Salesforce org email address must match. To verify My Domain and use just-in-time user provisioning, a user logs in to their Salesforce My Domain and authenticates with their Salesforce Identity or third-party Identity and Access Management (IAM). Identity Federation of Account Manager with third-party IAM is done through Salesforce Identity. Account Manager does not directly integrate with third-party IAM.

Account Manager activation and account linking for users depends on how their account is set up.

- **Non-linked user account**—To link their account to their SFIDM, a match of the user’s primary organization My Domain is verified with the one they used for SSO with SFIDM.
- **Existing account**—My Domain verification isn’t required, but the user’s primary organization’s My Domain must match the one that was used for SSO with SFIDM.
- **Just-In-Time User Provisioning**—Salesforce My Domain is verified during Just-In-Time user provisioning.

- **[Configure Account Manager for Identity Federation in B2C Commerce](https://help.salesforce.com/s/articleView?id=cc.b2c_account_manager_configure_account_manager_for_identity_federation.htm&release=264.0.0&type=5)**  
    Identity federation enables users to access multiple applications or systems with a single set of credentials. When you combine identity federation with a Salesforce My Domain, users can link their Salesforce Identity or third-party Identity and Access Management (IAM) credentials with Account Manager.
- **[Activate the Connection Between Account Manager and Salesforce in B2C Commerce](https://help.salesforce.com/s/articleView?id=cc.b2c_account_manager_activate_the_connection_between_account_manager_and_salesforce.htm&release=264.0.0&type=5)**  
    After you enable identity federation, link Account Manager with your Salesforce org.
- **[Install Account Manager in Your Salesforce Org in B2C Commerce](https://help.salesforce.com/s/articleView?id=cc.b2c_account_manager_install_account_manager_in_your_salesforce_org.htm&release=264.0.0&type=5)**  
    Configure the Salesforce org where you want to use identity federation.