---
schema_version: "1"
id: 8a350391e0094900a8b9163d2f6e322902052f1af28faf4c9c7fe2cd1cb19040
title: Secure Access to CMS
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/commerce/264-0-0/rt_secure_cms_access.md
canonical_url: https://help.salesforce.com/s/articleView?id=commerce.rt_secure_cms_access.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: fb8495696635fbc9486bcc8661690512bca0af181dd640888c7337d838d84a5f
description: Verify secure access to Point of Sale while maintaining Payment Card Industry (PCI) compliance. Single sign-on (SSO) provides an overview and checklist for security and encryption. Turn on Azure AD and OneLogin with Point of Sale CMS, which enhances security and allows only authorized users to access sensitive information.
products:
  - Commerce
release: "264"
---
# Secure Access to CMS

Verify secure access to Point of Sale while maintaining Payment Card Industry (PCI) compliance. Single sign-on (SSO) provides an overview and checklist for security and encryption. Turn on Azure AD and OneLogin with Point of Sale CMS, which enhances security and allows only authorized users to access sensitive information.

- **[Enable Azure AD with Point of Sale CMS](https://help.salesforce.com/s/articleView?id=commerce.rt_cms_enable_azure_ad.htm&release=264.0.0&type=5)**  
    Enable single sign-on to Point of Sale CMS using Azure Active Directory (AD) and simplify user access management. Configure Azure AD, add users to Point of Sale CMS, and resolve common issues. Users can access the CMS through a custom URL.
- **[Restricting Single Sign-On (SSO) to Microsoft Entra ID in Point of Sale CMS](https://help.salesforce.com/s/articleView?id=commerce.rt_cms_config_restrict_sso_entra.htm&release=264.0.0&type=5)**  
    Restricting Single Sign-On (SSO) to Microsoft Entra ID streamlines Point of Sale CMS authentication. When enabled, employees access the CMS only through their Microsoft Entra ID login, enhancing security and simplifying user management.
- **[Enable OneLogin with Point of Sale CMS](https://help.salesforce.com/s/articleView?id=commerce.rt_cms_enable_onelogin.htm&release=264.0.0&type=5)**  
    Integrate OneLogin with Point of Sale CMS to validate user credentials during login. After the login information is validated, establish communication with Point of Sale.
- **[Point of Sale Single Sign-On](https://help.salesforce.com/s/articleView?id=commerce.rt_cms_single_signon.htm&release=264.0.0&type=5)**  
    Point of Sale Single Sign-On (SSO) lets users sign in with a single set of credentials and access components such as the Content Management System (CMS) and the POS app. Point of Sale supports common identity providers (IdPs), including OneLogin and Azure Active Directory (Azure AD).
- **[Configure Salesforce Identity for Point of Sale SSO](https://help.salesforce.com/s/articleView?id=commerce.rt_cms_config_sso_salesforce_identity.htm&release=264.0.0&type=5)**  
    Connect Point of Sale to your identity provider (Azure AD or OneLogin) through Salesforce Identity.
- **[Remove Customer Data From Point of Sale](https://help.salesforce.com/s/articleView?id=commerce.rt_cms_remove_customer_data.htm&release=264.0.0&type=5)**  
    To comply with privacy regulations, you can mask a customer's Personally Identifiable Informaton (PII) in order history, cart quotes, and all PII associated with collecting interactions. In order history, PII is deleted from orders and returns and pay information. In cart quotes, PII is deleted from sales, returns, and suspended carts.
- **[Security and Encryption Overview](https://help.salesforce.com/s/articleView?id=commerce.rt_cms_security_overview.htm&release=264.0.0&type=5)**  
    Point of Sale employs security measures, including TLS 1.2 encryption, to protect your data in transit and at rest. Point of Sale encrypts sensitive data, uses encrypted hard drives, and refrains from storing credit card data and standalone PII.
- **[Point of Sale User Roles and Authentication FAQs](https://help.salesforce.com/s/articleView?id=commerce.rt_cms_ruser_role_faqs.htm&release=264.0.0&type=5)**  
    Understand the types of users and roles supported by Platform Services (PS) for both Content Management Solution (CMS) and POS solutions. CMS users, with Google account authentication, access configuration, and management tools, and admins can create additional roles and link users.
- **[Configure App Roles in Your Identity Provider](https://help.salesforce.com/s/articleView?id=commerce.rt_cms_config_identity_provider_app_roles.htm&release=264.0.0&type=5)**  
    Create app roles in Microsoft Entra ID and map them to Point of Sale CMS user roles. App roles grant employees access to the CMS based on their assigned role.
- **[Assign App Roles in Microsoft Entra ID](https://help.salesforce.com/s/articleView?id=commerce.rt_cms_config_app_roles_microsoft_entra.htm&release=264.0.0&type=5)**  
    Assign each employee an app role in Microsoft Entra ID so that the employee can access the Point of Sale CMS.
- **[Configure Single Sign-On (SSO) Tenant ID](https://help.salesforce.com/s/articleView?id=commerce.rt_cms_config_sso_tenant_id.htm&release=264.0.0&type=5)**  
    The SSO Tenant ID is a unique identifier for your Microsoft Entra ID account. Retail Cloud CMS uses the ID to restrict authentication to Microsoft Entra ID.