Salesforce Docs Portal

Set Up Connectors with OpenId Connect OAuth

To create a connection in Data Cloud securely without sharing passwords, some external connectors allow access using OAuth (Open Authorization). If using OAuth, there are several prerequisite implementation steps to complete before you connect the source to Data Cloud.

Required Editions

Available in: All Editions supported by Data 360. See Data 360 edition availability.

Follow these prerequisite steps before connecting to the data source in Data Cloud Setup. To complete these steps you must have admin access.

bookmark icon Bookmark this page or keep it open to refer to this topic as you complete these tasks.

Note
Note Steps and links outside of Salesforce content may not be updated or accurate.

Task 1: Create a Custom OAuth Application

Before you can define your authentication provider in Salesforce, you must create a custom OAuth application on your provider's website. The process can vary depending on your provider.

  1. According to your provider's documentation, create a private app on their website.
  2. Write down these configuration values:
    1. Client ID
    2. Client Secret
    3. Authorization Endpoint URL
    4. Token Endpoint URL

Task 2: Configure an Authentication Provider

Create an authentication provider in Salesforce and then update your provider with the callback URL.

  1. From Setup, in the Quick Find box, enter Auth. Provider, and then select it.
  2. Click New.
  3. Select Open ID Connect from the provider type dropdown.
  4. Fill out the required information.
    1. Name—Enter a name for the Authentication provider.
    2. URL Suffix—The URL automatically gets suffixxed with the name you have given to the Authentication provider.
    3. Consumer Key—Add the Client ID from your provider.
    4. Consumer Secret—Add the Client Secret from your provider.
    5. Authorization Endpoint URL—Enter the Authorization Endpoint URL from your provider.
    6. Token Endpoint URL—Enter the Token Endpoint URL from your provider.
  5. Complete optional fields.
    See Configure an Authentication Provider Using OpenID Connect for full details of the optional fields and steps.
  6. Click Save.

Several client configuration URLs are generated after defining the authentication provider. Write down the callback URL from the Salesforce configuration after you save your work.

After defining the authentication provider in Salesforce, go back to your OpenID provider and update your app's callback URL.