---
schema_version: "1"
id: 4d114fcc35ce1de6ce055fc21e39b06240a74936aa0c666563c58af3e18e9ec5
title: Authentication Provider SSO with Salesforce as the Relying Party
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/experience/264-0-0/sso_authentication_providers.md
canonical_url: https://help.salesforce.com/s/articleView?id=experience.sso_authentication_providers.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 7297172848d477c92423c4f74c4f234a6ca3f1b6c2cb6617a4439fb5f91b6dec
description: With authentication providers, your users can log in to your Salesforce org or Experience Cloud site with single sign-on (SSO) using credentials from a third party. Authentication providers also give your users access to protected third-party data. Salesforce offers several ways to configure authentication providers, such as with OpenID Connect or with a custom OAuth 2.0 configuration. Which protocol you can use depends on the third party.
products:
  - Experiences
release: "264"
---
# Authentication Provider SSO with Salesforce as the Relying Party

With authentication providers, your users can log in to your Salesforce org or Experience Cloud site with single sign-on (SSO) using credentials from a third party. Authentication providers also give your users access to protected third-party data. Salesforce offers several ways to configure authentication providers, such as with OpenID Connect or with a custom OAuth 2.0 configuration. Which protocol you can use depends on the third party.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: Lightning Experience and Salesforce Classic</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>Enterprise</strong>, <strong>Performance</strong>, <strong>Unlimited</strong>, and <strong>Developer</strong> Editions</td></tr></tbody></table>

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
      <colgroup>
        <col style="width:50%">
        <col style="width:50%">
      </colgroup>
      <thead class="slds-text-title_caps ">
        <tr class="">
          <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d36486e68">User Permissions
            Needed</th>
        </tr>
      </thead>
      <tbody>
        <tr class="">
          <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d36486e68 ">To view the settings:</td>

          <td class="slds-cell-wrap" style="vertical-align:top;" headers="d36486e68 ">View Setup and Configuration</td>

        </tr>
        <tr class="">
          <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d36486e68 ">To edit the settings:</td>

          <td class="slds-cell-wrap" style="vertical-align:top;" headers="d36486e68 ">
            <p>Customize Application </p>
            <p style="margin-bottom:0;">AND</p>
            <p style="margin-bottom:0;"> Manage Auth. Providers</p>
          </td>

        </tr>
      </tbody>
    </table>

You have several ways to configure an authentication provider.

- Predefined authentication providers
- Salesforce-managed authentication providers
- OpenID Connect authentication providers
- Custom authentication providers

After you configure an authentication provider in Salesforce, you can add it to your Salesforce login page or your Experience Cloud login page.

## Single Sign-On Authentication and Authorization Flow

Most authentication providers serve a dual purpose. In addition to authenticating users for SSO, they provide access to user data. With access to this third-party data, you can enrich your users’ Salesforce profiles with additional information after they log in with SSO.

For example, when a user logs in to Salesforce using their Facebook credentials, they can authorize access to their Facebook data. Facebook then sends Salesforce an access token, which you can use to access Facebook profile data in order to populate the user’s Salesforce user profile.