Authenticate Consumer Goods Cloud mobile app users through the device's system browser rather than the standard embedded WebViews. This external browser login method supports modern enterprise security requirements that WebViews can’t, such as Microsoft Intune Conditional Access SSO, FIDO2/Passkeys, and biometric login.
Where: This change applies to the Consumer Goods Cloud mobile app on iOS and Android in Enterprise, Unlimited, Einstein 1, and Agentforce 1 editions.
How: To enable External Browser Login, configure the authentication settings in Setup. From Setup, enter My Domain in the Quick Find box, and then select Authentication Configuration. Select Use the native browser for user authentication for iOS, Android, or both. The change takes effect on the next login.
Note: For the default connected app, download or update the app and configure the
authentication settings described earlier to use the EBL feature no uninstallation or
reinstallation is required. If you use a custom connected app, add the callback URL
cgcloud://oauth/success to your connected app configuration, update the sync
package to 264 (otherwise callback URL validation will fail), and update your QR code. Then,
uninstall and reinstall the mobile app for the new configuration to work. For Mobile Device
Management (MDM) or Intune deployments, allowlist the cgcloud:// URL scheme in
your MDM app-configuration policy.