---
schema_version: "1"
id: 19388510054508ca35f00d8fd02decb9b751cb0431ac5743e9755f83c30c2757
title: Enable External Browser Login for Consumer Goods Cloud Mobile
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/release-notes/264-0-0/rn_retail_vs_code_modeler_external_browser_login.md
canonical_url: https://help.salesforce.com/s/articleView?id=release-notes.rn_retail_vs_code_modeler_external_browser_login.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: e9c0d6910d08d66b520c46fe68fb41dc61cb96a5e1087dd9e14832b37a79dd1b
description: Authenticate Consumer Goods Cloud mobile app users through the device's system browser rather than the standard embedded WebViews. This external browser login method supports modern enterprise security requirements that WebViews can’t, such as Microsoft Intune Conditional Access SSO, FIDO2/Passkeys, and biometric login.
products:
  - Cross Cloud
release: "264"
---
# Enable External Browser Login for Consumer Goods Cloud Mobile

Authenticate Consumer Goods Cloud mobile app users through the device's system browser rather than the standard embedded WebViews. This external browser login method supports modern enterprise security requirements that WebViews can’t, such as Microsoft Intune Conditional Access SSO, FIDO2/Passkeys, and biometric login.

**Where:** This change applies to the Consumer Goods Cloud mobile app on iOS and Android in Enterprise, Unlimited, Einstein 1, and Agentforce 1 editions.

**How:** To enable External Browser Login, configure the authentication settings in Setup. From Setup, enter My Domain in the Quick Find box, and then select Authentication Configuration. Select Use the native browser for user authentication for iOS, Android, or both. The change takes effect on the next login.

**Note:** For the default connected app, download or update the app and configure the authentication settings described earlier to use the EBL feature no uninstallation or reinstallation is required. If you use a custom connected app, add the callback URL `cgcloud://oauth/success` to your connected app configuration, update the sync package to 264 (otherwise callback URL validation will fail), and update your QR code. Then, uninstall and reinstall the mobile app for the new configuration to work. For Mobile Device Management (MDM) or Intune deployments, allowlist the `cgcloud://` URL scheme in your MDM app-configuration policy.