---
schema_version: "1"
id: 3bda02a077e9950c9ab1765152ba268b99dcd5c85e761c4fde72aed8e9bd0042
title: Configure Single Sign-On (SSO) with Salesforce as the Identity Provider
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/service/264-0-0/voice_pt_setup_config_sso.md
canonical_url: https://help.salesforce.com/s/articleView?id=service.voice_pt_setup_config_sso.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 9035a963775b5577f08b71c9293602590a3a14ea30d1850f38af227ff716b620
description: For Salesforce Voice with Partner Telephony, let reps use a single sign-on page to log in to Voice and in to your partner telephony provider’s system. Configure Salesforce to serve as your identity provider (IdP) and then follow your telephony provider’s instructions for completing the setup. Before you start, ask your telephony provider for the instructions for setting up SSO.
products:
  - Service Cloud
  - Digital Engagement
release: "264"
---
# Configure Single Sign-On (SSO) with Salesforce as the Identity Provider

For Salesforce Voice with Partner Telephony, let reps use a single sign-on page to log in to Voice and in to your partner telephony provider’s system. Configure Salesforce to serve as your identity provider (IdP) and then follow your telephony provider’s instructions for completing the setup. Before you start, ask your telephony provider for the instructions for setting up SSO.

### Required Editions

This article applies to:

- Salesforce Voice with Partner Telephony

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;"><a href="https://help.salesforce.com/s/articleView?id=service.voice_editions.htm&amp;release=264.0.0&amp;type=5" title="Learn about the user interfaces, editions, and add-ons that support Voice solutions by Salesforce.">View supported editions</a>.</td></tr></tbody></table>

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d44595e68">User Permissions
              Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d44595e68 ">To create permission sets:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d44595e68 ">Manage Profiles and Permission Sets</td>

          </tr>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d44595e68 ">To assign permission sets:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d44595e68 ">Assign Permission Sets</td>

          </tr>
        </tbody>
      </table>

Before you begin, contact Salesforce Support to request the ability to create connected apps. This requirement starts in Spring ’26.

1. Configure Salesforce as your identity provider.
    
    1. From Setup, enter Identity Provider in the Quick Find box, select **Identity Provider**, and enable it.
    2. Click **Download Metadata**.
    
    After setting up your external client app in the next step, use the downloaded metadata XML file to help set up SSO in your external telephony system.
2. Create an external client app (ECA) to use for SSO.
    
    ![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-service-support_channels-264-0-0-production-enus/f3c4b3d2-ff86-4f7c-9fe2-3d8b23d35109/images/icon_note.png)
    
    Note We recommend using an external client app for SSO instead of a connected app. Starting in Spring ’26, customers can’t create a connected app unless they request the ability to create connected apps from Salesforce Support. To migrate a preexisting connected app, see [Create an External Client App from a Connected App](https://help.salesforce.com/s/articleView?id=xcloud.migrate_connected_app_to_external_client_app.htm&language=en_US).
    
    1. [Create an external client app](https://help.salesforce.com/s/articleView?id=xcloud.create_a_local_external_client_app.htm&language=en_US) and set Distribution State set to **Local**.
    2. To enable and configure SAML, [configure the external client app's SAML 2.0 settings and policies](https://help.salesforce.com/s/articleView?id=xcloud.configure_external_client_app_saml.htm&language=en_US).
3. To allow access to the app, update the ECA App policies.
    1. From Setup, enter External Client App Manager in the Quick Find box. Select your ECA.
    2. Click **Edit**.
    3. On the Policies tab, under App Policies, select profiles for users who need access to SSO login or select permission sets that you’re using for Salesforce Voice.
    4. Save your changes.
4. To complete the SSO setup, follow your telephony provider’s guide.