---
schema_version: "1"
id: d999c41a030db9889d11e598038de8782691565e363d8c262d7cb7055c03d270
title: Configure Single Sign-On (SSO) with Your Own Identity Provider
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/service/264-0-0/voice_setup_cc_sso_idp.md
canonical_url: https://help.salesforce.com/s/articleView?id=service.voice_setup_cc_sso_idp.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 89187fb408408e4d58eddee6b79f098accb267c9cfbdf6b21e491d1f2cb963af
description: Use your choice of a third-party identity provider solution for reps to log in to Voice from the Omni-Channel widget. For example, if your org uses Microsoft Azure as an identity provider, you can configure your contact center to require reps to log in and out of Azure’s single sign-on page from Omni-Channel.
products:
  - Service Cloud
  - Digital Engagement
release: "264"
---
# Configure Single Sign-On (SSO) with Your Own Identity Provider

Use your choice of a third-party identity provider solution for reps to log in to Voice from the Omni-Channel widget. For example, if your org uses Microsoft Azure as an identity provider, you can configure your contact center to require reps to log in and out of Azure’s single sign-on page from Omni-Channel.

### Required Editions

This article applies to:

- Salesforce Voice with Amazon Connect
- Salesforce Voice with Partner Telephony
- Salesforce Voice with Partner Telephony from Amazon Connect

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;"><a href="https://help.salesforce.com/s/articleView?id=service.voice_editions.htm&amp;release=264.0.0&amp;type=5" title="Learn about the user interfaces, editions, and add-ons that support Voice solutions by Salesforce.">View supported editions</a>.</td></tr></tbody></table>

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d94667e78">User Permissions
              Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d94667e78 ">To view the Amazon Contact Centers page: </td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d94667e78 ">
              <p>Customize Application AND Manage Call Centers</p>
              <p>OR</p>
              <p style="margin-bottom:0;">Salesforce Voice Delegated Contact
                Center Admin</p>
            </td>

          </tr>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d94667e78 ">To create and manage a contact center:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d94667e78 ">
              <p>Salesforce Voice Contact Center Admin</p>
              <p>OR</p>
              <p style="margin-bottom:0;">Salesforce Voice Delegated Contact Center Admin</p>
            </td>

          </tr>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d94667e78 ">To view the Partner Telephony Contact Centers page:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d94667e78 ">
              <p>Customize Application AND Manage Call Centers</p>
              <p>OR</p>
              <p style="margin-bottom:0;">Salesforce Voice Delegated Contact
                Center Admin</p>
            </td>

          </tr>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d94667e78 ">To create and manage a contact center:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d94667e78 ">
              <p>Salesforce Voice Contact Center Admin (Partner Telephony)</p>
              <p>OR</p>
              <p style="margin-bottom:0;">Salesforce Voice Delegated Contact Center
                Admin</p>
            </td>

          </tr>
        </tbody>
      </table>

The process for setting up a third-party identity provider solution to log in to Salesforce Voice varies based on your telephony provider. Work with your telephony provider to verify the procedure.

1. From Setup, enter Contact Centers in the Quick Find box.
    - For Salesforce Voice with Amazon Connect, select **Amazon Contact Centers**.
    - For Salesforce Voice with Partner Telephony from Amazon Connect and Salesforce Voice with Partner Telephony, select **Partner Telephony Contact Centers**.
2. Click the contact center name for which you want to enable your third-party identity provider.
3. In the contact center details page, configure your identity provider.
    
    When you click **Telephony Settings** on the contact center details page, the third-party identity provider logs you in to your telephony provider. When a rep sets themselves as available in the Omni-Channel widget, the identity provider logs them in to your telephony provider behind the scenes.

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-service-support_channels-264-0-0-production-enus/f3c4b3d2-ff86-4f7c-9fe2-3d8b23d35109/images/icon_note.png)

Note For Salesforce Voice with Amazon Connect, Salesforce creates and manages your AWS account. In this managed architecture, standard SAML 2.0 Federation is the only supported method for authentication. Reps log in directly through a Salesforce connected app or identity provider (such as Okta or Microsoft Entra ID) using an AWS IAM role, without requiring background user syncing.

These configurations aren’t supported.

IAM Identity Center (AWS SSO): AWS IAM Identity Center can’t be enabled for individual AWS accounts. Service Control Policies (SCPs) block IAM Identity Center permissions.

SCIM Provisioning: Salesforce doesn't support SCIM endpoints, tokens, or automated user or group provisioning for AWS accounts. So third-party SCIM deprecations don't affect these accounts.

Before proceeding to Voice on the Omni-Channel widget, reps log in to a single sign-on window. To log out of Voice, reps click **Log Out of Phone System** from Omni-Channel and are redirected to a log out page on Amazon Connect or your third-party telephony provider. When reps are logged out of their phone system, a message appears in Omni-Channel that they must refresh their browser to log in again.

#### See Also

- [Configure Single Sign-On (SSO) with Salesforce as the Identity Provider](https://help.salesforce.com/s/articleView?id=service.voice_pt_setup_config_sso.htm&release=264.0.0&type=5 "For Salesforce Voice with Partner Telephony, let reps use a single sign-on page to log in to Voice and in to your partner telephony provider’s system. Configure Salesforce to serve as your identity provider (IdP) and then follow your telephony provider’s instructions for completing the setup. Before you start, ask your telephony provider for the instructions for setting up SSO.")