--- schema_version: "1" id: ec77bfecc84404f6db53b9a884545f30b91d4dd1d86ab02527a8fe87af505b90 title: Update Your Auth Provider or OpenID Connect IdP Configuration After a Login URL Change collection: admin version: current locale: en-us portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/domain_name_auth_update_idp_auth_provider.md canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.domain_name_auth_update_idp_auth_provider.htm&release=264.0.0&type=5 source_site: help.salesforce.com content_type: documentation content_hash: a1602bc81d9dc21e02520160c05f1b0ed18d02f8fa8492acc4732b39507dc7df description: After you deploy a My Domain change that updates your My Domain or site login URL, OpenID Connect single sign-on (SSO) authentication stops working. OpenID Connect SSO options include Authentication Providers. To allow your users to use this SSO method again, work with your identity provider (IdP) to update your configuration. products: - Salesforce Platform - Cross Cloud release: "264" --- # Update Your Auth Provider or OpenID Connect IdP Configuration After a Login URL Change After you deploy a My Domain change that updates your My Domain or site login URL, OpenID Connect single sign-on (SSO) authentication stops working. OpenID Connect SSO options include Authentication Providers. To allow your users to use this SSO method again, work with your identity provider (IdP) to update your configuration. ### Required Editions
Available in: both Salesforce Classic and Lightning Experience
Available in: Group, Essentials, Professional, Enterprise, Performance, Unlimited, and Developer Editions
![Important](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-setup-264-0-0-production-enus/6f21df35-9ea0-4f53-ac94-45c3b5dfd5bc/images/icon_important.png) Important Before you deploy a change that updates your login URL or you update your authentication settings, make sure that you can access Salesforce after the change. Double-check that at least one admin can log in without authentication features such as SSO, built-in authenticators, or security keys. For more information, see [Preserve Login Access During a My Domain Login URL Change](https://help.salesforce.com/s/articleView?id=xcloud.domain_name_login_change_preserve_access.htm&release=264.0.0&type=5 "When your My Domain or site login URL changes, two multi-factor authentication (MFA) verification methods stop working: built-in authenticators and security keys. Without those methods, single sign-on (SSO) can also stop working. To preserve admin access to Salesforce and prevent end-user frustration, verify your backup authentication methods. In preparation for your My Domain change, determine the post-deployment steps to reestablish authentication for your org, including resetting the affected verification methods for your users."). After you deploy the change that updates your My Domain login URL, work with your identity provider to update your IdP configuration with the new authentication values. These steps also apply after your Experience Cloud site URL or Salesforce Site URL changes, but only if you use the system-managed site URL to authenticate. System-managed site URLs end in \*.my.site.com for Experience Cloud sites and \*.my.salesforce-sites.com for Salesforce Sites. If you authenticate via a custom domain, such as https://www.example.com, that serves your Experience Cloud site or Salesforce Site, then your SSO configuration isn’t affected. 1. In the Quick Find box, enter Auth. Providers, and then select **Auth. Providers**. 2. View the details for each Auth. Provider record. The updated values are shown in the Salesforce Configuration section. ![The Auth Provider Detail screen with the Salesforce Configuration section circled.](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-setup-264-0-0-production-enus/6f21df35-9ea0-4f53-ac94-45c3b5dfd5bc/setup/images/my_domain_auth_provider.png) 3. Share the values in these fields with your identity provider. - Test-Only Initialization URL - Single Sign-On Initialization URL - Existing User Linking URL - OAuth-Only Initialization URL - Callback URL ![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-setup-264-0-0-production-enus/6f21df35-9ea0-4f53-ac94-45c3b5dfd5bc/images/icon_note.png) Note Some identity provider configurations don’t use every field. 4. After your identity provider updates the settings, verify your updated endpoints with the /.well-known/auth-configuration URL path. For example, if your login URL is https://mycompany.my.salesforce.com, visit https://mycompany.my.salesforce.com/.well-known/auth-configuration. ![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-setup-264-0-0-production-enus/6f21df35-9ea0-4f53-ac94-45c3b5dfd5bc/images/icon_note.png) Note If your identity provider updated the values but the changes aren’t reflected in Salesforce, disable the authentication provider in the Authentication Configuration section of the My Domain screen, then enable it again. For more information, see [Add Identity Providers to the My Domain Login Page](https://help.salesforce.com/s/articleView?id=xcloud.domain_name_login_id_prov.htm&release=264.0.0&type=5 "Users can authenticate with alternate identity provider options from your My Domain login page. If you enabled single sign-on (SSO) and configured SAML, or if you set up external authentication providers, you can display them on the login page. Users are sent to the identity provider’s login screen to authenticate and then redirected to Salesforce."). 5. Before you test your new authentication configuration, verify that the value in the Authentication Service field on the My Domain Setup page matches the authentication service record. If needed, edit your Authentication Configuration settings on the My Domain Setup page. Then in the **Authentication Service** field, select the correct record and save your changes. 6. Verify the authentication method from your login page. If necessary, add authentication providers to your login page again. 1. For your org's My Domain login page, see [Add an Authentication Provider to Your Org’s Login Page](https://help.salesforce.com/s/articleView?id=xcloud.sso_provider_org_login_page.htm&type=5&language=en_US). 2. For you Experience Cloud site's login page: [Add an Authentication Provider to Your Experience Cloud Site’s Login Page](https://help.salesforce.com/s/articleView?id=xcloud.sso_provider_customer_add_login_option.htm&type=5&language=en_US). #### See Also - [Update Authentication After a My Domain Change](https://help.salesforce.com/s/articleView?id=xcloud.domain_name_auth_update.htm&release=264.0.0&type=5 "Determine whether your My Domain change requires that you update your authentication settings. Then learn about the authentication settings that can be impacted after a My Domain change and make the required updates. If your My Domain login host name or sites host name changed when you deployed a My Domain change, update your authentication settings.") - [Authentication Provider SSO with Salesforce as the Relying Party](https://help.salesforce.com/s/articleView?id=experience.sso_authentication_providers.htm&type=5&language=en_US) - [Configure Your Experience Cloud Site as a Service Provider or Relying Party](https://help.salesforce.com/s/articleView?id=xcloud.external_identity_sso_sp.htm&type=5&language=en_US)