--- schema_version: "1" id: fb2aa83c3c5246971e096e8dae4e4965a37ea506c1daed96fcc514404867d592 title: Update Service Provider Endpoints After a Login or Site URL Change collection: admin version: current locale: en-us portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/domain_name_auth_update_sp.md canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.domain_name_auth_update_sp.htm&release=264.0.0&type=5 source_site: help.salesforce.com content_type: documentation content_hash: b5084b2f194edbfcbfb0c5485255bce69de9344c9c77c2e75d78d5eed7547620 description: When Salesforce acts as an Identity Provider, users can log in to the external service provider or relying party with credentials from your Salesforce org. For example, your users log in to a custom app with their Salesforce credentials or their Experience Cloud site credentials. When your My Domain or site login URL changes, authentication methods that rely on that URL stop working. To restore this authentication method for your users, share the updated endpoints with the third-party service providers. products: - Salesforce Platform - Cross Cloud release: "264" --- # Update Service Provider Endpoints After a Login or Site URL Change When Salesforce acts as an Identity Provider, users can log in to the external service provider or relying party with credentials from your Salesforce org. For example, your users log in to a custom app with their Salesforce credentials or their Experience Cloud site credentials. When your My Domain or site login URL changes, authentication methods that rely on that URL stop working. To restore this authentication method for your users, share the updated endpoints with the third-party service providers. ### Required Editions
Available in: both Salesforce Classic and Lightning Experience
Available in: Group, Essentials, Professional, Enterprise, Performance, Unlimited, and Developer Editions
![Important](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-setup-264-0-0-production-enus/6f21df35-9ea0-4f53-ac94-45c3b5dfd5bc/images/icon_important.png) Important Before you deploy a change that updates your login URL or you update your authentication settings, make sure that you can access Salesforce after the change. Double-check that at least one admin can log in without authentication features such as SSO, built-in authenticators, or security keys. For more information, see [Preserve Login Access During a My Domain Login URL Change](https://help.salesforce.com/s/articleView?id=xcloud.domain_name_login_change_preserve_access.htm&release=264.0.0&type=5 "When your My Domain or site login URL changes, two multi-factor authentication (MFA) verification methods stop working: built-in authenticators and security keys. Without those methods, single sign-on (SSO) can also stop working. To preserve admin access to Salesforce and prevent end-user frustration, verify your backup authentication methods. In preparation for your My Domain change, determine the post-deployment steps to reestablish authentication for your org, including resetting the affected verification methods for your users."). After you deploy the change that updates your My Domain login URL, work with your Identity Provider (IdP) to update your IdP configuration with the new authentication values. These steps also apply after your Experience Cloud site URL or Salesforce Site URL changes, but only if you use the system-managed site URL to authenticate. System-managed site URLs end in \*.my.site.com for Experience Cloud sites and \*.my.salesforce-sites.com for Salesforce Sites. If you authenticate via a custom domain such as https://www.example.com that serves your Experience Cloud site or Salesforce Site, then your SSO configuration is unaffected. 1. After you deploy the My Domain change that updates your login or site URL, validate your configuration with the /.well-known/auth-configuration endpoint path. For example, if your My Domain login URL is https://mycompany.my.salesforce.com, visit https://mycompany.my.salesforce.com/.well-known/auth-configuration. And if your site URL is https://mycompany.my.site.com, visit https://mycompany.my.site.com/.well-known/auth-configuration. ![Tip](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-setup-264-0-0-production-enus/6f21df35-9ea0-4f53-ac94-45c3b5dfd5bc/images/icon_tip.png) Tip Some service providers and relying parties can use this URL to import the required settings. 2. For each service provider that relies on Salesforce as an Identity Provider, determine whether the external client app uses SAML, OpenID Connect, or OAuth. 3. If the external client app is integrated with SAML, work with the relying party to update these fields. - Issuer URL - Well-known metadata endpoints 4. If the external client app is integrated with OpenID Connect or OAuth, work with the service provider or relying party to update these fields. - OAuth endpoints - Audience for JWT Bearer flow 5. After the service provider or relying party updates the required fields, verify the authentication method by accessing the app with the corresponding Salesforce credentials. #### See Also - [Update Authentication After a My Domain Change](https://help.salesforce.com/s/articleView?id=xcloud.domain_name_auth_update.htm&release=264.0.0&type=5 "Determine whether your My Domain change requires that you update your authentication settings. Then learn about the authentication settings that can be impacted after a My Domain change and make the required updates. If your My Domain login host name or sites host name changed when you deployed a My Domain change, update your authentication settings.") - [Salesforce as an Identity Provider](https://help.salesforce.com/s/articleView?id=xcloud.sso_sfdc_idp_parent.htm&type=5&language=en_US) - [Configure Your Experience Cloud Site as an Identity Provider or OpenID Provider](https://help.salesforce.com/s/articleView?id=xcloud.external_identity_sso_idp.htm&type=5&language=en_US)