Salesforce Docs Portal

Customize Your My Domain Login Page for Mobile Auth Methods

By default, mobile apps built with Salesforce Mobile SDK use standard authentication. With standard authentication, a user logs in and approves access to their Salesforce data within the mobile app. For improved security and better performance on mobile apps, configure advanced browser-based authentication from the My Domain Setup page. With browser based-authentication, mobile users are taken to their native browser for authentication. After they log in and approve data access, they’re redirected to the mobile app.

Required Editions

Available in: both Salesforce Classic and Lightning Experience
Available in: Group, Essentials, Professional, Enterprise, Performance, Unlimited, and Developer Editions
User Permissions Needed
To customize a My Domain login page: Customize Application

Browser-based authentication is required for mobile users logging in to your My Domain URLs with these authentication methods.

  • Certificate-based login
  • Single sign-on (SSO) configurations that use certificates

For SSO configurations that don’t use certificates, browser-based authentication is recommended for better performance but not required. If you set up browser-based authentication with Google as an SSO identity provider, mobile users who are already logged in to Google aren’t required to log in again. When your mobile app directs users to their native browser for authentication, they can select an option to continue with their Google account. With standard authentication, users don’t get this benefit.

Browser-based authentication is also supported for delegated authentication and authentication with Windows NT LAN Manager (NTLM).

Changing these settings can break your mobile authentication flows. We recommend testing your changes in a sandbox before you implement them in production.

Note
Note Authentication configuration settings apply to your org’s deployed and provisioned My Domains.
  1. From Setup, in the Quick Find box, enter My Domain, and then select My Domain.
  2. Under Authentication Configuration, click Edit.
  3. Select Use the native browser for user authentication on iOS or Use the native browser for user authentication on Android.
    With these settings selected, mobile users are directed to Safari if using iOS, and to Chrome if using Android.
  4. Save your changes.

Advanced browser-based authentication also requires some configuration in your mobile app. For more information, see Using Advanced Authentication in the Mobile SDK Development Guide.

See Also