---
schema_version: "1"
id: 0341e26b7c9baf9593328125fd8dc863cf4df4219c96d924f040862b7778a37b
title: Change How to Invoke Embedded Login on the Server
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/external_identity_login_invoke_servlet.md
canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.external_identity_login_invoke_servlet.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: e2e18fc3a60f97b0b8534110d083a4bea5b87e899a339a4a2f8175f8c2f6f045
description: You can change the default behavior of Embedded Login on the server by modifying the <script> tag inside the <head> HTML element at the top of the web page.
products:
  - Security
  - Cross Cloud
release: "264"
---
# Change How to Invoke Embedded Login on the Server

You can change the default behavior of Embedded Login on the server by modifying the `<script>` tag inside the `<head>` HTML element at the top of the web page.

![Warning](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-identity-264-0-0-production-enus/699dab6f-8f1a-4662-b24f-6521d5b747f7/images/icon_warning.png)

Warning In Summer ’24, Salesforce made Embedded Login disabled by default. We recommend that you use the [web server flow](https://help.salesforce.com/s/articleView?id=xcloud.remoteaccess_oauth_web_server_flow.htm&type=5&language=en_US), the [user-agent flow](https://help.salesforce.com/s/articleView?id=xcloud.remoteaccess_oauth_user_agent_flow.htm&type=5&language=en_US), or another redirect-based OAuth 2.0 flow instead of Embedded Login.

Embedded Login relies on third-party cookies, which are blocked or restricted in most browsers. And Embedded Login works only on Google Chrome and only as long as third-party cookies are allowed there by default.

The script loads a Java servlet that enables login capabilities. You can add these parameters to the script to change how the Embedded Login servlet behaves.

`min=false`

Generates a readable JavaScript version. By default, Embedded Login loads the JavaScript in a minimized, lightweight state that’s hard to read. Use `min=false` to generate a response that’s easier to read.

```html
<script src="https://embeddedlogin-dev-ed.my.site.com/demo/servlet/
servlet.loginwidgetcontroller?type=javascript_widget&min=false" async defer></script>
```

`cacheMaxAge=n`

Sets the cache control maximum age header, which the browser uses to determine whether the cached content is fresh or must be refreshed from the server. By default, the cache is cleared every 24 hours. You can change the maximum age, where n is the specified number of seconds. To improve performance, increase the cache age. However, as a result, you receive JavaScript updates from Salesforce less frequently because the updates occur when the cache is cleared. Here, the cache refreshes every three days.

```html
<script src="https://embeddedlogin-dev-ed.my.site.com/demo/servlet/
servlet.loginwidgetcontroller?type=javascript_widget&cacheMaxAge=259200" async defer></script>
```

Embedded Login supports localization. For example, it localizes the login form based on browser settings. All labels, errors, and actions match the browser’s language setting.