---
schema_version: "1"
id: e38a3e8f6c807240805c3ae3ca5108dad16bfcfa26337d9d955c0dcaca07079f
title: "Prerequisites: Configure Your Experience Cloud Site and Website"
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/external_identity_login_prereqs.md
canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.external_identity_login_prereqs.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: d0915b62219ac6ac5ac6aa4fb30a1c0795ba36d7d0520c389b4a30e747080392
description: Before you implement Embedded Login, you need an Experience Cloud site and your own website.
products:
  - Security
  - Cross Cloud
release: "264"
---
# Prerequisites: Configure Your Experience Cloud Site and Website

Before you implement Embedded Login, you need an Experience Cloud site and your own website.

![Warning](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-identity-264-0-0-production-enus/699dab6f-8f1a-4662-b24f-6521d5b747f7/images/icon_warning.png)

Warning In Summer ’24, Salesforce made Embedded Login disabled by default. We recommend that you use the [web server flow](https://help.salesforce.com/s/articleView?id=xcloud.remoteaccess_oauth_web_server_flow.htm&type=5&language=en_US), the [user-agent flow](https://help.salesforce.com/s/articleView?id=xcloud.remoteaccess_oauth_user_agent_flow.htm&type=5&language=en_US), or another redirect-based OAuth 2.0 flow instead of Embedded Login.

Embedded Login relies on third-party cookies, which are blocked or restricted in most browsers. And Embedded Login works only on Google Chrome and only as long as third-party cookies are allowed there by default.

For your Experience Cloud Site, use the site that you created earlier in this guide. If you haven’t created a site yet, you can complete the [Identity for Customers](https://trailhead.salesforce.com/en/content/learn/modules/identity_external) Trailhead module. You can create your site and earn a badge while you’re at it.

Before you add Embedded Login, make sure that your site works by testing various login scenarios. For example, can Experience Cloud users log in with their username and password? Can visitors join the site? Can users log in through all the social authentication providers that you set up?

![Social providers](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-identity-264-0-0-production-enus/699dab6f-8f1a-4662-b24f-6521d5b747f7/identity/images/external_identity_login_providers.png)

If you configured your site to use the discoverable login page type or any other custom login page type, you can apply that page type to Embedded Login. If you don’t want to apply your site login page type, the default login page type for Embedded Login is username and password. For more information about login page types, see [Prerequisites: Configure Your Experience Cloud Site and Website](https://help.salesforce.com/s/articleView?id=xcloud.external_identity_login_prereqs.htm&type=5&language=en_US).

1. From Setup, enter Digital Experiencea in the Quick Find box, then select **Settings**.
2. Under Embedded Login, select **Apply Login Page Type to Embedded Login** to apply your site’s login page type to your Embedded Login configuration.
3. Select **Block Redirect to Unknown URL** to block redirects to unknown URLs that are provided in the state parameter of the OAuth response during a server-side callback. Redirects are allowed when the URL is in the same host or domain as the site, or is allow-listed in the Embedded Login salesforce-allowed-domains meta tag.
4. Save your changes.

Use your own website to add login capabilities to a web page.

- **[Enable Embedded Login](https://help.salesforce.com/s/articleView?id=xcloud.external_identity_enable_embedded_login.htm&release=264.0.0&type=5)**  
    Embedded Login is disabled by default on all new sites. To use Embedded Login, enable the option on your Experience Cloud site.