---
schema_version: "1"
id: 3af94eb4183ce089e9a3a5382770e8fce7e3941ba18657967d83ba00622e4a2b
title: Configure Your Experience Cloud Site as a Service Provider or Relying Party
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/external_identity_sso_sp.md
canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.external_identity_sso_sp.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 26c2569529a38d00a64b8e70506c155e7210d29968e3de5621c6e5557f38c049
description: To let users log in to your Experience Cloud site with credentials from a third-party provider, configure your site as a service provider or relying party. For single sign-on (SSO) authentication only, you can use SAML to configure your site as a service provider. Or, if you want the third party to authenticate users and authorize them to access third-party data, set up an authentication provider to configure SSO with your site as the relying party.
products:
  - Security
  - Cross Cloud
release: "264"
---
# Configure Your Experience Cloud Site as a Service Provider or Relying Party

To let users log in to your Experience Cloud site with credentials from a third-party provider, configure your site as a service provider or relying party. For single sign-on (SSO) authentication only, you can use SAML to configure your site as a service provider. Or, if you want the third party to authenticate users and authorize them to access third-party data, set up an authentication provider to configure SSO with your site as the relying party.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: both Salesforce Classic and Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>Professional</strong>, <strong>Enterprise</strong>, <strong>Unlimited</strong>, and <strong>Developer</strong> Editions</td></tr></tbody></table>

## Configure Your Site as a SAML Service Provider

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-identity-264-0-0-production-enus/699dab6f-8f1a-4662-b24f-6521d5b747f7/images/icon_note.png)

Note There are many terms to remember for SSO. If you need a refresher, check out [Single Sign-On Terminology](https://help.salesforce.com/articleView?id=sso_terminology.htm&language=en_US) in Salesforce Help.

To set up SAML SSO with a third-party identity provider, use these resources.

- For configuration steps, see [Configure Salesforce as the Service Provider with SAML Single Sign-On](https://help.salesforce.com/articleView?id=sso_saml.htm&language=en_US).
- Optionally, you can set up Just-in-Time (JIT) provisioning to quickly create and update user accounts. For more information, see [Just-in-Time Provisioning for SAML](https://help.salesforce.com/s/articleView?id=xcloud.sso_jit_about.htm&type=5&language=en_US).

## Configure Your Site as the Relying Party with Authentication Providers

Use authentication providers to set up SSO using OpenID Connect or similar authentication protocols. Most authentication providers handle both SSO and third-party data access. For more information on how authentication providers work, visit [Authentication Providers](https://help.salesforce.com/articleView?id=sso_authentication_providers.htm&language=en_US). To get started with setting up your authentication provider, you can use one of these methods.

- Use a predefined authentication provider, such as Apple, Facebook, or Google. For instructions, see [Configure a Predefined Authentication Provider](https://help.salesforce.com/articleView?id=sso_predefined_authentication_provider_parent.htm&language=en_US) in Salesforce Help.
- Use an external authentication provider that uses the OpenID Connect protocol, such as Amazon and PayPal. For instructions, see [Configure an OpenID Connect Authentication Provider](https://help.salesforce.com/articleView?id=sso_provider_openid_connect.htm&language=en_US) in Salesforce Help.
- Create a custom authentication provider for a third party that supports OAuth 2.0, but not OpenID Connect. For instructions, see [Create a Custom External Authentication Provider](https://help.salesforce.com/articleView?id=sso_provider_plugin_custom.htm&language=en_US) in Salesforce Help.