Create JSON Web Token (JWT) External Credentials

The external credential represents the details of how Salesforce authenticates to an external system via an authentication protocol. To use named credentials, you must first configure an external credential.

Required Editions

Available in: Lightning Experience in Enterprise, Performance, Unlimited, and Developer Editions with Loyalty Management - Growth or Loyalty Management - Advanced.

Create an external credential that uses the JWT authentication protocol. For more details about creating external credentials, see Create or Edit a JWT External Credential.

  1. From Setup, in the Quick Find box, enter Named Credentials, and then select Named Credentials.
  2. Click External Credentials and then click New.
  3. Complete these fields.
    Field Value
    Label Google Wallet API
    Name Google_Wallet_API
    Authentication Protocol OAuth 2.0
    Authentication Flow

    JWT Bearer Flow

    Identity Provider URL https://oauth2.googleapis.com/token

    For more information on the latest URL, see Call Google APIs.

    Issuer (iss) The email address for your Google service account.
    Subject (sub) The email address for your Google service account.
    Audience https://oauth2.googleapis.com/token

    For more information on the latest URL, see Exchange authorization code for refresh and access tokens.

    JWT Expiration (Seconds) A value up to 3600.
    Signing Certificate The JKS certificate that you imported.
    Signing Algorithm: RS256
  4. Save your changes.