---
schema_version: "1"
id: 741e70c123eca2edbf7e712be3fbfce4d5c2db7d31cf9fc985eb89320e9f4b93
title: Create JSON Web Token (JWT) External Credentials
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/loyalty_google_wallet_create_external_credential.md
canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.loyalty_google_wallet_create_external_credential.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 4226b90579bcf216a95723c0d186028de1a8bb9161355a19c2431e3731e9cbb2
description: The external credential represents the details of how Salesforce authenticates to an external system via an authentication protocol. To use named credentials, you must first configure an external credential.
products:
  - Loyalty Management
release: "264"
---
# Create JSON Web Token (JWT) External Credentials

The external credential represents the details of how Salesforce authenticates to an external system via an authentication protocol. To use named credentials, you must first configure an external credential.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: Lightning Experience in&nbsp;<strong>Enterprise</strong>,&nbsp;<strong>Performance</strong>, <strong>Unlimited</strong>, and&nbsp;<strong>Developer</strong>&nbsp;Editions with Loyalty Management - Growth or Loyalty Management - Advanced.</td></tr></tbody></table>

Create an external credential that uses the JWT authentication protocol. For more details about creating external credentials, see [Create or Edit a JWT External Credential](https://help.salesforce.com/s/articleView?id=xcloud.nc_create_edit_jwt_ext_cred.htm&language=en_US&type=5#nc_create_edit_jwt_ext_cred).

1. From Setup, in the Quick Find box, enter Named Credentials, and then select **Named Credentials**.
2. Click **External Credentials** and then click **New**.
3. Complete these fields. <table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small ">
          <thead class="slds-text-title_caps ">
            <tr><th style="vertical-align:bottom;text-align:left;" id="d15262e93-option">

            </th><th style="vertical-align:bottom;text-align:left;" id="d15262e93-desc">
          </th></tr></thead>
          <tbody><tr class="">
            <th style="vertical-align:top;" headers="d15262e93-option" id="d15262e104">Field</th>

            <td style="vertical-align:top;" headers="d15262e93-desc d15262e104">Value</td>

          </tr>
          <tr class="">
            <th style="vertical-align:top;" headers="d15262e93-option" id="d15262e113">Label</th>

            <td style="vertical-align:top;" headers="d15262e93-desc d15262e113">Google Wallet API</td>

          </tr>
          <tr class="">
            <th style="vertical-align:top;" headers="d15262e93-option" id="d15262e122">Name</th>

            <td style="vertical-align:top;" headers="d15262e93-desc d15262e122">Google_Wallet_API</td>

          </tr>
          <tr class="">
            <th style="vertical-align:top;" headers="d15262e93-option" id="d15262e131">Authentication Protocol</th>

            <td style="vertical-align:top;" headers="d15262e93-desc d15262e131">OAuth 2.0</td>

          </tr>
          <tr class="">
            <th style="vertical-align:top;" headers="d15262e93-option" id="d15262e141">Authentication Flow</th>

            <td style="vertical-align:top;" headers="d15262e93-desc d15262e141">
              <p>JWT Bearer Flow</p>
            </td>

          </tr>
          <tr class="">
            <th style="vertical-align:top;" headers="d15262e93-option" id="d15262e153">Identity Provider URL</th>

            <td style="vertical-align:top;" headers="d15262e93-desc d15262e153">https://oauth2.googleapis.com/token <p>For more information on the latest URL,
                see <a href="https://developers.google.com/identity/protocols/oauth2/service-account#httprest_1" target="_blank"><u>Call Google APIs</u></a>.</p>
            </td>

          </tr>
          <tr class="">
            <th style="vertical-align:top;" headers="d15262e93-option" id="d15262e169">Issuer (iss)</th>

            <td style="vertical-align:top;" headers="d15262e93-desc d15262e169">The email address for your Google service account.</td>

          </tr>
          <tr class="">
            <th style="vertical-align:top;" headers="d15262e93-option" id="d15262e178">Subject (sub)</th>

            <td style="vertical-align:top;" headers="d15262e93-desc d15262e178">The email address for your Google service account.</td>

          </tr>
          <tr class="">
            <th style="vertical-align:top;" headers="d15262e93-option" id="d15262e187">Audience</th>

            <td style="vertical-align:top;" headers="d15262e93-desc d15262e187">https://oauth2.googleapis.com/token <p>For more information on the latest URL,
                see <a href="https://developers.google.com/identity/protocols/oauth2/web-server#exchange-authorization-code" target="_blank"><u>Exchange authorization code for refresh and
                    access tokens</u></a>.</p>
            </td>

          </tr>
          <tr class="">
            <th style="vertical-align:top;" headers="d15262e93-option" id="d15262e203">JWT Expiration (Seconds)</th>

            <td style="vertical-align:top;" headers="d15262e93-desc d15262e203">A value up to 3600.</td>

          </tr>
          <tr class="">
            <th style="vertical-align:top;" headers="d15262e93-option" id="d15262e213">Signing Certificate</th>

            <td style="vertical-align:top;" headers="d15262e93-desc d15262e213">The JKS certificate that you imported.</td>

          </tr>
          <tr class="">
            <th style="vertical-align:top;" headers="d15262e93-option" id="d15262e222">Signing Algorithm:</th>

            <td style="vertical-align:top;" headers="d15262e93-desc d15262e222">RS256</td>

          </tr>
        </tbody></table>
4. Save your changes.