Integration Prerequisites and Setup

Integrate Loyalty Management with Google Wallet, allowing a loyalty program to generate digital passes and provide real-time membership updates to your members.

Required Editions

Available in: Developer, Enterprise, Performance, and Unlimited editions that have Loyalty Management enabled.

Make sure that you set up these prerequisites before you integrate Google Wallet with Loyalty Management.

  • Salesforce Org: A Salesforce org with appropriate permissions to configure Named Credentials.
  • Google Service Account: Create a Google service account to configure the required certificates and ensure secure communication. See Service accounts overview.
  • Google Cloud Project and API Activation: Create a Google Cloud project and enable both the Google Wallet API and the IAM Service Account Credentials API.In your project, under API & Services, go to Enable API and Services, search for the APIs and enable them. See Create a Google Cloud project.
  • Role Configuration: Associate the Service Account Token Creator role with your service account email. In your Google Cloud project, under IAM & Admin, go to Grant Access. Add your Service Account email as the Principal and assign the Service Account Token Creator role. See Grant roles to service agents.
  • Google Pay & Wallet Console User Access: Add your service account as a user with Admin access. In Google Pay and Wallet Console, under Users, go to Invite a User. See Add multiple users.
  • Google Wallet API Issuer Account: Set up a Google Wallet API Issuer account to access the Google Wallet API Dashboard in the Google Pay & Wallet console. See Google Wallet API onboarding guide.
  • Generate and Upload Java Keystore (JKS) Certificate
    Use the Java Development Kit to generate a Java Keystore (JKS) Certificate. You need a service account key in the form of a JSON file (.jks) to generate a JKS certificate. Import your certificates and private keys from a keystore to Salesforce.
  • Create JSON Web Token (JWT) External Credentials
    The external credential represents the details of how Salesforce authenticates to an external system via an authentication protocol. To use named credentials, you must first configure an external credential.
  • Create Principals for JWT
    After you create an external credential that uses JWT authentication, create principals for it. Use the principal to grant access to your external credential.
  • Create Named Credentials
    Named credentials offer a declarative and secure way to store and manage the credentials needed for HTTP callouts so that Salesforce can authenticate with external APIs.