Salesforce Docs Portal

Create Principals for JWT

After you create an external credential that uses JWT authentication, create principals for it. Use the principal to grant access to your external credential.

Required Editions

Available in: Lightning Experience in Enterprise, Performance, Unlimited, and Developer Editions with Loyalty Management - Growth or Loyalty Management - Advanced.
  1. On the Named Credentials page, click External Credential.
  2. Select the external credential that you created.
  3. Scroll to Principals and click New.
  4. Complete these fields.
    Field Value
    Parameter Name Enter the name of the principal.
    Sequence Number Assign a sequence number.

    A sequence number specifies the order of principals to apply when a user participates in more than one principal.
    Identity Type OAuth 2.0
    Scope Any applicable OAuth scopes. Separate multiple scopes with a space.

    For a wallet user, use this scope: https://www.googleapis.com/auth/wallet_object.issuer https://www.googleapis.com/auth/cloud-platform.
  5. Save your principal.
  6. Scroll to JWT Claims and click Edit.
    For more information on setting up JWT claims, see Set Up JWT Claims for External Credentials.
  7. On the Claims modal window, Click Add.
  8. Complete these fields.
    Field Value
    Name scope

    Use lowe case.
    Type JWT Body Claim
    Value Use the scope of the principal that you created.
  9. Modify the value of the kid claim. Use the private_key_id from the JSON file.
  10. Save the claim.