---
schema_version: "1"
id: 1720a97f86dbb11afc19d502c871cc9e317cfb41c4be915f5313d9a5074ed814
title: Create Principals for JWT
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/loyalty_google_wallet_principal_for_jwt.md
canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.loyalty_google_wallet_principal_for_jwt.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 4532f112c1d506146224cbe3a1dafb4b02fe9ab9e5a3e54f6e8f7ded294f0d79
description: After you create an external credential that uses JWT authentication, create principals for it. Use the principal to grant access to your external credential.
products:
  - Loyalty Management
release: "264"
---
# Create Principals for JWT

After you create an external credential that uses JWT authentication, create principals for it. Use the principal to grant access to your external credential.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: Lightning Experience in&nbsp;<strong>Enterprise</strong>,&nbsp;<strong>Performance</strong>, <strong>Unlimited</strong>, and&nbsp;<strong>Developer</strong>&nbsp;Editions with Loyalty Management - Growth or Loyalty Management - Advanced.</td></tr></tbody></table>

1. On the Named Credentials page, click **External Credential**.
2. Select the external credential that you created.
3. Scroll to Principals and click **New**.
4. Complete these fields. <table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small ">
          <thead class="slds-text-title_caps ">
            <tr><th style="vertical-align:bottom;text-align:left;" id="d65645e86-option">

            </th><th style="vertical-align:bottom;text-align:left;" id="d65645e86-desc">
          </th></tr></thead>
          <tbody><tr class="">
            <th style="vertical-align:top;" headers="d65645e86-option" id="d65645e97">Field</th>

            <td style="vertical-align:top;" headers="d65645e86-desc d65645e97">Value</td>

          </tr>
          <tr class="">
            <th style="vertical-align:top;" headers="d65645e86-option" id="d65645e106">Parameter Name</th>

            <td style="vertical-align:top;" headers="d65645e86-desc d65645e106">Enter the name of the principal.</td>

          </tr>
          <tr class="">
            <th style="vertical-align:top;" headers="d65645e86-option" id="d65645e115">Sequence Number</th>

            <td style="vertical-align:top;" headers="d65645e86-desc d65645e115">Assign a sequence number. <p>A sequence number specifies the order of principals
                to apply when a user participates in more than one principal.</p>
            </td>

          </tr>
          <tr class="">
            <th style="vertical-align:top;" headers="d65645e86-option" id="d65645e126">Identity Type</th>

            <td style="vertical-align:top;" headers="d65645e86-desc d65645e126">OAuth 2.0</td>

          </tr>
          <tr class="">
            <th style="vertical-align:top;" headers="d65645e86-option" id="d65645e136">Scope</th>

            <td style="vertical-align:top;" headers="d65645e86-desc d65645e136">Any applicable <a href="https://developers.google.com/identity/protocols/oauth2/scopes" target="_blank">OAuth scopes</a>. Separate multiple scopes with a space. <p>For
                a wallet user, use this scope: https://www.googleapis.com/auth/wallet_object.issuer
                https://www.googleapis.com/auth/cloud-platform.</p>
            </td>

          </tr>
        </tbody></table>
5. Save your principal.
6. Scroll to JWT Claims and click **Edit**.
    
    For more information on setting up JWT claims, see [Set Up JWT Claims for External Credentials](https://help.salesforce.com/s/articleView?id=xcloud.nc_jwt_claims.htm&language=en_US&type=5).
7. On the Claims modal window, Click **Add**.
8. Complete these fields. <table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small ">
          <thead class="slds-text-title_caps ">
            <tr><th style="vertical-align:bottom;text-align:left;" id="d65645e188-option">

            </th><th style="vertical-align:bottom;text-align:left;" id="d65645e188-desc">
          </th></tr></thead>
          <tbody><tr class="">
            <th style="vertical-align:top;" headers="d65645e188-option" id="d65645e199">Field</th>

            <td style="vertical-align:top;" headers="d65645e188-desc d65645e199">Value</td>

          </tr>
          <tr class="">
            <th style="vertical-align:top;" headers="d65645e188-option" id="d65645e208">Name</th>

            <td style="vertical-align:top;" headers="d65645e188-desc d65645e208">scope<p>Use lowe case.</p>
            </td>

          </tr>
          <tr class="">
            <th style="vertical-align:top;" headers="d65645e188-option" id="d65645e219">Type</th>

            <td style="vertical-align:top;" headers="d65645e188-desc d65645e219">JWT Body Claim</td>

          </tr>
          <tr class="">
            <th style="vertical-align:top;" headers="d65645e188-option" id="d65645e228">Value</th>

            <td style="vertical-align:top;" headers="d65645e188-desc d65645e228">Use the scope of the principal that you created.</td>

          </tr>
        </tbody></table>
9. Modify the value of the **kid** claim. Use the **private\_key\_id** from the JSON file.
10. Save the claim.