---
schema_version: "1"
id: ebc122ce7b3522816f5a1cb6a3d85278982db95263ea827a97eb97112539bc57
title: Configure a Google Authentication Provider
collection: developer
version: current
locale: en-us
portal_url: https://docs.salesforce.com/developer/current/en-us/security/headless-identity-impl-guide/guides/headless-identity/headless-identity-configure-auth-provider.md
canonical_url: https://developer.salesforce.com/docs/platform/headless-identity-impl-guide/guide/headless-identity-configure-auth-provider.html
source_site: developer.salesforce.com
content_type: documentation
content_hash: e044bc722cf7e2992d0becfaf7124f5ae352699f1f2e8bc5387ace57ba76c9d8
products:
  - Headless Identity Implementation Guide
  - Security
---

# Configure a Google Authentication Provider

For this example, configure a Google authentication provider so that users can log in with Google.

|Required Editions|
|-----------------|
|Available in: both Salesforce Classic (not available in all orgs) and Lightning Experience|
|Available in: **Enterprise**, **Unlimited**, and **Developer** Editions|

Authentication providers require you to use an app on the external identity provider to communicate with Salesforce. You can either set up an app yourself or use the default global app provided by Salesforce. In production, we recommend that you create your own app. For testing and for this example, you can use the global app, so you’re only required to fill in a few fields. Salesforce handles the rest.

1.  From Setup, in the Quick Find box, enter `Auth`, and then select **Auth. Providers**.

2.  Click **New**.

3.  From the Provider Type dropdown, select **Google**.

4.  For the name, enter `Google IDP`.

5.  Ensure that the URL suffix is `Google_IDP`.

6.  For Registration Handler, click ![Lookup icon](https://developer.salesforce.com/media/headless-identity-impl-guide/lookup.png), and then search for the name of the registration handler Apex class that you created.

7.  For Execute Registration As, click ![Lookup icon](https://developer.salesforce.com/media/headless-identity-impl-guide/lookup.png), and then search for a user to run the registration handler Apex class. This user must have the Manage Users permission. For this example, you can use your admin user.

8.  Leave the rest of the values blank, and save your changes.

    In production, when you set up your own app on the third-party SSO provider, you must fill in these fields.