Salesforce signs users in with their production org account. It is the connector for products that sit next to a customer's CRM and want the same identity on both sides.
Copy the redirect URI
In the Authdog console, select the project and environment, open Authentication > Providers, find Salesforce, and click Enable. Copy the redirect URI shown in the form:
https://identity.authdog.com/api/v1/callback/<connectionId>Create the connected app
- In Salesforce Setup, open App Manager and select New Connected App.
- Fill in the name, API name, and contact email.
- Enable Enable OAuth Settings.
- Under Callback URL, paste the redirect URI from Authdog.
- Add the OAuth scopes Access the identity URL service (id, profile, email, address, phone) and Perform requests at any time (refresh_token, offline_access).
- Save. Connected app changes take a few minutes to propagate.
- Open Manage Consumer Details and copy the Consumer Key and Consumer Secret.
Configure Authdog
| Field | Value |
|---|---|
| Client ID | The Salesforce Consumer Key |
| Client Secret | The Salesforce Consumer Secret |
Save, then toggle the connection active.
What Salesforce returns
Authdog requests the openid email profile scopes and reads the profile from https://login.salesforce.com/services/oauth2/userinfo.
The userinfo endpoint returns the user id, organization id, username, email, and display name.
This connector targets production orgs at login.salesforce.com. Use Salesforce Sandbox for test.salesforce.com, and Salesforce Community for Experience Cloud sites on a custom domain.
Test it
- Open your environment's hosted sign-in page, or link to
https://identity.authdog.com/api/v1/signin/<connectionId>. - Select the Salesforce button and complete the flow.
- Confirm the user appears under Users in the console with a Salesforce identity linked.
Troubleshooting
| Symptom | Cause |
|---|---|
OAUTH_APPROVAL_ERROR_GENERIC |
The connected app's policies block the user, or changes have not propagated yet |
invalid_client_id |
The consumer key belongs to a different org or a sandbox |
| Redirect or callback URL error | The URI registered with the provider does not match Authdog's exactly |
| Works in one environment only | Each environment has its own connectionId, and so its own redirect URI to register |
Related
| Read | To learn how to |
|---|---|
| Connectors | Set up any other social provider |
| Salesforce Sandbox | Point the same setup at a sandbox org |
| Salesforce Community | Sign in Experience Cloud users |