The Salesforce Sandbox connector is the production connector pointed at `test.salesforce.com`. Use it to develop and test against a sandbox org without touching production credentials.

## Copy the redirect URI

In the [Authdog console](https://console.authdog.com), select the project and environment, open **Authentication > Providers**, find **Salesforce Sandbox**, and click **Enable**. Copy the redirect URI shown in the form:

```url
https://identity.authdog.com/api/v1/callback/<connectionId>
```

## Create the connected app

1. Create the connected app in the **sandbox** org, following the [Salesforce connector steps](/docs/connectors/salesforce).
2. Set the **Callback URL** to the redirect URI from your development environment's connection in Authdog.
3. Copy the sandbox org's **Consumer Key** and **Consumer Secret**.

## Configure Authdog

| Field | Value |
| --- | --- |
| **Client ID** | The sandbox org's **Consumer Key** |
| **Client Secret** | The sandbox org's **Consumer Secret** |

Save, then toggle the connection **active**.

## What Salesforce Sandbox returns

Authdog requests the `openid email profile` scopes and reads the profile from `https://test.salesforce.com/services/oauth2/userinfo`.

The response shape matches production. Only the host differs, which means user ids and org ids from a sandbox never collide with production ones.

Configure this connector in your development or staging Authdog environment, and the production connector in production. Mixing them is the usual cause of a sandbox refresh silently breaking sign-in.

## Test it

1. Open your environment's hosted sign-in page, or link to `https://identity.authdog.com/api/v1/signin/<connectionId>`.
2. Select the Salesforce Sandbox button and complete the flow.
3. Confirm the user appears under **Users** in the console with a Salesforce Sandbox identity linked.

## Troubleshooting

| Symptom | Cause |
| --- | --- |
| `invalid_client_id` | A production consumer key was used against the sandbox host |
| Sign-in stops working after a refresh | A sandbox refresh recreates the connected app — re-copy the credentials |
| Redirect or callback URL error | The URI registered with the provider does not match Authdog's exactly |
| Works in one environment only | Each environment has its own `connectionId`, and so its own redirect URI to register |

## Related

| Read | To learn how to |
| --- | --- |
| [Connectors](/docs/connectors) | Set up any other social provider |
| [Salesforce](/docs/connectors/salesforce) | Set up the production connector |