Skip to main content

Connect an SSO with Salesforce (OAuth)

Use the Integrations Hub module to connect a single sign on to Salesforce using OAuth.

Written by Cheryn


Setting up Your Connector in Integrations Hub

  1. Get Started in Integrations Hub if you've not yet set up any integrations before.
    ​

  2. Once in Integrations Hub, choose Connectors > Single Sign On > Salesforce (OAuth).

3. Give the integration a name and Save. Then Copy the "Process URL" to use on the Salesforce side of your connector.

Within Salesforce, you will need to set up an External Client App if you do not already have one set up for OpenWater.

In the App Manager, click New External Client App and set up.

Make sure that you select "enable OAuth" and configure the External Client App OAuth Settings. This is where you will enter the Process URL that you copied in Step 3.

4. For the login URL, head to your Salesforce Admin Setup, and login with your admin credentials. Search for Digital Experiences > All Sites, and find the URL of the site.

5. Copy and paste the site URL you copied into the Integration Hub's Login URL and hit Save in the top left of the connector.

6. Next, click Credentials, Add Credentials, and choose "Using client credentials".

7. Enter the Base URL from your Salesforce environment and the Client ID and Client Secret from your Salesforce External Client App.

8. Press Add.
​

9. Then press Save.


​

10. Refresh the page, then choose Field Mapping.

11. You can Modify the Field Mapping from the defaults, and once ready choose Publish

12. Go Back to Settings and Copy the Begin Url

13. Head back to OpenWater, and in the left menu choose System Settings > Login Configuration
​

14. Choose Use 3rd Party Corporate Authentication, then Json Web Token. Paste the begin url into the Login Url area. And enter the secret you had set during the preparation steps.

15. Press Save

Then load the Public Website in an Incognito Window

16. Click the Login with Salesforce button
​

17. Login with your Salesforce Digital Experience / Community user account info. This is not the same as your admin account.

To confirm you have it working correctly, head to the javascript console and enter window.currentUser.externalAccountData

Nice work, you are all set with Single Sign On! High-five yourself, you did it!

Testing Your New SSO

As with any new integration or workflow, testing is super important! You can now load up your site in an incognito window, then test out your login.

Did this answer your question?