Head to the Integrations Hub, and choose Connectors > Single Sign On > Salesforce (OAuth).
2. Give the integration a name.
3. For the login URL, head to your Salesforce Admin Setup, and login with your admin credentials. Search for Digital Experiences > All Sites, and find the URL of the site.
4. Copy and paste this URL into Login URL, then click Credentials, Add Credentials, and choose Using admin token link.
5. Click the "Copy" icon next to this field to copy this admin token link to your clipboard.
6. Press Add.
7. Then press Save.
8. Now Paste the URL you just copied above into a new browser tab. You may be prompted to log back in to Salesforce with your admin credentials.
9. Click Allow, if all works well you’ll see a simple Done message.
NOTE: You can also set up credentials a different way by selecting "Using Password" instead of by "Using Admin Token Link".
This will require you to set up a connected OAuth app in your salesforce environment and input the Process Url from your Integrations Hub SSO connector.
You will then have to enter a Username and Password of a Salesforce account with API permissions, as well as the corresponding Security Token and the Client ID and Client Secret from your Salesforce connected app.
10. Refresh the page, then choose Field Mapping.
11. You can Modify the Field Mapping from the defaults, and once ready choose Publish
12. Go Back to Settings and Copy the Begin Url
13. Head back to OpenWater, and in the left menu choose System Settings > Login Configuration
14. Choose Use 3rd Party Corporate Authentication, then Json Web Token. Paste the begin url into the Login Url area. And enter the secret you had set during the preparation steps.
15. Press Save
Then load the Public Website in an Incognito Window
16. Click the Login with Salesforce button
17. Login with your Salesforce Digital Experience / Community user account info. This is not the same as your admin account.
To confirm you have it working correctly, head to the javascript console and enter window.currentUser.externalAccountData
Nice work, you are all set with Single Sign On! High-five yourself, you did it!
Testing Your New SSO
As with any new integration or workflow, testing is super important! You can now load up your site in an incognito window, then test out your login.