Salesforce Community signs in external users of an Experience Cloud site, customers and partners rather than internal Salesforce users. Because each site has its own host, this connector takes a Domain URI.
Copy the redirect URI
In the Authdog console, select the project and environment, open Authentication > Providers, find Salesforce Community, and click Enable. Copy the redirect URI shown in the form:
https://identity.authdog.com/api/v1/callback/<connectionId>Create the connected app
- Create a connected app in the org that owns the Experience Cloud site, as in the Salesforce connector steps.
- Set the Callback URL to the redirect URI from Authdog.
- In Digital Experiences > All Sites, note the site's full URL including any path prefix.
- Make sure the site is active and allows self-registration or has the users you intend to sign in.
- Copy the Consumer Key and Consumer Secret.
Configure Authdog
| Field | Value |
|---|---|
| Client ID | The Consumer Key of the connected app |
| Client Secret | The Consumer Secret of the connected app |
| Domain URI | Your Experience Cloud site URL, e.g. https://acme.my.site.com/customers |
Save, then toggle the connection active.
What Salesforce Community returns
Authdog requests the openid email profile scopes and reads the profile from <domain>/services/oauth2/userinfo.
The site's own userinfo endpoint returns the community user's id, username, email, and display name, scoped to that site, not to the internal org directory.
Include the site's path prefix in the Domain URI. A site published at /customers will not authorize requests sent to the bare domain.
Test it
- Open your environment's hosted sign-in page, or link to
https://identity.authdog.com/api/v1/signin/<connectionId>. - Select the Salesforce Community button and complete the flow.
- Confirm the user appears under Users in the console with a Salesforce Community identity linked.
Troubleshooting
| Symptom | Cause |
|---|---|
invalid_client_id |
The connected app belongs to a different org than the site |
| Endless redirect to the site login page | The site is inactive, or the user is not a member of it |
| Redirect or callback URL error | The URI registered with the provider does not match Authdog's exactly |
| Works in one environment only | Each environment has its own connectionId, and so its own redirect URI to register |
Related
| Read | To learn how to |
|---|---|
| Connectors | Set up any other social provider |
| Salesforce | Sign in internal org users instead |