I know Salesforce can work as identity or service provider for internal users (standard Salesforce license)

However, is is possible to use Salesforce as Identity Provider to make Salesforce external users (customer community license) login to another service online?


1 Answer 1


Yes, this is possible.

For every experience cloud site you use, it can act as an IDP. This includes external users linked to the site.

Here are the steps to enable communities as IDP, note it is very similar to the regular salesforce as IDP.

  1. Create my domain for your organization. It is under the Domain Management in setting up

  2. Under Security, control find Identify Provider tab and click "Enable Identity Provider" for the org.

  3. Create a connected app with the "Enable SAML" checkbox checked. Provide below parameters from your Service Provider

  4. Assign Profiles for the connected app

  5. Download metadata for communities. Under SAML Login Information, click on Download Metadata. Note there will be a section called "For Communities".

The metadata has the certificate that you can share with your Service Provider

Not the answer you're looking for? Browse other questions tagged .