Salesforce
OpenID Configuration
https://login.salesforce.com/.well-known/openid-configuration
JWKS URI
https://login.salesforce.com/id/keys
Also Discoverable Via
Active Keys
| KID | Use | Alg/Crv | Key Length | Observed |
|---|---|---|---|---|
| 266 | sig | RS256 | 4096 | 2026-09-18 |
| 264 | sig | RS256 | 4096 | 2026-05-31 |
| 262 | sig | RS256 | 4096 | 2026-02-15 |
Identity Provider Signals
SalesforceChecked boxes mark headers observed on each endpoint during a successful crawl.
Header signals are clues, not proof of the identity platform. Proxies can add or remove headers.
Salesforce headers identify its edge infrastructure; they do not by themselves establish which identity service is behind it.
Recently Deactivated Keys
| KID | Use | Alg/Crv | Key Length | Observed |
|---|---|---|---|---|
| 260 | sig | RS256 | 4096 | 2025-10-04 to 2026-10-10 (371 days) |
| 258 | sig | RS256 | 4096 | 2025-06-07 to 2026-06-13 (371 days) |
| 256 | sig | RS256 | 4096 | 2025-05-29 to 2026-02-22 (269 days) |
| 254 | sig | RS256 | 4096 | 2025-05-29 to 2025-10-11 (135 days) |
| 252 | sig | RS256 | 4096 | 2025-05-29 to 2025-06-14 (16 days) |