How do passwordless login flows work with SLAS?

It uses a callback-based system where SLAS provides a login token, your system sends an OTP (via email or SMS), and the shopper exchanges that OTP for a final access token.

Does it support biometric authentication?

Yes, the skill covers the WebAuthn registration and authentication flows required to implement FIDO2-compliant passkeys for shoppers.

Can this skill help with PWA and SFRA hybrid setups?

Yes, it provides specific implementation patterns for session bridging, allowing users to stay logged in while navigating between a PWA Kit frontend and an SFRA site.

What are the rate limits for passwordless authentication?

Standard SLAS limits for passwordless endpoints are typically 6 requests per user per 10 minutes and 1,000 requests per month on non-production tenants.

What is SLAS in Salesforce B2C Commerce?

SLAS (Shopper Login and API Access Service) is the identity provider service used to authenticate shoppers and authorize access to B2C Commerce APIs across different storefront architectures.

Salesforce B2C SLAS Authentication Patterns

Name: Salesforce B2C SLAS Authentication Patterns
Author: SalesforceCommerceCloud

bySalesforceCommerceCloud

•

E-commerce Solutions

Implements advanced Salesforce SLAS authentication flows including passwordless login, passkeys, and session bridging for B2C Commerce.

This skill provides specialized guidance and implementation patterns for the Salesforce Shopper Login and API Access Service (SLAS). It helps developers navigate complex authentication requirements such as passwordless email and SMS OTP, biometric passkeys via WebAuthn, and critical session bridging between PWA Kit and SFRA storefronts. By providing structured code snippets for token exchange, JWT validation, and hybrid authentication sync, it ensures secure and seamless shopper identity management across the Salesforce Agentforce Commerce ecosystem.

Key Features

01WebAuthn/FIDO2 Passkey registration and login flows

02Trusted System on Behalf (TSOB) for backend integrations

03Session bridging between PWA Kit and SFRA storefronts

0422 GitHub stars

05Hybrid authentication for platform-wide identity sync

06Passwordless authentication (Email & SMS OTP) implementation

Use Cases

01Implementing secure system-to-system backend integrations using SLAS tokens

02Modernizing shopper login with biometric passkeys or OTP-based passwordless flows

03Maintaining session continuity for shoppers moving between React-based PWAs and legacy SFRA pages

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add salesforcecommercecloud/b2c-developer-tooling b2c-slas-auth-patterns

For use in Claude.ai and ChatGPT

Download Skill