Platform and ecosystem

StoreConnect is built natively on Salesforce — not integrated with it. Every object, field, and record is a standard or custom Salesforce object. This means the entire Salesforce platform is available as an extension layer: flows, triggers, APIs, AppExchange apps, and AI tools all work with StoreConnect data without custom middleware.

Salesforce extensibility

Because StoreConnect data lives in Salesforce, you extend and automate your commerce operation using standard Salesforce tools — not StoreConnect-specific APIs.

• Salesforce flows — build no-code automations triggered by any store event: order placed, subscription renewed, booking confirmed, loyalty points earned
• Apex triggers — write custom logic in Apex that fires on any StoreConnect object change
• Platform events — publish and subscribe to real-time events from store activity for integration with external systems
• Experience Cloud — embed StoreConnect store functionality within a Salesforce Experience Cloud site, or use Experience Cloud for authenticated customer portals alongside StoreConnect
• Service Cloud — cases, telephony, and Omni-Channel routing are native Salesforce features available to StoreConnect customers
• CRM Analytics — connect store data to Tableau CRM dashboards and Einstein Discovery models
• Agentforce — surface store and customer context to Agentforce AI agents for service, sales, and self-service scenarios
• AppExchange — any AppExchange app that works with standard Salesforce objects works with StoreConnect data

See Extensible with Salesforce.

Authentication providers

StoreConnect supports multiple authentication methods for customer login and B2B portal access.

• Native account creation — standard email and password registration
• Google SSO — customers can sign in with their Google account
• Microsoft Entra ID / Azure AD — enterprise SSO via Microsoft identity, suitable for B2B portals and internal-facing stores
• SAML — standards-based SSO for custom identity provider integrations
• Experience Cloud SSO — share authentication sessions with a Salesforce Experience Cloud site
• Shared customer accounts across stores — a customer account is shared across every store in the Salesforce org, so one set of credentials works on all of them, and customers sign in separately on each store
• Role-based permissions for staff — store roles control which Salesforce users can reach the web console and comment on, edit, or approve content changes
• Restricted products — restricted products control which authenticated customers can see and buy specific products

See Authentication providers and single sign-on (SSO), including logins across multiple stores.

Security and compliance

StoreConnect is certified and audited across the major compliance frameworks that enterprise and regulated-industry customers require.

• SOC 2 Type II — independently audited security controls
• ISO 27001 — information security management certification
• HIPAA — available as an add-on on the Emporium and Flagship plans
• GDPR — your Salesforce org is the system of record, and the store servers hold a synchronized copy of the data the store needs
• PCI-compliant payment handling — card data is handled by integrated payment providers and never stored in Salesforce or StoreConnect
• Data encryption — data at rest and in transit is encrypted per Salesforce platform standards

See Security compliance features for certification details and the Enterprise guide for architecture context.

Infrastructure and support

• Dedicated servers — Flagship plan customers get dedicated servers; Boutique and Emporium run in a multi-tenant environment
• CDN for media — product images and assets are served via CDN for performance
• 24×7 monitoring — performance and security monitoring, with a 99.9% monthly availability target
• Annual updates — one upgrade a year to the next release, with an upgrade period to test it first

See Technical support features.

Set this up

• Configure SSO and authentication providers
• Review security and compliance