...
You can create, view, edit, or delete records belonging to Salesforce leads, contacts, accounts or any other object from a Sitecore portal page. The Sitecore page is only accessible after visitors login to the website using a login control. Installing the Security Connector for Contacts option allows privileged customers, employees, partners, or any other entity, represented in Salesforce as Contacts, to login to your Sitecore website using credentials stored in their Contact record.
The Security Connector overrides the ASP.NET membership provider so user data is only stored in Salesforce but appears in Sitecore in the “Salesforce” domain. This is commonly called "a single source of truth". After installing the Security Connector it is possible to control the Sitecore user's membership information, role, and profile from Salesforce. The most common way to implement roles is called "Multi-role" where fields in the Salesforce contact (or lead) record specify the Sitecore role. One or more Sitecore roles have the same names as selections in a custom multi-pick list in the Salesforce contact (or lead).
IMPORTANT: The Security Connector is only required if you are using a custom login control. A typical use would be allowing privileged customers, or internal staff, to access Sitecore portal pages.
IMPORTANT: The Security Connector requires a login control on your website.
...