Take the 2-minute tour ×
Salesforce Stack Exchange is a question and answer site for Salesforce administrators, implementation experts, developers and anybody in-between. It's 100% free, no registration required.

I am planning a SSO implementation using SAML 2.0. It is going to be SP (Force.com) Initiated authentication. I wanted to know if any SSO IDP simulator is available from AppXchange (preferred over Java based tools) to understand the implementation before trying it out with Enterprise IDP (ADFS in my case).

share|improve this question
    
Do you have a test Enterprise IDP to work with or only the production IDP? –  Mike Chale Feb 18 '13 at 15:03
    
No only the production IDP .... –  sKaLiDhAsAn Feb 19 '13 at 14:35
add comment

2 Answers 2

You can set up another Salesforce org (e.g. a developer edition) to be your IDP - that's how I got to grips with it originally. There's a wiki article that guides you through the whole process at:

http://wiki.developerforce.com/page/Implementing_Single_Sign-On_Across_Multiple_Organizations

share|improve this answer
    
Thanks, very useful..I have 2 questions:[1] How do I use "User Name" instead of "Federation Id" (post talks on Federation Id) to authenticate. [2] In my SP ORG I provided the Federation Id to just One User and used the same Federation Id for one of the IDP users, the Logon to SP ORG as the user was successful; others are not incl Admin, how to solve this? –  sKaLiDhAsAn Mar 5 '13 at 8:57
    
I don't think you can authenticate via User Name in this case, as Salesforce usernames have to be unique across all orgs, therefore you can't have the same username in the IDP and SP. –  Bob Buzzard Mar 5 '13 at 10:07
3  
Another excellent Tool is Axiom which acts as an IDP and can be used to login to Salesforce with Federated Authentication. You may find it at the below URL: axiomsso.herokuapp.com/SamlIdpHome.action I have not tried it but thought it would be useful for other looking for similar setup. –  sKaLiDhAsAn Apr 27 '13 at 13:23
2  
Another useful post that explains "My Domain", "Redirection to SSO Login Page", "Skipping IDP Authentication". URL: salesforce.stackexchange.com/questions/11713/… –  sKaLiDhAsAn Jun 26 '13 at 14:04
add comment

I have tried using Elastic SSO to do this. A lot of good documentation on Elastic SSO for Salesforce SP SSO integration.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.