SAML is an XML-based open standard data format for exchanging authentication and authorization data between parties, in particular, between an identity provider and a service provider

learn more… | top users | synonyms

2
votes
0answers
19 views

Configuring Identity Provider when installing an app

I'm wondering if its possible to configure Saleforce as an Identity Provider during a Saleforce App installation. I have an external application that will extract data from Salesforce. I would like ...
4
votes
1answer
37 views

How to process AD security groups with Just-in-time User Provisioning?

I want to auto-assign permission sets based on a user's membership in various security groups in Active Directory ("AD"), during the Just-in-Time user provisioning process. I understand that this ...
3
votes
0answers
53 views

Invalid Assertion error in OAuth 2.0 SAML Bearer Assertion Flow

I am trying to generate an OAuth token with the SAML 2.0 Bearer Assertion flow in Salesforce.com, but receiving invalid assertion error: { "error_description": "invalid assertion", "error": ...
0
votes
0answers
30 views

Cannot delete Single Sign-on Settings

Under Administration Setup - Security Controls - Single Sign-On Settings, I need to turn off Federated Single Sign-On Using SAML. However, whenever I disable the SAML Enabled checkbox and click ...
3
votes
1answer
98 views

Salesforce SSO and SimpleSAMLphp - not redirecting to startURL on logon

I am using SimpleSAMLphp as an Idp and Salesforce as the Sp. I have it working so that I can go to the Salesforce login page and use the additional button to logon using SSO, as per step 1 in this ...
1
vote
1answer
74 views

ExactTarget SSO configuration “Expecting X509Certificate inside the KeyDescriptor element” error

I have set up my SSO configurations and I keep getting this error when I attempt to log in: 'Incoming SAML assertion/response from an issuer for which the SP has no metadata loaded or is wrong' In an ...
1
vote
1answer
36 views

Does Salesforce Support SAML Artifact Resolution Profile

I am using Salesforce as both the IdP and the SP. So, to be more secure I would prefer to use the SAML Artifact Resolution Profile instead of the Web Browser SSO Profile. Since I cannot find any ...
3
votes
1answer
52 views

Cost associated with Single sign on

Are there any costs associated with using SAML single-sign on with Salesforce? Are there any limits with number of calls on a daily basis?
0
votes
0answers
73 views

Community access via IFRAME using SAML Auth Problems with IE8

We have a Salesforce Community setup which we deliver through an iframe from our existing customer service web site, our end users log into the customer service site using SAML and can therefore ...
1
vote
0answers
71 views

Why might a certificate import fail, when uploading a certificate not created from a Salesforce-generated Certificate Signing Request?

I've been given two X509 certificates to upload into an org for use in SSO (one for signing, one for decrypting), but I can't seem to upload either of them successfully. As I've been given the ...
0
votes
1answer
49 views

How to create a User in Salesforce (acting as the SAML Identity Provider) dynamically from a web flow

I am familiar with and have successfully created a Communities user in Salesforce (acting as a SAML service provider (SP)) using Just-In-Time (JIT) provisioning when using a non Salesforce identity ...
1
vote
1answer
48 views

Get instance URL from SAML response (Assertion flow)

I am using SAML Assertion flow from external system to access custom REST API in managed package. SAML response shown here does not give instance url. Is there anyway to get it? Let me know if any ...
1
vote
0answers
73 views

How to call external saml protected web service from salesforce?

I want to call an secured external web service from salesforce. I dont want to pass user name and password as part of my webservice call out since I dont want to maintain them in salesforce. This is ...
0
votes
1answer
384 views

How to choose between oauth and saml [closed]

I need to push data from external system to salesforce. External system has got lot of communities with it. Each community should be linked with a salesforce org. We do have apex classes to pull data ...
0
votes
0answers
39 views

SF One Web App (one/one.app) and SAML within a Community

I'm working on building a Customer Community. For the Desktop version of the Community (from the perspective Customer), we are implementing a SAML 2.0 based authentication. According to the ...
2
votes
1answer
234 views

SAML SSO: Encrypted SAML Assertion with salesforce user id as Attribute

I'm using a Shibboleth IDP to authenticate to Salesforce as the service provider. My desired implementation would be to have the IDP encrypt the SAML Assertion AND provide the identity (salesforce ...
2
votes
0answers
48 views

Missing custom attributes and values in SAML repsonse

I am stuck in a odd issue and wanted to see if anyone has faced this earlier or have any suggestions on what can be the reason behind. Our application has integration with Salesforce where our app ...
2
votes
1answer
361 views

SAML SSO: Unable to import certificate via Java Keystore file (JKS)

I need to configure Single Sign On based on SAML 2.0 including encryption. Life would be easy if salesforce would allow import of the Identity Provider meta information XML that includes certificates ...
3
votes
1answer
195 views

Delegated Authentication vs Service Provider (SP) Initiated Login

I'm reading about Salesforce SSO, I have some questions/clarification, I find the concept of Delegated Auth, SP Initiated Login to be same since salesforce calls the external IDP or external service ...
1
vote
1answer
63 views

SSO for Composite Apps using SAML or OAuth

We have a SaaS running on AWS that we want to integrate with Salesforce. In a first step we want to add a web tab to the Salesforce UI and have a single-sign-on with our application so that if ...
2
votes
1answer
174 views

SAML Bearer flow problems?

I'm trying to follow this guide: SAML Bearer Flow I have the following PHP to build the assertion and post it: //header('Content-type: text/xml'); $assertion = ...
1
vote
1answer
64 views

Salesforce Single Sign on metadata file's binding method can't change in to http redirect

When I'm changing Service Provider Initiated Request Binding in to http redirect it's saving and displaying as http redirect. But when I looking in the metadata file it shows as below. ...
0
votes
0answers
179 views

salesforce1 single sign-on with adfs

I need to configure single sign-on with adfs for salesforce1. Therefore I configured Service Provider Initiated Request Binding on single sign-on settings to http redirect. But when I'm going to ...
4
votes
0answers
67 views

How to retrieve the error description and details for Just-in-Time Provisioning errors for SAML

Usually the errors are returned in the URL parameters of the error page. Since I've created a custom page to be redirected when a SAML error (portal user login) occurs, I would like to display the ...
1
vote
1answer
114 views

Best practice for new user notification when using Federated SSO

When new users are provisioned in SFDC from the standard UI, there is a checkbox for "Generate new password and notify user immediately". This sends an email to the new user with all his/her info. ...
2
votes
0answers
39 views

SAML Validation Error

I am facing SAML validation issue as our URL gets appended with “_nc_external/identity/saml/SamIError". Also this issue is randomly generated for particular set of users, not always. Can you ...
0
votes
0answers
152 views

“Unable to resolve request into a Service Provider” return by Salesforce Identity Provider for SAML 2.0 request

I have a Salesforce instance configured to act as an Identity Provider and am trying to connect a (non-Salesforce) Service Provider (client) to it. So we are making a SAML 2.0 samlp:AuthnRequest using ...
1
vote
1answer
352 views

Error with JIT Provisioning for Salesforce Community User using SAML

I've create the SSO server in which when logging in, Salesforce will takes care of Finding Account Specify Create the Contact Create the Community User Profile with that Contact. Specify the ...
0
votes
0answers
70 views

Salesforce 3rd party Rest service connectivity using SAML assertion

We have a salesforce org connected to SAML SSO and this is working fine. we have an SAP system, which provides a REST service which is also connected to the same SAML Provider, when we try to use the ...
1
vote
1answer
78 views

Salesforce Federated single sign on with AD

I need to know there is a mechanism if the AD is down and when user login to salesforce with only sso (When mydomain settings, selected only single sign on) , what is the way to log in. Thanks, ...
0
votes
0answers
64 views

SSO for .NET applications

I am trying to implement SSO for the on premise .NET web applications. The idea is Salesforce should act as the IDP and do the authentication. Post authentication from Salesforce it would get ...
0
votes
1answer
83 views

Missing LanguageLocaleKey in SAML response?

We (company XYZ) is a service providers and I am setting up XYZ as a custom app in SFDC (testing in SFDC Developers account). I successfully configured SFDC as Identity Provider, and Company XYZ as ...
3
votes
0answers
230 views

Invalid Signature Identity Provider Event Log for Self Signed Certificate SAML Sp Intiatied Web Browser SSO Profile

I am implementing Service Provider component of SAML protocol and I am aiming to achieve SP Initiated Web Browser SSO Profile.I have configured my domain I dint add my self signed digital ...
1
vote
0answers
91 views

SFDC and ADFS integration [closed]

It's my first project with SFDC, ADFS and SAML... What I need to achieve: I need to integrate our java standalone application with SFDC and ADFS. In all articles I read there is written that user is ...
0
votes
1answer
59 views

Does SF support two ADFS servers in different forests providing SSO?

We are trying to use SSO on 2 different domains that will connect to our SF org.Currently we have ADFS SAML setup to 1 but we adding another one. The question is, does SF support two ADFS servers in ...
2
votes
2answers
789 views

Enabling SAML SSO: where is the “Use Single Sign-On” permission?

We've set up Single Sign on with SAML. Our IdP is OneLogin and using their link, we are able to connect. We now want to disable password login for some users in Salesforce. Salesforce's documentation ...
2
votes
0answers
247 views

How to authorize users to use SAML2 bearer oauth flow?

I am new in the forum as a signed up user but have been lurking for a while. I have the following setup: a connected app with a certificate associated associated the system admin profile to the app ...
1
vote
1answer
66 views

SSO Connect App: “Data Not Available”

We are working in a sandbox and have recreated a connected app we use for SSO. When we try to load the IdP-Initiated Login URL I get a Data Not Available error. I get the same error when I try to ...
3
votes
2answers
1k views

How and when does a Salesforce SAML / OAuth2 user give permission to use a connected app?

We created a Salesforce Connected App which should get its access token using SAML / OAuth2. The request looks as follows: ...
0
votes
0answers
451 views

ADFS 2.0 unable to parse SAML authentication request from SF

I have set up SSO according to the instructions in this article. The org is using my domain and the login starts from MYORG.salesforce.com The SAML Authentication request is going out successfully ...
4
votes
1answer
156 views

File size certificate limitations for setting up Saml Single Sign on

I am having trouble loading a certificate (base64 encoded). See the picture below. When I load it, it has the following errors: "Error: Certificate file too large". Are there any known ...
4
votes
2answers
3k views

SSO: IdP initiated works but SP-initiated does not redirect to IDP ADFS - suggestions?

I am setting up SSO and have an issue with the service-provider initiated flow SAML use case. The IdP is ADFS. The SAML Idp Initiated SSO is working but SAML SP-initiated SSO flow doesn't seem to ...
1
vote
1answer
62 views

Getting SamlSsoConfig Object Data through REST API

I'm trying to get SAML url of a particular user via REST API. But I can't find the SamlSsoConfig Object in the list of sobjects returned. I'm wondering if the Object is not exposed. Is there a way I ...
2
votes
1answer
3k views

Unable to parse AuthnRequest from SAML 2.0 Service Provider

My aim is service provider-initiated Web SSO profile. I am implementing the service provider (SP), using Salesforce as the identity provider (IDP) for testing my SP. Can I use Salesforce IDP? I have ...
4
votes
1answer
426 views

Integrate SAML With A Hybrid App Built Using Mobile SDK

I have been developing apps using the Mobile SDK for a while now. All my apps till date use the built-in oAuth mechanism provided by the Mobile SDK for authentication. I have now encountered a use ...
2
votes
1answer
697 views

Salesforce as IdP with ADFS 2.0

I’m trying to use the free developer edition (http://developer.force.com/) of and setup a demo SAML Idp for testing with my ADFS 2.0 + SP. So far I’ve managed to enabled SAML support, and created a ...
1
vote
1answer
1k views

How do I bypass Salesforce login to do SSO with Identity Provider

I am integrating an ASP.MVC site with Salesforce. The front end is an existing ASP site with iframes in some places that lead to Salesforce. ASP side is also the Identity Provider. I have set up ...
1
vote
1answer
322 views

SAML SSO With .NET - What is this error from Salesforce?

I am trying to use MVC.NET as an SSO IdP I cannot understand the reason of the error message I get. The result I get from salesforce says: Validating the Signature Is the response ...
0
votes
1answer
95 views

Salesforce Trusted CA - Trial certificate

Here is list of certificates trusted by Salesforce. http://wiki.apexdevnet.com/page/Outbound_Messaging_SSL_CA_Certificates Is there any certificate which is available on trial basis & trusted by ...
5
votes
4answers
535 views

Can portal users be authenticated with a connected app?

I saw a webinar http://www.youtube.com/watch?v=_MsKJs23W3I on social sign on. Is it possible for user which registered using facebook or janrain to login and use Connected apps?? Or social sign on ...