SAML is an XML-based open standard data format for exchanging authentication and authorization data between parties, in particular, between an identity provider and a service provider

learn more… | top users | synonyms

0
votes
0answers
10 views

Does Salesforce communities support OAuth 2.0 SAML bearer assertion flow

I need to know if SF Communities supports OAuth 2.0 SAML bearer assertion flow. Based on what I read here communities doesn't support SAML Assertion flow that is different from the SAML Bearer ...
1
vote
1answer
54 views

Integrate third party app with Salesforce ensuring a seamless experience

I wrapping up a proposal for a client and I'm facing some integration architectural issues. I really need your help! The client has a self-care website and three mobile apps (android, Windows Mobile, ...
3
votes
0answers
7 views

How to force log out of Service Provider orgs when logging out of Identity Provider org?

Scenario: Hub and spoke org strategy with one Salesforce org acting as a SAML IdP for the other N orgs. Is there a way to force a log out on the SPs when a user manually logs out of the IdP org? I ...
0
votes
1answer
16 views

Why can't I update a Community Users ProfileID during JIT provisioning via SAML SSO?

My Attributes: {"Contact.Account", "001230942830"}, {"Contact.Email", "theEmail@gmail.com"}, {"Contact.FirstName", "theFirstName"}, {"Contact.LastName", "theLastName"}, {"User....
0
votes
1answer
36 views

Using SAML to authenticate user for a force.com site

We are building a force.com site application for a company. It will be used by the company's employees who will login into the application using the company's own login page (which uses their own ...
0
votes
1answer
25 views

Trying to capture SSO errors on a Custom Error URL Page

When an error occurs during SSO, I want to capture the error and display it in a custom Visual Force page. I have the page set up, I am just not sure how to extract the message from SSO. Is there ...
1
vote
0answers
41 views

API Only User Unable to Use SAML Assertion Flow Single Sign-On

I'm having an issue using the SAML Assertion Flow with API Only users (See SAML Assertion Flow https://help.salesforce.com/apex/HTViewHelpDoc?id=remoteaccess_oauth_web_sso_flow.htm&language=en_US )...
0
votes
1answer
38 views

How can I get free or trial ExactTarget instance

How can I get free or trial ExactTarget instance. I need to do ExactTarget SAML2.0 Single Sign-On connector development, integration and testing. Is there any step by step documentation available so ...
4
votes
0answers
38 views

Managing certificates programmatically in Salesforce Org (after sandbox creation/refresh)

I was trying to find some information on feasibility of creating and deleting self-signed certificates in Salesforce Org programmatically, which could be incorporated into post sandbox creation/...
0
votes
1answer
19 views

What is the community URL in the SAML assertion POST?

In this document says: "Also make sure that the community URL in the SAML assertion POST includes /login" Please, tell me what this means. Also. how can I do to verify this condition. Thanks Jose
1
vote
1answer
74 views

Salesforce SAML Assertion - Failed: Missing Consumer Key Parameter

We are developing native mobile app where we are using oAuth token for Salesforce API access. We want to have SSO integrated with some SSO provider like Okta which generates SAML response,where we are ...
2
votes
1answer
57 views

Salesforce as service provider

We are working on a requirement where "my application" will act as Identity Provider and "Salesforce" as Service Provider. Its a IDP initiated SSO(SAML 2.0 Browser POST). My question is what is that ...
0
votes
0answers
19 views

SAML SSO from External IDP for Canvas App

We have Canvas App (java Based) and we want to implement this java based application to have SAML SSO with our own Identity Provider (OpenAM). How should we proceed. We know Canvas App is getting ...
0
votes
0answers
155 views

Unable to map the subject to a Salesforce.com user AssertionId

I am new on salesforce, working on SAML2.0 using OKTA with salesforce. I have choose Salesforce(Federation ID)application on OKTA and follow the instruction given in OKTA, but failed to login in ...
0
votes
0answers
98 views

Unable to map the subject to a Salesforce.com user in Salesforce?

I am new on salesforce, working on SAML2.0 using OKTA with salesforce. I have choose Salesforce(Federation ID)application on OKTA and follow the instruction given in OKTA, but failed to login in ...
3
votes
0answers
37 views

Can you have a salesforce community with multiple Single Sign on Configurations?

Our organization is has multiple clients that we support. We would like to have one community that they all log into for technical support. We have our company's single sign on set up successfully ...
0
votes
0answers
78 views

Need some guidance on writing test class for SAML SSO JIT auto created handler apex class

I have configured SSO for my organisation. Now I need to write test class but I am unable to understand how to pass the values in the predefined method. Methods are as below: global User createUser(...
5
votes
1answer
75 views

Is SAML based login possible with older integrations that use the old SOAP based login?

We are using SAML based federated authentication in our org which works just fine. We have however a company specific desktop client application written some years ago in Java that, among other ...
0
votes
0answers
181 views

SAML configuration to allow Tableu in SF

Im trying to integrate Tableau Dashboards with SF using canvas but im having trouble to set the credentials from tableau. I create an Connected App and try to figure out which parameters choose on ...
2
votes
0answers
312 views

Salesforce SSO and SimpleSAMLphp - Assertion OK, Login failed

I am trying to setup SSO between a LAMP website and SalesForce by using SimpleSAMLphp v.1.13.2. I have followed this tutorial: https://salesforce-developer.net/salesforce-sso-with-simplesamlphp SAML ...
0
votes
0answers
44 views

How to remove default attributes from SAML response?

Is it possible to modify the format of the default SAML response sent by Salesforce, when using it as an Identity Provider for an external service? Essentially, I want to do this opposite to this ...
0
votes
0answers
96 views

Custom attributes limitations in connected app

I would like to know the limitations if any for custom attributes in connected apps (for both openID connect & SAML approach, where salesforce is IDP) 1) What is the limit of attribute value field?...
1
vote
0answers
52 views

Single Sign On Error “Missing Portal_Id Attribute”

I have a customer with an Enterprise edition org. We are implementing single sing on in a sandbox environment. They have a home grown, in-house IDP (SAML 2.0) using Windows Server R2. When we test ...
0
votes
1answer
104 views

Unable to view service provider under identity provider

i have enabled the identity provider setup and filled all the correct details on SAML with the Metadata, i have also created a connected app and enabled SAML and filled the Entity ID with the ...
0
votes
0answers
123 views

SAML Assertion custom attributes

we are using IdP(not Salesforce IDP), and SFDC as the SP. For our use-case, we would like to pass additional attributes with the UserId, such as the Profile,for portals with the request as another ...
3
votes
0answers
152 views

From Salesforce how to invoke ext webservice using SAML assertion?

We have salesforce connected to SAML SSO(OKTA) and OKTA is IDP for salesforce. We have a Java legacy system which provides a Web service and it is also part of SSO. Legacy application expects SAML ...
-1
votes
1answer
51 views

Azure login from Salesforce Communities

I want to create a Web Tag in which I'm going to link a MS Azure app. I want the customer to click the tag and automatically log in the Azure app without giving Azure the credentials. I found many ...
1
vote
1answer
165 views

Why does sf's internal IdP reject attempts to perform service-provider-initiated connected app authentication

I am trying to integrate the SAML 2.0 infrastructure on my web app with the internal identity provider built in to Salesforce. I am having no problems with IdP-initiated authentication. That is, if I ...
0
votes
1answer
189 views

Integrating SFDC with SAP via ADFS

We are integrating SFDC and SAP via Lightning connect 2.0 and we are planning to use OAUTH 2.0 as authentication protocol. Net weaver gateway is exposing SAP data as a ODATA service. Here is what we ...
2
votes
1answer
405 views

How to add custom fields to SAML response?

In the scenario where Salesforce is configured as Identity Provider, how can the SAML assertion returned to authenticating Service Providers be modified to include additional attributes? I cannot see ...
1
vote
0answers
157 views

Implementing SAML SSO for Canvas Apps - Need help

I am trying to implement SAML SSO for Canvas Apps. I have followed all steps stated in the article "Implementing SAML SSO for Canvas Apps" https://developer.salesforce.com/page/...
2
votes
0answers
32 views

Configuring Identity Provider when installing an app

I'm wondering if its possible to configure Saleforce as an Identity Provider during a Saleforce App installation. I have an external application that will extract data from Salesforce. I would like ...
4
votes
1answer
141 views

How to process AD security groups with Just-in-time User Provisioning?

I want to auto-assign permission sets based on a user's membership in various security groups in Active Directory ("AD"), during the Just-in-Time user provisioning process. I understand that this ...
3
votes
0answers
463 views

Invalid Assertion error in OAuth 2.0 SAML Bearer Assertion Flow

I am trying to generate an OAuth token with the SAML 2.0 Bearer Assertion flow in Salesforce.com, but receiving invalid assertion error: { "error_description": "invalid assertion", "error": "...
1
vote
1answer
348 views

Cannot delete Single Sign-on Settings

Under Administration Setup - Security Controls - Single Sign-On Settings, I need to turn off Federated Single Sign-On Using SAML. However, whenever I disable the SAML Enabled checkbox and click [Save],...
3
votes
1answer
337 views

Salesforce SSO and SimpleSAMLphp - not redirecting to startURL on logon

I am using SimpleSAMLphp as an Idp and Salesforce as the Sp. I have it working so that I can go to the Salesforce login page and use the additional button to logon using SSO, as per step 1 in this ...
1
vote
1answer
266 views

ExactTarget SSO configuration “Expecting X509Certificate inside the KeyDescriptor element” error

I have set up my SSO configurations and I keep getting this error when I attempt to log in: 'Incoming SAML assertion/response from an issuer for which the SP has no metadata loaded or is wrong' In an ...
1
vote
1answer
161 views

Does Salesforce Support SAML Artifact Resolution Profile

I am using Salesforce as both the IdP and the SP. So, to be more secure I would prefer to use the SAML Artifact Resolution Profile instead of the Web Browser SSO Profile. Since I cannot find any ...
3
votes
1answer
157 views

Cost associated with Single sign on

Are there any costs associated with using SAML single-sign on with Salesforce? Are there any limits with number of calls on a daily basis?
2
votes
0answers
396 views

Why might a certificate import fail, when uploading a certificate not created from a Salesforce-generated Certificate Signing Request?

I've been given two X509 certificates to upload into an org for use in SSO (one for signing, one for decrypting), but I can't seem to upload either of them successfully. As I've been given the ...
0
votes
1answer
304 views

How to create a User in Salesforce (acting as the SAML Identity Provider) dynamically from a web flow

I am familiar with and have successfully created a Communities user in Salesforce (acting as a SAML service provider (SP)) using Just-In-Time (JIT) provisioning when using a non Salesforce identity ...
1
vote
1answer
118 views

Get instance URL from SAML response (Assertion flow)

I am using SAML Assertion flow from external system to access custom REST API in managed package. SAML response shown here does not give instance url. Is there anyway to get it? Let me know if any ...
1
vote
0answers
205 views

How to call external saml protected web service from salesforce?

I want to call an secured external web service from salesforce. I dont want to pass user name and password as part of my webservice call out since I dont want to maintain them in salesforce. This is ...
0
votes
1answer
3k views

How to choose between oauth and saml [closed]

I need to push data from external system to salesforce. External system has got lot of communities with it. Each community should be linked with a salesforce org. We do have apex classes to pull data ...
2
votes
1answer
911 views

SAML SSO: Encrypted SAML Assertion with salesforce user id as Attribute

I'm using a Shibboleth IDP to authenticate to Salesforce as the service provider. My desired implementation would be to have the IDP encrypt the SAML Assertion AND provide the identity (salesforce ...
2
votes
0answers
89 views

Missing custom attributes and values in SAML repsonse

I am stuck in a odd issue and wanted to see if anyone has faced this earlier or have any suggestions on what can be the reason behind. Our application has integration with Salesforce where our app ...
2
votes
1answer
1k views

SAML SSO: Unable to import certificate via Java Keystore file (JKS)

I need to configure Single Sign On based on SAML 2.0 including encryption. Life would be easy if salesforce would allow import of the Identity Provider meta information XML that includes certificates ...
3
votes
1answer
494 views

Delegated Authentication vs Service Provider (SP) Initiated Login

I'm reading about Salesforce SSO, I have some questions/clarification, I find the concept of Delegated Auth, SP Initiated Login to be same since salesforce calls the external IDP or external service ...
1
vote
1answer
133 views

SSO for Composite Apps using SAML or OAuth

We have a SaaS running on AWS that we want to integrate with Salesforce. In a first step we want to add a web tab to the Salesforce UI and have a single-sign-on with our application so that if ...
2
votes
1answer
331 views

SAML Bearer flow problems?

I'm trying to follow this guide: SAML Bearer Flow I have the following PHP to build the assertion and post it: //header('Content-type: text/xml'); $assertion = createAssertion("...