SAML is an XML-based open standard data format for exchanging authentication and authorization data between parties, in particular, between an identity provider and a service provider

learn more… | top users | synonyms

2
votes
1answer
23 views

SAML Bearer flow problems?

I'm trying to follow this guide: SAML Bearer Flow I have the following PHP to build the assertion and post it: //header('Content-type: text/xml'); $assertion = ...
1
vote
1answer
33 views

Salesforce Single Sign on metadata file's binding method can't change in to http redirect

When I'm changing Service Provider Initiated Request Binding in to http redirect it's saving and displaying as http redirect. But when I looking in the metadata file it shows as below. ...
0
votes
0answers
44 views

salesforce1 single sign-on with adfs

I need to configure single sign-on with adfs for salesforce1. Therefore I configured Service Provider Initiated Request Binding on single sign-on settings to http redirect. But when I'm going to ...
4
votes
0answers
24 views

How to retrieve the error description and details for Just-in-Time Provisioning errors for SAML

Usually the errors are returned in the URL parameters of the error page. Since I've created a custom page to be redirected when a SAML error (portal user login) occurs, I would like to display the ...
1
vote
1answer
40 views

Best practice for new user notification when using Federated SSO

When new users are provisioned in SFDC from the standard UI, there is a checkbox for "Generate new password and notify user immediately". This sends an email to the new user with all his/her info. ...
2
votes
0answers
24 views

SAML Validation Error

I am facing SAML validation issue as our URL gets appended with “_nc_external/identity/saml/SamIError". Also this issue is randomly generated for particular set of users, not always. Can you ...
0
votes
0answers
34 views

“Unable to resolve request into a Service Provider” return by Salesforce Identity Provider for SAML 2.0 request

I have a Salesforce instance configured to act as an Identity Provider and am trying to connect a (non-Salesforce) Service Provider (client) to it. So we are making a SAML 2.0 samlp:AuthnRequest using ...
1
vote
1answer
111 views

Error with JIT Provisioning for Salesforce Community User using SAML

I've create the SSO server in which when logging in, Salesforce will takes care of Finding Account Specify Create the Contact Create the Community User Profile with that Contact. Specify the ...
0
votes
0answers
43 views

Salesforce 3rd party Rest service connectivity using SAML assertion

We have a salesforce org connected to SAML SSO and this is working fine. we have an SAP system, which provides a REST service which is also connected to the same SAML Provider, when we try to use the ...
1
vote
1answer
61 views

Salesforce Federated single sign on with AD

I need to know there is a mechanism if the AD is down and when user login to salesforce with only sso (When mydomain settings, selected only single sign on) , what is the way to log in. Thanks, ...
0
votes
0answers
38 views

SSO for .NET applications

I am trying to implement SSO for the on premise .NET web applications. The idea is Salesforce should act as the IDP and do the authentication. Post authentication from Salesforce it would get ...
0
votes
1answer
41 views

Missing LanguageLocaleKey in SAML response?

We (company XYZ) is a service providers and I am setting up XYZ as a custom app in SFDC (testing in SFDC Developers account). I successfully configured SFDC as Identity Provider, and Company XYZ as ...
3
votes
0answers
139 views

Invalid Signature Identity Provider Event Log for Self Signed Certificate SAML Sp Intiatied Web Browser SSO Profile

I am implementing Service Provider component of SAML protocol and I am aiming to achieve SP Initiated Web Browser SSO Profile.I have configured my domain I dint add my self signed digital ...
1
vote
0answers
56 views

SFDC and ADFS integration [closed]

It's my first project with SFDC, ADFS and SAML... What I need to achieve: I need to integrate our java standalone application with SFDC and ADFS. In all articles I read there is written that user is ...
0
votes
1answer
47 views

Does SF support two ADFS servers in different forests providing SSO?

We are trying to use SSO on 2 different domains that will connect to our SF org.Currently we have ADFS SAML setup to 1 but we adding another one. The question is, does SF support two ADFS servers in ...
2
votes
2answers
244 views

Enabling SAML SSO: where is the “Use Single Sign-On” permission?

We've set up Single Sign on with SAML. Our IdP is OneLogin and using their link, we are able to connect. We now want to disable password login for some users in Salesforce. Salesforce's documentation ...
2
votes
1answer
131 views

How to authorize users to use SAML2 bearer oauth flow?

I am new in the forum as a signed up user but have been lurking for a while. I have the following setup: a connected app with a certificate associated associated the system admin profile to the app ...
1
vote
1answer
47 views

SSO Connect App: “Data Not Available”

We are working in a sandbox and have recreated a connected app we use for SSO. When we try to load the IdP-Initiated Login URL I get a Data Not Available error. I get the same error when I try to ...
3
votes
2answers
544 views

How and when does a Salesforce SAML / OAuth2 user give permission to use a connected app?

We created a Salesforce Connected App which should get its access token using SAML / OAuth2. The request looks as follows: ...
0
votes
0answers
339 views

ADFS 2.0 unable to parse SAML authentication request from SF

I have set up SSO according to the instructions in this article. The org is using my domain and the login starts from MYORG.salesforce.com The SAML Authentication request is going out successfully ...
0
votes
0answers
35 views

“No Service Providers” Under: Administration Setup > Identity Provider > Service Providers - After Creating Connected App

I have run through the steps described in the documentation and wiki for setting up Salesforce as an identity provider pretty much word for word. The link with the following text "Service Providers ...
3
votes
1answer
98 views

File size certificate limitations for setting up Saml Single Sign on

I am having trouble loading a certificate (base64 encoded). See the picture below. When I load it, it has the following errors: "Error: Certificate file too large". Are there any known ...
4
votes
1answer
2k views

SSO: IdP initiated works but SP-initiated does not redirect to IDP ADFS - suggestions?

I am setting up SSO and have an issue with the service-provider initiated flow SAML use case. The IdP is ADFS. The SAML Idp Initiated SSO is working but SAML SP-initiated SSO flow doesn't seem to ...
1
vote
1answer
40 views

Getting SamlSsoConfig Object Data through REST API

I'm trying to get SAML url of a particular user via REST API. But I can't find the SamlSsoConfig Object in the list of sobjects returned. I'm wondering if the Object is not exposed. Is there a way I ...
1
vote
1answer
1k views

Unable to parse AuthnRequest from SAML 2.0 Service Provider

My aim is service provider-initiated Web SSO profile. I am implementing the service provider (SP), using Salesforce as the identity provider (IDP) for testing my SP. Can I use Salesforce IDP? I have ...
4
votes
1answer
265 views

Integrate SAML With A Hybrid App Built Using Mobile SDK

I have been developing apps using the Mobile SDK for a while now. All my apps till date use the built-in oAuth mechanism provided by the Mobile SDK for authentication. I have now encountered a use ...
2
votes
1answer
528 views

Salesforce as IdP with ADFS 2.0

I’m trying to use the free developer edition (http://developer.force.com/) of and setup a demo SAML Idp for testing with my ADFS 2.0 + SP. So far I’ve managed to enabled SAML support, and created a ...
1
vote
1answer
901 views

How do I bypass Salesforce login to do SSO with Identity Provider

I am integrating an ASP.MVC site with Salesforce. The front end is an existing ASP site with iframes in some places that lead to Salesforce. ASP side is also the Identity Provider. I have set up ...
1
vote
1answer
242 views

SAML SSO With .NET - What is this error from Salesforce?

I am trying to use MVC.NET as an SSO IdP I cannot understand the reason of the error message I get. The result I get from salesforce says: Validating the Signature Is the response ...
0
votes
1answer
64 views

Salesforce Trusted CA - Trial certificate

Here is list of certificates trusted by Salesforce. http://wiki.apexdevnet.com/page/Outbound_Messaging_SSL_CA_Certificates Is there any certificate which is available on trial basis & trusted by ...
5
votes
4answers
374 views

Can portal users be authenticated with a connected app?

I saw a webinar http://www.youtube.com/watch?v=_MsKJs23W3I on social sign on. Is it possible for user which registered using facebook or janrain to login and use Connected apps?? Or social sign on ...
5
votes
2answers
217 views

Does Salesforce properly sign the SAML Response for IdP Initiated login?

We've setup SFDC as an IdP for SSO 2.0 with another .Net application. The ACS URL, for now, is configured as a VF page which just does a System.debug() on the SAMLResponse We picked up the value from ...
2
votes
2answers
406 views

saml bearer oauth question

This is related to a previous question I asked: See: salesforce saml bearer oauth flow Anyway i am still having problems understanding how to consistently get an access token from salesforce for a ...
5
votes
1answer
565 views

salesforce saml bearer oauth flow

I am getting an invalid assertion 400 json response from salesforce when i try get an oauth access token using the saml bearer oauth grant flow. {"error_description":"invalid ...
6
votes
2answers
958 views

IdP Initiated SSO - modify SAML request based on context

We have setup SFDC as the IdP for SAML 2.0 based SSO with a third party web application called, say, ACME. The use case is thus: User navigates to a Contact record User clicks on custom button User ...
0
votes
1answer
371 views

SAML bearer flow for retrieving an OAuth token gives an assertion error

i'm posting the following request; trying to get an OAuth token: POST ...
2
votes
1answer
260 views

Unable to configure SAML Identity Provider in Partner Developer

I recently moved my Managed Package Developement from Salesforce Free Developer Org to Salseforce Partner Developer Org due to the additional number of users and API limits they have. I am using my ...
4
votes
1answer
1k views

Why does OAuth2 authorization endpoint redirect to callback URL as if it were the SAML IdP?

This is all a proof-of-concept in a sandbox; maybe something I'm doing is not supported in sandboxes. Our org is set up with SAML2-based SSO and that works well. Now I'm trying to use a REST API and ...
2
votes
1answer
353 views

Testing Strategies for SSO with SAML

We're looking to implement SSO with SAML for our org. he set up isn't too bad, but I'm struggling with identifying the right test cases. In terms our implementation, we are publishing the "My ...
8
votes
1answer
1k views

My Domain Gotchas?

I'm looking to setup My Domain as part of setting up SSO with OKTA. Since deploying My Domain is one of those irrevocable features it always make me a little concerned that it may inadvertent affects ...
4
votes
1answer
303 views

My Domain: Why prevent login from login.salesforce.com?

I'm setting up My Domain with OKTA and was curious about the option to prevent login from login.salesforce.com. The documentation doesn't have much on this option and couldn't figure out why I'd want ...
5
votes
2answers
758 views

Data flow for SAML based SSO with salesforce for outlook

We are planning to implement SAML based SSO for our salesforce org. Salesforce will be a service provider. We are also using Salesforce for Outlook plugin. Can anybody explain how username and ...
13
votes
2answers
7k views

How does a user with SAML SSO get redirected to IDP login page?

Question When SSO has been configured for SAML 2.0 and a user's federation identifier has been populated, how do they get redirected to the Identity Provider's login page? Background I'm working to ...
3
votes
1answer
328 views

URL redirect with SAML enabled

We are planning to use SSO with SAML. This means, as far am I am aware, that the URL being displayed in the browser will not have the format na1.salesforce.com, but the format of the sub domain being ...
2
votes
1answer
765 views

SAML not working, validator passes

We are setting up SSO with a custom SAML identity provider. The SAML validator passes just fine: But then when we try to login, we get: I can't see any error logs anywhere (login/history). The ...
5
votes
2answers
480 views

SSO Implementation - Any IDP Simulator available?

I am planning a SSO implementation using SAML 2.0. It is going to be SP (Force.com) Initiated authentication. I wanted to know if any SSO IDP simulator is available from AppXchange (preferred over ...
6
votes
3answers
409 views

Google Apps & Salesforce - SAML SSO

If I'm using Salesforce as the Identity Provider to log in to my Google Apps email, what happens when Salesforce wants to verify my identity by emailing a login verification code? As I think about ...
2
votes
1answer
492 views

SAML Provision Error

We are trying to initiate Salesforce from company's portal and it was working fine until yesterday. We are getting "SAML Provision Error" while trying to launch Salesforce via SSO from Portal. On ...
7
votes
1answer
2k views

How to setup salesforce to force users to use SSO for salesforce authentication (and disable sfdc credentials)

Need to setup salesforce sso, so that users have to use SSO to login, but cannot use standard login.salesforce.com to login. Not able to setup how to prevent login from the standard page with ...
5
votes
1answer
6k views

Error while using Single Sign-On with OpenSSO

I am trying to use salesforce federated single signon feature. I am using Glassfish server and OpenSSO 8.0 While logging in using OpenSSO, I am getting the following error: Login Error Your ...