SAML is an XML-based open standard data format for exchanging authentication and authorization data between parties, in particular, between an identity provider and a service provider

learn more… | top users | synonyms

1
vote
2answers
53 views

How and when does a Salesforce SAML / OAuth2 user give permission to use a connected app?

We created a Salesforce Connected App which should get its access token using SAML / OAuth2. The request looks as follows: ...
0
votes
0answers
27 views

ADFS 2.0 unable to parse SAML authentication request from SF

I have set up SSO according to the instructions in this article. The org is using my domain and the login starts from MYORG.salesforce.com The SAML Authentication request is going out successfully ...
0
votes
0answers
13 views

“No Service Providers” Under: Administration Setup > Identity Provider > Service Providers - After Creating Connected App

I have run through the steps described in the documentation and wiki for setting up Salesforce as an identity provider pretty much word for word. The link with the following text "Service Providers ...
2
votes
1answer
28 views

File size certificate limitations for setting up Saml Single Sign on

I am having trouble loading a certificate (base64 encoded). See the picture below. When I load it, it has the following errors: "Error: Certificate file too large". Are there any known ...
3
votes
1answer
181 views

SSO: IdP initiated works but SP-initiated does not redirect to IDP ADFS - suggestions?

I am setting up SSO and have an issue with the service-provider initiated flow SAML use case. The IdP is ADFS. The SAML Idp Initiated SSO is working but SAML SP-initiated SSO flow doesn't seem to ...
1
vote
1answer
19 views

Getting SamlSsoConfig Object Data through REST API

I'm trying to get SAML url of a particular user via REST API. But I can't find the SamlSsoConfig Object in the list of sobjects returned. I'm wondering if the Object is not exposed. Is there a way I ...
1
vote
1answer
186 views

Unable to parse AuthnRequest from SAML 2.0 Service Provider

My aim is service provider-initiated Web SSO profile. I am implementing the service provider (SP), using Salesforce as the identity provider (IDP) for testing my SP. Can I use Salesforce IDP? I have ...
3
votes
1answer
119 views

Integrate SAML With A Hybrid App Built Using Mobile SDK

I have been developing apps using the Mobile SDK for a while now. All my apps till date use the built-in oAuth mechanism provided by the Mobile SDK for authentication. I have now encountered a use ...
2
votes
1answer
122 views

Salesforce as IdP with ADFS 2.0

I’m trying to use the free developer edition (http://developer.force.com/) of and setup a demo SAML Idp for testing with my ADFS 2.0 + SP. So far I’ve managed to enabled SAML support, and created a ...
1
vote
1answer
248 views

How do I bypass Salesforce login to do SSO with Identity Provider

I am integrating an ASP.MVC site with Salesforce. The front end is an existing ASP site with iframes in some places that lead to Salesforce. ASP side is also the Identity Provider. I have set up ...
1
vote
1answer
130 views

SAML SSO With .NET - What is this error from Salesforce?

I am trying to use MVC.NET as an SSO IdP I cannot understand the reason of the error message I get. The result I get from salesforce says: Validating the Signature Is the response ...
0
votes
1answer
47 views

Salesforce Trusted CA - Trial certificate

Here is list of certificates trusted by Salesforce. http://wiki.apexdevnet.com/page/Outbound_Messaging_SSL_CA_Certificates Is there any certificate which is available on trial basis & trusted by ...
5
votes
3answers
164 views

Can portal users be authenticated with a connected app?

I saw a webinar http://www.youtube.com/watch?v=_MsKJs23W3I on social sign on. Is it possible for user which registered using facebook or janrain to login and use Connected apps?? Or social sign on ...
5
votes
2answers
173 views

Does Salesforce properly sign the SAML Response for IdP Initiated login?

We've setup SFDC as an IdP for SSO 2.0 with another .Net application. The ACS URL, for now, is configured as a VF page which just does a System.debug() on the SAMLResponse We picked up the value from ...
2
votes
2answers
213 views

saml bearer oauth question

This is related to a previous question I asked: See: salesforce saml bearer oauth flow Anyway i am still having problems understanding how to consistently get an access token from salesforce for a ...
5
votes
1answer
262 views

salesforce saml bearer oauth flow

I am getting an invalid assertion 400 json response from salesforce when i try get an oauth access token using the saml bearer oauth grant flow. {"error_description":"invalid ...
6
votes
2answers
445 views

IdP Initiated SSO - modify SAML request based on context

We have setup SFDC as the IdP for SAML 2.0 based SSO with a third party web application called, say, ACME. The use case is thus: User navigates to a Contact record User clicks on custom button User ...
0
votes
0answers
190 views

SAML bearer flow for retrieving an OAuth token gives an assertion error

i'm posting the following request; trying to get an OAuth token: POST ...
1
vote
1answer
172 views

Unable to configure SAML Identity Provider in Partner Developer

I recently moved my Managed Package Developement from Salesforce Free Developer Org to Salseforce Partner Developer Org due to the additional number of users and API limits they have. I am using my ...
4
votes
1answer
412 views

Why does OAuth2 authorization endpoint redirect to callback URL as if it were the SAML IdP?

This is all a proof-of-concept in a sandbox; maybe something I'm doing is not supported in sandboxes. Our org is set up with SAML2-based SSO and that works well. Now I'm trying to use a REST API and ...
2
votes
1answer
237 views

Testing Strategies for SSO with SAML

We're looking to implement SSO with SAML for our org. he set up isn't too bad, but I'm struggling with identifying the right test cases. In terms our implementation, we are publishing the "My ...
8
votes
1answer
485 views

My Domain Gotchas?

I'm looking to setup My Domain as part of setting up SSO with OKTA. Since deploying My Domain is one of those irrevocable features it always make me a little concerned that it may inadvertent affects ...
4
votes
1answer
218 views

My Domain: Why prevent login from login.salesforce.com?

I'm setting up My Domain with OKTA and was curious about the option to prevent login from login.salesforce.com. The documentation doesn't have much on this option and couldn't figure out why I'd want ...
5
votes
2answers
561 views

Data flow for SAML based SSO with salesforce for outlook

We are planning to implement SAML based SSO for our salesforce org. Salesforce will be a service provider. We are also using Salesforce for Outlook plugin. Can anybody explain how username and ...
9
votes
2answers
3k views

How does a user with SAML SSO get redirected to IDP login page?

Question When SSO has been configured for SAML 2.0 and a user's federation identifier has been populated, how do they get redirected to the Identity Provider's login page? Background I'm working to ...
3
votes
1answer
209 views

URL redirect with SAML enabled

We are planning to use SSO with SAML. This means, as far am I am aware, that the URL being displayed in the browser will not have the format na1.salesforce.com, but the format of the sub domain being ...
2
votes
1answer
442 views

SAML not working, validator passes

We are setting up SSO with a custom SAML identity provider. The SAML validator passes just fine: But then when we try to login, we get: I can't see any error logs anywhere (login/history). The ...
5
votes
2answers
325 views

SSO Implementation - Any IDP Simulator available?

I am planning a SSO implementation using SAML 2.0. It is going to be SP (Force.com) Initiated authentication. I wanted to know if any SSO IDP simulator is available from AppXchange (preferred over ...
6
votes
3answers
350 views

Google Apps & Salesforce - SAML SSO

If I'm using Salesforce as the Identity Provider to log in to my Google Apps email, what happens when Salesforce wants to verify my identity by emailing a login verification code? As I think about ...
2
votes
1answer
353 views

SAML Provision Error

We are trying to initiate Salesforce from company's portal and it was working fine until yesterday. We are getting "SAML Provision Error" while trying to launch Salesforce via SSO from Portal. On ...
5
votes
1answer
1k views

How to setup salesforce to force users to use SSO for salesforce authentication (and disable sfdc credentials)

Need to setup salesforce sso, so that users have to use SSO to login, but cannot use standard login.salesforce.com to login. Not able to setup how to prevent login from the standard page with ...
4
votes
1answer
4k views

Error while using Single Sign-On with OpenSSO

I am trying to use salesforce federated single signon feature. I am using Glassfish server and OpenSSO 8.0 While logging in using OpenSSO, I am getting the following error: Login Error Your ...
6
votes
1answer
2k views

How does Delegated Authentication and Federated authentication work in parallel?

This is a follow up question to this question here. According to the answer to that question, it is possible to use Federated Authentication and Delegated Authentication in parallel. I'd like to ...
5
votes
1answer
972 views

Federated Authentication for mobile CRM products

We have implemented Federated Authentication for SSO in an organization. But now we want to use SSO for the Salesforce mobile CRM app. According to this article, Federated Authentication does not ...