SAML is an XML-based open standard data format for exchanging authentication and authorization data between parties, in particular, between an identity provider and a service provider

learn more… | top users | synonyms

0
votes
1answer
26 views

How to choose between oauth and saml [closed]

I need to push data from external system to salesforce. External system has got lot of communities with it. Each community should be linked with a salesforce org. We do have apex classes to pull data ...
0
votes
0answers
19 views

SF One Web App (one/one.app) and SAML within a Community

I'm working on building a Customer Community. For the Desktop version of the Community (from the perspective Customer), we are implementing a SAML 2.0 based authentication. According to the ...
2
votes
1answer
35 views

SAML SSO: Encrypted SAML Assertion with salesforce user id as Attribute

I'm using a Shibboleth IDP to authenticate to Salesforce as the service provider. My desired implementation would be to have the IDP encrypt the SAML Assertion AND provide the identity (salesforce ...
2
votes
0answers
30 views

Missing custom attributes and values in SAML repsonse

I am stuck in a odd issue and wanted to see if anyone has faced this earlier or have any suggestions on what can be the reason behind. Our application has integration with Salesforce where our app ...
2
votes
1answer
106 views

SAML SSO: Unable to import certificate via Java Keystore file (JKS)

I need to configure Single Sign On based on SAML 2.0 including encryption. Life would be easy if salesforce would allow import of the Identity Provider meta information XML that includes certificates ...
3
votes
1answer
58 views

Delegated Authentication vs Service Provider (SP) Initiated Login

I'm reading about Salesforce SSO, I have some questions/clarification, I find the concept of Delegated Auth, SP Initiated Login to be same since salesforce calls the external IDP or external service ...
1
vote
1answer
34 views

SSO for Composite Apps using SAML or OAuth

We have a SaaS running on AWS that we want to integrate with Salesforce. In a first step we want to add a web tab to the Salesforce UI and have a single-sign-on with our application so that if ...
2
votes
1answer
62 views

SAML Bearer flow problems?

I'm trying to follow this guide: SAML Bearer Flow I have the following PHP to build the assertion and post it: //header('Content-type: text/xml'); $assertion = ...
1
vote
1answer
48 views

Salesforce Single Sign on metadata file's binding method can't change in to http redirect

When I'm changing Service Provider Initiated Request Binding in to http redirect it's saving and displaying as http redirect. But when I looking in the metadata file it shows as below. ...
0
votes
0answers
96 views

salesforce1 single sign-on with adfs

I need to configure single sign-on with adfs for salesforce1. Therefore I configured Service Provider Initiated Request Binding on single sign-on settings to http redirect. But when I'm going to ...
4
votes
0answers
33 views

How to retrieve the error description and details for Just-in-Time Provisioning errors for SAML

Usually the errors are returned in the URL parameters of the error page. Since I've created a custom page to be redirected when a SAML error (portal user login) occurs, I would like to display the ...
1
vote
1answer
65 views

Best practice for new user notification when using Federated SSO

When new users are provisioned in SFDC from the standard UI, there is a checkbox for "Generate new password and notify user immediately". This sends an email to the new user with all his/her info. ...
2
votes
0answers
26 views

SAML Validation Error

I am facing SAML validation issue as our URL gets appended with “_nc_external/identity/saml/SamIError". Also this issue is randomly generated for particular set of users, not always. Can you ...
0
votes
0answers
85 views

“Unable to resolve request into a Service Provider” return by Salesforce Identity Provider for SAML 2.0 request

I have a Salesforce instance configured to act as an Identity Provider and am trying to connect a (non-Salesforce) Service Provider (client) to it. So we are making a SAML 2.0 samlp:AuthnRequest using ...
1
vote
1answer
185 views

Error with JIT Provisioning for Salesforce Community User using SAML

I've create the SSO server in which when logging in, Salesforce will takes care of Finding Account Specify Create the Contact Create the Community User Profile with that Contact. Specify the ...
0
votes
0answers
55 views

Salesforce 3rd party Rest service connectivity using SAML assertion

We have a salesforce org connected to SAML SSO and this is working fine. we have an SAP system, which provides a REST service which is also connected to the same SAML Provider, when we try to use the ...
1
vote
1answer
71 views

Salesforce Federated single sign on with AD

I need to know there is a mechanism if the AD is down and when user login to salesforce with only sso (When mydomain settings, selected only single sign on) , what is the way to log in. Thanks, ...
0
votes
0answers
47 views

SSO for .NET applications

I am trying to implement SSO for the on premise .NET web applications. The idea is Salesforce should act as the IDP and do the authentication. Post authentication from Salesforce it would get ...
0
votes
1answer
56 views

Missing LanguageLocaleKey in SAML response?

We (company XYZ) is a service providers and I am setting up XYZ as a custom app in SFDC (testing in SFDC Developers account). I successfully configured SFDC as Identity Provider, and Company XYZ as ...
3
votes
0answers
180 views

Invalid Signature Identity Provider Event Log for Self Signed Certificate SAML Sp Intiatied Web Browser SSO Profile

I am implementing Service Provider component of SAML protocol and I am aiming to achieve SP Initiated Web Browser SSO Profile.I have configured my domain I dint add my self signed digital ...
1
vote
0answers
66 views

SFDC and ADFS integration [closed]

It's my first project with SFDC, ADFS and SAML... What I need to achieve: I need to integrate our java standalone application with SFDC and ADFS. In all articles I read there is written that user is ...
0
votes
1answer
55 views

Does SF support two ADFS servers in different forests providing SSO?

We are trying to use SSO on 2 different domains that will connect to our SF org.Currently we have ADFS SAML setup to 1 but we adding another one. The question is, does SF support two ADFS servers in ...
2
votes
2answers
402 views

Enabling SAML SSO: where is the “Use Single Sign-On” permission?

We've set up Single Sign on with SAML. Our IdP is OneLogin and using their link, we are able to connect. We now want to disable password login for some users in Salesforce. Salesforce's documentation ...
2
votes
1answer
166 views

How to authorize users to use SAML2 bearer oauth flow?

I am new in the forum as a signed up user but have been lurking for a while. I have the following setup: a connected app with a certificate associated associated the system admin profile to the app ...
1
vote
1answer
51 views

SSO Connect App: “Data Not Available”

We are working in a sandbox and have recreated a connected app we use for SSO. When we try to load the IdP-Initiated Login URL I get a Data Not Available error. I get the same error when I try to ...
3
votes
2answers
700 views

How and when does a Salesforce SAML / OAuth2 user give permission to use a connected app?

We created a Salesforce Connected App which should get its access token using SAML / OAuth2. The request looks as follows: ...
0
votes
0answers
374 views

ADFS 2.0 unable to parse SAML authentication request from SF

I have set up SSO according to the instructions in this article. The org is using my domain and the login starts from MYORG.salesforce.com The SAML Authentication request is going out successfully ...
0
votes
0answers
40 views

“No Service Providers” Under: Administration Setup > Identity Provider > Service Providers - After Creating Connected App

I have run through the steps described in the documentation and wiki for setting up Salesforce as an identity provider pretty much word for word. The link with the following text "Service Providers ...
3
votes
1answer
115 views

File size certificate limitations for setting up Saml Single Sign on

I am having trouble loading a certificate (base64 encoded). See the picture below. When I load it, it has the following errors: "Error: Certificate file too large". Are there any known ...
4
votes
1answer
3k views

SSO: IdP initiated works but SP-initiated does not redirect to IDP ADFS - suggestions?

I am setting up SSO and have an issue with the service-provider initiated flow SAML use case. The IdP is ADFS. The SAML Idp Initiated SSO is working but SAML SP-initiated SSO flow doesn't seem to ...
1
vote
1answer
45 views

Getting SamlSsoConfig Object Data through REST API

I'm trying to get SAML url of a particular user via REST API. But I can't find the SamlSsoConfig Object in the list of sobjects returned. I'm wondering if the Object is not exposed. Is there a way I ...
2
votes
1answer
2k views

Unable to parse AuthnRequest from SAML 2.0 Service Provider

My aim is service provider-initiated Web SSO profile. I am implementing the service provider (SP), using Salesforce as the identity provider (IDP) for testing my SP. Can I use Salesforce IDP? I have ...
4
votes
1answer
311 views

Integrate SAML With A Hybrid App Built Using Mobile SDK

I have been developing apps using the Mobile SDK for a while now. All my apps till date use the built-in oAuth mechanism provided by the Mobile SDK for authentication. I have now encountered a use ...
2
votes
1answer
591 views

Salesforce as IdP with ADFS 2.0

I’m trying to use the free developer edition (http://developer.force.com/) of and setup a demo SAML Idp for testing with my ADFS 2.0 + SP. So far I’ve managed to enabled SAML support, and created a ...
1
vote
1answer
1k views

How do I bypass Salesforce login to do SSO with Identity Provider

I am integrating an ASP.MVC site with Salesforce. The front end is an existing ASP site with iframes in some places that lead to Salesforce. ASP side is also the Identity Provider. I have set up ...
1
vote
1answer
270 views

SAML SSO With .NET - What is this error from Salesforce?

I am trying to use MVC.NET as an SSO IdP I cannot understand the reason of the error message I get. The result I get from salesforce says: Validating the Signature Is the response ...
0
votes
1answer
71 views

Salesforce Trusted CA - Trial certificate

Here is list of certificates trusted by Salesforce. http://wiki.apexdevnet.com/page/Outbound_Messaging_SSL_CA_Certificates Is there any certificate which is available on trial basis & trusted by ...
5
votes
4answers
426 views

Can portal users be authenticated with a connected app?

I saw a webinar http://www.youtube.com/watch?v=_MsKJs23W3I on social sign on. Is it possible for user which registered using facebook or janrain to login and use Connected apps?? Or social sign on ...
5
votes
2answers
225 views

Does Salesforce properly sign the SAML Response for IdP Initiated login?

We've setup SFDC as an IdP for SSO 2.0 with another .Net application. The ACS URL, for now, is configured as a VF page which just does a System.debug() on the SAMLResponse We picked up the value from ...
2
votes
2answers
449 views

saml bearer oauth question

This is related to a previous question I asked: See: salesforce saml bearer oauth flow Anyway i am still having problems understanding how to consistently get an access token from salesforce for a ...
5
votes
1answer
622 views

salesforce saml bearer oauth flow

I am getting an invalid assertion 400 json response from salesforce when i try get an oauth access token using the saml bearer oauth grant flow. {"error_description":"invalid ...
6
votes
2answers
1k views

IdP Initiated SSO - modify SAML request based on context

We have setup SFDC as the IdP for SAML 2.0 based SSO with a third party web application called, say, ACME. The use case is thus: User navigates to a Contact record User clicks on custom button User ...
0
votes
1answer
424 views

SAML bearer flow for retrieving an OAuth token gives an assertion error

i'm posting the following request; trying to get an OAuth token: POST ...
2
votes
1answer
278 views

Unable to configure SAML Identity Provider in Partner Developer

I recently moved my Managed Package Developement from Salesforce Free Developer Org to Salseforce Partner Developer Org due to the additional number of users and API limits they have. I am using my ...
4
votes
1answer
1k views

Why does OAuth2 authorization endpoint redirect to callback URL as if it were the SAML IdP?

This is all a proof-of-concept in a sandbox; maybe something I'm doing is not supported in sandboxes. Our org is set up with SAML2-based SSO and that works well. Now I'm trying to use a REST API and ...
2
votes
1answer
381 views

Testing Strategies for SSO with SAML

We're looking to implement SSO with SAML for our org. he set up isn't too bad, but I'm struggling with identifying the right test cases. In terms our implementation, we are publishing the "My ...
8
votes
1answer
1k views

My Domain Gotchas?

I'm looking to setup My Domain as part of setting up SSO with OKTA. Since deploying My Domain is one of those irrevocable features it always make me a little concerned that it may inadvertent affects ...
4
votes
1answer
384 views

My Domain: Why prevent login from login.salesforce.com?

I'm setting up My Domain with OKTA and was curious about the option to prevent login from login.salesforce.com. The documentation doesn't have much on this option and couldn't figure out why I'd want ...
5
votes
2answers
812 views

Data flow for SAML based SSO with salesforce for outlook

We are planning to implement SAML based SSO for our salesforce org. Salesforce will be a service provider. We are also using Salesforce for Outlook plugin. Can anybody explain how username and ...
13
votes
2answers
8k views

How does a user with SAML SSO get redirected to IDP login page?

Question When SSO has been configured for SAML 2.0 and a user's federation identifier has been populated, how do they get redirected to the Identity Provider's login page? Background I'm working to ...