Single sign-on (SSO) is a property of access control of multiple related, but independent software systems. With this property a user logs in once and gains access to all systems without being prompted to log in again at each of them.

learn more… | top users | synonyms (1)

-1
votes
1answer
16 views

Is Possible to Configure SSO from Citrix to Salesforce

I have the users working in the citrix environment (Virtual system). When the users logged in to the citrix system by using there login. salesforce should not ask for the username and password to ...
0
votes
0answers
19 views

More than one configuration of delegated authentication

I'm working on a project multi-language and multi-country. We use Magento for delegated authentication; in Salesforce we can configure only a url for the delegated authentication, is it possible to ...
2
votes
1answer
18 views

SSP Initiated and IDP initiated SSO lands on different landing page

I have SAML based SSO authenitcation set in Salesforce. SSP Initiated and IDP initiated SSO lands on different landing pages. I am aware that relay state parameter would decide the landng page for ...
2
votes
1answer
39 views

Single Sign-On - How to Force User First be Connected to Corporate Network?

In this Frequently Asked Questions article, there is a question Does single sign-on work outside my corporate firewall?" The answer is : Yes, single sign-on can work outside your corporate ...
0
votes
0answers
40 views

How to write test class for auto-generated JIT Class SSO

private void handleUser(boolean create, User u, Map<String, String> attributes,String federationIdentifier, boolean isStandard) I am just creating a user in SSO JIT using this handleuser ...
1
vote
0answers
20 views

Need to populate a custom field in User while we create a User in SF via Azure AD - Single Sign On

Scenario : Implemented Single Sign On - Azure AD with User provisioning option. If a user is created we can set Standard fields on User creation, But how are Public Groups and Permission sets being ...
2
votes
1answer
47 views

Salesforce as service provider

We are working on a requirement where "my application" will act as Identity Provider and "Salesforce" as Service Provider. Its a IDP initiated SSO(SAML 2.0 Browser POST). My question is what is that ...
0
votes
0answers
10 views

SAML SSO from External IDP for Canvas App

We have Canvas App (java Based) and we want to implement this java based application to have SAML SSO with our own Identity Provider (OpenAM). How should we proceed. We know Canvas App is getting ...
3
votes
0answers
22 views

Can you have a salesforce community with multiple Single Sign on Configurations?

Our organization is has multiple clients that we support. We would like to have one community that they all log into for technical support. We have our company's single sign on set up successfully ...
0
votes
0answers
23 views

Updating single sign on certificate to work with ADFS

We are updating our SSO certificate and wanted to know if anyone has done it before and is there best practises on doing it. As far as I know, is it just as easy as uploading the new Identity Provider ...
0
votes
0answers
53 views

Need some guidance on writing test class for SAML SSO JIT auto created handler apex class

I have configured SSO for my organisation. Now I need to write test class but I am unable to understand how to pass the values in the predefined method. Methods are as below: global User ...
4
votes
1answer
42 views

Using refreshToken in Marketing Cloud SSO Session

We've created an app for HubExchange which is now listed. When a user opens the app, we receive the encoded JWT payload through the application login endpoint as documented here. We decode this ...
4
votes
0answers
53 views

Single Sign on certificate expiration service interruption

Our organization is using the SF single sign on feature and the IDP certificate is expiring soon. SAML SSO with ADFS are used. We need to minimize the user SSO service interruption and our questions ...
5
votes
1answer
69 views

Is SAML based login possible with older integrations that use the old SOAP based login?

We are using SAML based federated authentication in our org which works just fine. We have however a company specific desktop client application written some years ago in Java that, among other ...
0
votes
0answers
126 views

SAML configuration to allow Tableu in SF

Im trying to integrate Tableau Dashboards with SF using canvas but im having trouble to set the credentials from tableau. I create an Connected App and try to figure out which parameters choose on ...
0
votes
1answer
36 views

Sandbox Login not working

We can't login to our eloqua sandbox. I get this error... We can't log you in because you're only allowed to use single sign-on. For help, contact your Salesforce administrator. SSO setting not ...
0
votes
0answers
20 views

error message when trying to sign on the single sign on

Trying to log into Salesforce from our Single Sign on however receiving an error message from the Salesforce side. "accessing single sign on from our our site to Branch net to Salesforce click on the ...
0
votes
0answers
861 views

Issue of certificate - Using an external single sign on (SSO) with SalesForce

I have to connect several users to several applications through a LDAP using Single Sign On. In my scope of applications, I have two SalesForce applications which has to be connected. To supplant ...
1
vote
0answers
28 views

Login with Salesforce for 3rd party app

I have a web application that I'd like to place a 'Login with Salesforce' button on. I have many users in my application who are all part of different Salesforce orgs. I'd use the Salesforce Account ...
2
votes
1answer
43 views

Authenticating Salesforce users via JWT against ASP.net Web Application

We are setting up a Salesforce Community and would like our community members to be able to login using the credentials on an ASP.net website for which they have an account and are most likely already ...
0
votes
1answer
46 views

SSO from Magento to Salesforce

We are implementing a site with 2 parts - Magento Store and Salesforce community. We want to implement a solution such that when a user registers and then signs in on Magento, and traverses any ...
0
votes
0answers
42 views

access Microsoft SSRS and BI sites after logging into salesforce

Scenario: A user has a login account in salesforce and now wants to access SSRS on SQL Server on a VM in Azure and PowerBI without having to log into Azure. Question, How to implement Single Sign On ...
0
votes
0answers
10 views

Disable Identity Provider

Can we disable this identity provider area to avoid having to maintain a self-signed certificate? What can be the after effect and problems due to that.
0
votes
0answers
36 views

How to read and verify Signed Request in MVC, ASP.NET?

I am working on Single sign on with .net application with MVC and trying to read request context which will give me signed request. But not getting canvas app context values in asp.net, getting ...
1
vote
1answer
23 views

Install certificates https in Salesforce1

Our organization is evaluating the use of Salesforce1. In order to be able to use it is a requirement that we can implement SSO via SAML. To further assess the feasibility of implementing it our IT ...
0
votes
1answer
47 views

Impact of custom domain on existing integration

We're planning to create a custom domain as this is a prerequisite for SSO (desktop & salesforce1). The help article states that the API integration with salesforce where the pod/instances (CS80, ...
2
votes
0answers
269 views

Salesforce SSO and SimpleSAMLphp - Assertion OK, Login failed

I am trying to setup SSO between a LAMP website and SalesForce by using SimpleSAMLphp v.1.13.2. I have followed this tutorial: https://salesforce-developer.net/salesforce-sso-with-simplesamlphp SAML ...
0
votes
1answer
26 views

SSO for selected Users Only

In our Org we have two Applications A & B. We need to Implement SSO Authentication only for users in Application A. When users in Application A logs In they should be redirected to SSO login page ...
0
votes
1answer
27 views

Can ADFS SSO work with delegated authentication?

currently we have ADFS SSO setup in our org and I would like prevent our users to login to Salesforce using the general login.salesforce.com link but we do not want to check the "Prevent login from ...
2
votes
2answers
58 views

Leaderboard component of the community

The Reputation Leaderboard component populates for users when they go to community without logging in. But when they login all entries from the Reputation Leaderboard component disappear. When the ...
0
votes
0answers
28 views

SSO for community users using OAUTH / SAML

We have a SaaS that needs to be integrated with Salesforce community users. We are able to provide SSO for non portal users using SAML with SF as an identity provider . referred the following link ...
1
vote
0answers
20 views

How do I update Mass Edit/Update app to reference a different domain?

We recently implemented a vanity URL (MyDomain) and SAML SSO (Okta) and now the Mass Edit and Mass Update apps don't work. When logged in to SF if I try to launch either from an Account or ...
1
vote
0answers
95 views

Salesforce as IdP for Aha.io - Single Sign-On Error: Invalid HTTP Method

I'm completely new to SSO, so please bare with me... I am trying to setup Salesforce as the IDP using SAML 2.0 for a third party application called Aha.io. I've followed this guide to Enable ...
2
votes
1answer
31 views

Social login redirect

This is my first contact with salesforce, so please don't get mad at my silly questions :) I am struggling to configure a login with facebook using salesforce. I went trough the example and I got it ...
0
votes
0answers
25 views

RegistrationHandler.updateUser method is not called when using the Existing User Linking URL

According to the RegistrationHandler interface document, the updateUser(userId, portalId, userData) will be called when if the user has logged in before with the authorization provider and then logs ...
0
votes
0answers
30 views

Have a partner community user that is receiving SAML error 30 - Invalid Account Owner

I have a partner community user that is receiving SAML error 30 - Invalid Account Owner. Can you please advise what steps need to occur to fix this issue? I have checked the saml assertion , it is ...
1
vote
0answers
33 views

Single Sign On Error “Missing Portal_Id Attribute”

I have a customer with an Enterprise edition org. We are implementing single sing on in a sandbox environment. They have a home grown, in-house IDP (SAML 2.0) using Windows Server R2. When we test ...
2
votes
1answer
138 views

Lock access to a WordPress site using Salesforce Community logins?

I have a WordPress site that I would like to use as a portal for our clients. The portal needs to be restricted (meaning you can't access any of the pages) to only users that have a registered account ...
0
votes
1answer
77 views

How to authenticate Data Loader with Single Sign On?

Hi is there a way to Sign in in Data Loader when is Single Sign On activated in my organization? If so what would be the steps?
0
votes
0answers
47 views

Do i need VPN to connect to SSO in Salesforce1?

I have SSO ADFS setup in my current org and I would like to know do i need to connect my mobile to VPN to SSO to my org? I have tried the following 2 scenario:- 1) using my mobile data to login in ...
3
votes
0answers
100 views

When using SSO what can take over the session timeout in Salesforce setup?

Sessions expire automatically after a predetermined length of inactivity, which can be configured in Salesforce from Setup by clicking Security Controls. The default is 120 minutes (two hours). If you ...
1
vote
0answers
29 views

Can we add SSO in managed package?

I have an app which is using SSO to integrate with salesforce. Salesforce is used as an identity provider. So my question is can I add SSO in managed packaged? Because we want to provide an managed ...
0
votes
0answers
48 views

Salesforce SSO - How to

I'm doing a project that involves SSO. The SSO will be provided by Salesforce Identity Connect. The client will be a C# MVC Web App. The catch is that the token needs to be used for API-calls. So I ...
0
votes
0answers
100 views

SAML Assertion custom attributes

we are using IdP(not Salesforce IDP), and SFDC as the SP. For our use-case, we would like to pass additional attributes with the UserId, such as the Profile,for portals with the request as another ...
0
votes
0answers
26 views

SSO Docs Not Working For Two Different Orgs

I've been tasked with connecting our production org (via SSO) to several other orgs, all of which are sandboxes unrelated to our production org. To achieve the requirement I followed the below ...
0
votes
2answers
463 views

How does Salesforce SSO call just-in-time handler methods

I am having a hard time digging up some information on this as I believe it is still relatively new. If you implement SSO with Salesforce you have the ability to enable SAML. I have enabled SAML and ...
1
vote
1answer
78 views

Unable to query FederationIdentifier on case owner

[select FederationIdentifier from user limit 15] The above query works perfectly fine on user object workbench and developer console but when I write below query to pull list of cases along with ...
0
votes
0answers
43 views

Community Site for Non-SFDC Web Application SSO Using External Identity w/ 1000+ IdPs

I have 3 web applications, one each written in ColdFusion, .NET, and Java. Between all of the applications, I have over 1000 identity providers (IdPs) using SAML and eventually OAuth for SSO. I need ...
1
vote
0answers
44 views

OpenID Connect login returns Remote Error & ErrorDescription=427

To provide authentication via the external OAuth2 authorization server, I'm trying to configure Auth. Provider as an OpenID Connect type. After logging into the external server, I got an error page, ...
1
vote
1answer
94 views

Issue with inline VF page from Managed package on org where SSO is setup

I am facing weird problem on one of customers org. The inline VF page is not working on one specific org when we use SSO to login on that org. If we use normal login then it works fine. When we login ...