Single sign-on (SSO) is a property of access control of multiple related, but independent software systems. With this property a user logs in once and gains access to all systems without being prompted to log in again at each of them.

learn more… | top users | synonyms (1)

0
votes
0answers
11 views

Just In Time(JIT) Provisioning using Identity Connect [on hold]

I am trying to enable JIT provisioning using Salesforce Identity connect ,but somehow it is not working . SSO is working fine for existing active users in Salesforce , but it is not working if the ...
1
vote
0answers
7 views

Detect whether it is a login redirect on session expiry

In case of a hybrid app using SAML based third party IDP.When the salesforce session expire or IDP session expire how do we detect ? In current SDK in SFHybridViewController for Non SSO case they ...
1
vote
2answers
24 views

Using a different Profile between SSO connected orgs

I have a question about multiple connected Salesforce orgs via SSO. Is there a way to change the profile access for a user between multiple connected orgs through SSO? I have a scenario where Org1 is ...
3
votes
2answers
25 views

Query “Client Configuration” from Auth Provider (e.g. “SSO Initialization URL”)

After creating an Auth. Provider (in my case it is Provider Type = "Salesforce"), I am presented in the Setup UI with 5 URLs under "Client Configuration", including the SSO Initialization URL and ...
2
votes
0answers
19 views

Salesforce SSO using ADFS

We have implemented Salesforce SSO for our Salesforce instance which is partially functional. If we use the the SSO configuration in Salesforce which is enabled as a button at the bottom of the ...
-1
votes
0answers
25 views

How to show Error message in a Custom Error Page(VF site page) on SSO error

I need to show the error message on a VF page when an error occurs on SSO into salesforce. I have used the Custom Error URL field in Single Sign-On Settings in salesforce to navigate the user to a VF ...
4
votes
1answer
36 views

How to process AD security groups with Just-in-time User Provisioning?

I want to auto-assign permission sets based on a user's membership in various security groups in Active Directory ("AD"), during the Just-in-Time user provisioning process. I understand that this ...
0
votes
0answers
30 views

Cannot delete Single Sign-on Settings

Under Administration Setup - Security Controls - Single Sign-On Settings, I need to turn off Federated Single Sign-On Using SAML. However, whenever I disable the SAML Enabled checkbox and click ...
1
vote
0answers
63 views

Salesforce IDP, OAuth 2.0 JWT Bearer Token Flow

I'm trying to use Salesforce as an IDP for Aha! Ideas Portal. I had the SAML working fine, but now I need to setup JWT. I'm currently following these tutorials: Using JSON Web Token (JWT) for Aha! ...
0
votes
0answers
28 views

Deep links in native iOS app redirect user to change my password page in safari

I am working on native iOS app which has deep links for account and case detail page. When i click in that link it opens the correct page in iPad safari browser using sso, this works fine in QA. In ...
3
votes
1answer
98 views

Salesforce SSO and SimpleSAMLphp - not redirecting to startURL on logon

I am using SimpleSAMLphp as an Idp and Salesforce as the Sp. I have it working so that I can go to the Salesforce login page and use the additional button to logon using SSO, as per step 1 in this ...
0
votes
0answers
14 views

Chatter Emails to Non-SSO Users

When Chatter sends an email notification to a user containing a link, if Chatter is set up to use SSO the link is configured to automatically attempt to login using SSO. However some users aren't on ...
1
vote
1answer
73 views

ExactTarget SSO configuration “Expecting X509Certificate inside the KeyDescriptor element” error

I have set up my SSO configurations and I keep getting this error when I attempt to log in: 'Incoming SAML assertion/response from an issuer for which the SP has no metadata loaded or is wrong' In an ...
3
votes
1answer
52 views

Cost associated with Single sign on

Are there any costs associated with using SAML single-sign on with Salesforce? Are there any limits with number of calls on a daily basis?
1
vote
0answers
69 views

Why might a certificate import fail, when uploading a certificate not created from a Salesforce-generated Certificate Signing Request?

I've been given two X509 certificates to upload into an org for use in SSO (one for signing, one for decrypting), but I can't seem to upload either of them successfully. As I've been given the ...
0
votes
0answers
26 views

Disable the Change Password Link from Org?

All , I have an requirement to disable the "Change Password" link in my sfdc org. I have SSO enabled in org and don't want user to change the password. I can see there is an idea for this . ...
0
votes
0answers
14 views

We have a requirement to integrate SFDC with community portal (Similar to SalesForce Indentity)

We have a community portal where users to launch utility applications from app drawer on community protal (Similar to games launch in Facebook) These applications in app drawer will not ...
1
vote
0answers
72 views

How to call external saml protected web service from salesforce?

I want to call an secured external web service from salesforce. I dont want to pass user name and password as part of my webservice call out since I dont want to maintain them in salesforce. This is ...
0
votes
3answers
186 views

How do you configure a cname to point to the custom my domain url

We have configured our salesforce.com crm sandbox with SSO and My Domain so that going to <companyname>--dev.my.salesforce.com automatically redirects the users to our custom login page where ...
0
votes
2answers
62 views

Add SSO Login button to custom community login page

I would like to customize community login page. At the same time I have enabled SSO authentication for the community. Is it possible to add "SSO Login button" to the custom login page?
1
vote
0answers
72 views

Resize ADFS 3.0 SSO Page in Salesforce1 for iPad

We have single sign-on configured with ADFS 3.0 and everything seems to be working correctly except the ADFS login page does not resize correctly inside the Salesforce1 app on an iPad. The whole page ...
0
votes
0answers
39 views

SF One Web App (one/one.app) and SAML within a Community

I'm working on building a Customer Community. For the Desktop version of the Community (from the perspective Customer), we are implementing a SAML 2.0 based authentication. According to the ...
2
votes
1answer
229 views

SAML SSO: Encrypted SAML Assertion with salesforce user id as Attribute

I'm using a Shibboleth IDP to authenticate to Salesforce as the service provider. My desired implementation would be to have the IDP encrypt the SAML Assertion AND provide the identity (salesforce ...
2
votes
1answer
358 views

SAML SSO: Unable to import certificate via Java Keystore file (JKS)

I need to configure Single Sign On based on SAML 2.0 including encryption. Life would be easy if salesforce would allow import of the Identity Provider meta information XML that includes certificates ...
1
vote
1answer
29 views

Can we add one federation Id for multiple account names?

I have implement federated SSO in production instance. In our organization some of users have multiple salesforce accounts. Therefore I need to add one federationId for multiple user accounts? Is it ...
3
votes
1answer
194 views

Delegated Authentication vs Service Provider (SP) Initiated Login

I'm reading about Salesforce SSO, I have some questions/clarification, I find the concept of Delegated Auth, SP Initiated Login to be same since salesforce calls the external IDP or external service ...
2
votes
0answers
92 views

How is the effect for refreshing sandboxes once we enable SSO in production?

I have deployed a domain in the production and configured SSO on it. I need to know, how is the url of refreshing sandboxes and can we configure SSO both sandboxes and production parallel?
0
votes
0answers
72 views

Unable to login into developer forum

I am unable to login into developer forum (https://developer.salesforce.com). We have SSO enabled in our org. Error I am getting is - "There was a problem with your authentication attempt. Please try ...
1
vote
1answer
62 views

SSO for Composite Apps using SAML or OAuth

We have a SaaS running on AWS that we want to integrate with Salesforce. In a first step we want to add a web tab to the Salesforce UI and have a single-sign-on with our application so that if ...
1
vote
0answers
17 views

Can I switch from a Community to Portal without logging in again

I have an existing force.com authenticated site and i am building a community at the moment. I have enabled a profile for both the authenticated site and the community. I can login to both of these ...
0
votes
0answers
38 views

Login to external application from salesforce with Salesforce credentials

In our Salesforce org , in opportunity page we have a Custom link that directs to an internal application which is basically a login page. Since that internal application uses the same salesforce ...
2
votes
0answers
103 views

OpenID Connect's Implicit Flow is available in Salesforce?

I'm trying to login to Salesforce by Implicit Flow using third-party OpenID Provider on localhost. After authentication and authorization on the OP, it responds Access Token and ID Token to ...
0
votes
1answer
21 views

Cannot find Sun OpenSSO installation

I'm trying to get started with Salesforce SSO and SAML by reading this post by J. Douglas ( https://developer.salesforce.com/page/Single_Sign-On_with_SAML_on_Force.com ) , and I'm trying as well to ...
2
votes
0answers
66 views

Configuring Single Sign-On Authentication via SAML 2.0

We are trying to configure Single Sign-On Authentication via SAML 2.0. We have tried with two different XML metadata, one of them the example given for ExactTarget in WEB and other XML created by us. ...
4
votes
1answer
1k views

How do I configure AD FS 3.0 to support Salesforce SSO, especially with Salesforce1?

We are trying to configure AD FS to properly support SSO, particularly with Salesforce1, so our users only need to remember one login. There doesn't seem to be any documentation on how to correctly ...
0
votes
1answer
37 views

Delegated authentication request

I need to activate delegated authentication for a sandbox. Because I need to test single sign on for mobile devices. Can I request it for a separate sandbox or we need to activate in on production and ...
1
vote
1answer
64 views

Salesforce Single Sign on metadata file's binding method can't change in to http redirect

When I'm changing Service Provider Initiated Request Binding in to http redirect it's saving and displaying as http redirect. But when I looking in the metadata file it shows as below. ...
0
votes
0answers
178 views

salesforce1 single sign-on with adfs

I need to configure single sign-on with adfs for salesforce1. Therefore I configured Service Provider Initiated Request Binding on single sign-on settings to http redirect. But when I'm going to ...
1
vote
0answers
119 views

single sign on with adfs is not working for http redirect

When I'm set Service Provider Initiated Request Binding to http post it's working. But when I'm set Service Provider Initiated Request Binding to http redirect it's not working (It shows certificate ...
4
votes
0answers
67 views

How to retrieve the error description and details for Just-in-Time Provisioning errors for SAML

Usually the errors are returned in the URL parameters of the error page. Since I've created a custom page to be redirected when a SAML error (portal user login) occurs, I would like to display the ...
0
votes
2answers
96 views

Salesforce SSO implementation

I'm developing Salesforce iOS application. From the application frequently the user has to modify data which is available on Salesforce.com. When a user taps on edit I'm launching salesforce login ...
1
vote
1answer
114 views

Best practice for new user notification when using Federated SSO

When new users are provisioned in SFDC from the standard UI, there is a checkbox for "Generate new password and notify user immediately". This sends an email to the new user with all his/her info. ...
4
votes
2answers
490 views

Does Salesforce1 support NTLM (e.g. ADFS) authentication?

We have an existing single sign on (SSO) implementation where we redirect users using My Domain to an ADFS server through a mediation layer. In short, the SSO dance looks like this: ...
3
votes
1answer
284 views

Passing Custom Attributes in Canvas App Signed Request

I have set up a Canvas App that is using the Signed Request Access Method. I have defined a Custom Attribute for the app to pull from a Custom User Field. But when I look at the Signed Request from my ...
1
vote
1answer
350 views

Error with JIT Provisioning for Salesforce Community User using SAML

I've create the SSO server in which when logging in, Salesforce will takes care of Finding Account Specify Create the Contact Create the Community User Profile with that Contact. Specify the ...
1
vote
1answer
316 views

Connecting Salesforce with asp.net app using salesforce credentials

I have an external .net mvc5 app and we want a way to use that app from salesforce. I can create a webtab to open that application. But this would mean i would need to ask users to login into asp.net ...
5
votes
1answer
454 views

Is it possible to use SSO with Dataloader?

I'm trying to determine what SSO scenarios are supported with Dataloader via both the GUI and the CLI. GUI (Graphical User Interface) Does Dataloader GUI work with SAML? Does Dataloader GUI work ...
2
votes
1answer
402 views

Access REST API after Single Sign-on (SSO)

We have a heroku-hosted web app that used Salesforce as Identity Provider (IdP) to do Single Sign-On (SSO) between SFDC & other services. We know that in doing so our web app user are already ...
1
vote
1answer
92 views

How to create a force.com project in a SSO environment

I'm new to Salseforce and trying to get my eclipse Force.com IDE environment setup. Install went fine. My problem is in correctly specifying my credential for a project. My company uses SSO, so ...
1
vote
1answer
89 views

I am facing issue to map social user with Salesforce community user when using Sales Force Social sign-on

My Use Case 1. Sales Rep created a customize page for customer. 2. Shared same customize page with customer(Created community user for customer). Customer Email id or username is abc@abc.com in ...