Single sign-on (SSO) is a property of access control of multiple related, but independent software systems. With this property a user logs in once and gains access to all systems without being prompted to log in again at each of them.

learn more… | top users | synonyms (1)

4
votes
1answer
25 views

How to process AD security groups with Just-in-time User Provisioning?

I want to auto-assign permission sets based on a user's membership in various security groups in Active Directory ("AD"), during the Just-in-Time user provisioning process. I understand that this ...
0
votes
0answers
21 views

Cannot delete Single Sign-on Settings

Under Administration Setup - Security Controls - Single Sign-On Settings, I need to turn off Federated Single Sign-On Using SAML. However, whenever I disable the SAML Enabled checkbox and click ...
1
vote
0answers
28 views

LDAP-based User Management and Authentication: Use Identity Connect or SSO/SAML?

We need some level of integration between Salesforce and our Active Directory for the purposes of user de/provisioning, profile/role/group assignments, and SSO into SFDC using LDAP. I understand I ...
1
vote
0answers
50 views

Salesforce IDP, OAuth 2.0 JWT Bearer Token Flow

I'm trying to use Salesforce as an IDP for Aha! Ideas Portal. I had the SAML working fine, but now I need to setup JWT. I'm currently following these tutorials: Using JSON Web Token (JWT) for Aha! ...
0
votes
0answers
20 views

Deep links in native iOS app redirect user to change my password page in safari

I am working on native iOS app which has deep links for account and case detail page. When i click in that link it opens the correct page in iPad safari browser using sso, this works fine in QA. In ...
3
votes
1answer
84 views

Salesforce SSO and SimpleSAMLphp - not redirecting to startURL on logon

I am using SimpleSAMLphp as an Idp and Salesforce as the Sp. I have it working so that I can go to the Salesforce login page and use the additional button to logon using SSO, as per step 1 in this ...
0
votes
0answers
12 views

Chatter Emails to Non-SSO Users

When Chatter sends an email notification to a user containing a link, if Chatter is set up to use SSO the link is configured to automatically attempt to login using SSO. However some users aren't on ...
1
vote
1answer
64 views

ExactTarget SSO configuration “Expecting X509Certificate inside the KeyDescriptor element” error

I have set up my SSO configurations and I keep getting this error when I attempt to log in: 'Incoming SAML assertion/response from an issuer for which the SP has no metadata loaded or is wrong' In an ...
3
votes
1answer
47 views

Cost associated with Single sign on

Are there any costs associated with using SAML single-sign on with Salesforce? Are there any limits with number of calls on a daily basis?
1
vote
0answers
58 views

Why might a certificate import fail, when uploading a certificate not created from a Salesforce-generated Certificate Signing Request?

I've been given two X509 certificates to upload into an org for use in SSO (one for signing, one for decrypting), but I can't seem to upload either of them successfully. As I've been given the ...
0
votes
0answers
25 views

Disable the Change Password Link from Org?

All , I have an requirement to disable the "Change Password" link in my sfdc org. I have SSO enabled in org and don't want user to change the password. I can see there is an idea for this . ...
0
votes
0answers
14 views

We have a requirement to integrate SFDC with community portal (Similar to SalesForce Indentity)

We have a community portal where users to launch utility applications from app drawer on community protal (Similar to games launch in Facebook) These applications in app drawer will not ...
1
vote
0answers
56 views

How to call external saml protected web service from salesforce?

I want to call an secured external web service from salesforce. I dont want to pass user name and password as part of my webservice call out since I dont want to maintain them in salesforce. This is ...
0
votes
3answers
150 views

How do you configure a cname to point to the custom my domain url

We have configured our salesforce.com crm sandbox with SSO and My Domain so that going to <companyname>--dev.my.salesforce.com automatically redirects the users to our custom login page where ...
0
votes
2answers
53 views

Add SSO Login button to custom community login page

I would like to customize community login page. At the same time I have enabled SSO authentication for the community. Is it possible to add "SSO Login button" to the custom login page?
1
vote
0answers
61 views

Resize ADFS 3.0 SSO Page in Salesforce1 for iPad

We have single sign-on configured with ADFS 3.0 and everything seems to be working correctly except the ADFS login page does not resize correctly inside the Salesforce1 app on an iPad. The whole page ...
0
votes
0answers
36 views

SF One Web App (one/one.app) and SAML within a Community

I'm working on building a Customer Community. For the Desktop version of the Community (from the perspective Customer), we are implementing a SAML 2.0 based authentication. According to the ...
2
votes
1answer
178 views

SAML SSO: Encrypted SAML Assertion with salesforce user id as Attribute

I'm using a Shibboleth IDP to authenticate to Salesforce as the service provider. My desired implementation would be to have the IDP encrypt the SAML Assertion AND provide the identity (salesforce ...
2
votes
1answer
291 views

SAML SSO: Unable to import certificate via Java Keystore file (JKS)

I need to configure Single Sign On based on SAML 2.0 including encryption. Life would be easy if salesforce would allow import of the Identity Provider meta information XML that includes certificates ...
1
vote
1answer
26 views

Can we add one federation Id for multiple account names?

I have implement federated SSO in production instance. In our organization some of users have multiple salesforce accounts. Therefore I need to add one federationId for multiple user accounts? Is it ...
3
votes
1answer
163 views

Delegated Authentication vs Service Provider (SP) Initiated Login

I'm reading about Salesforce SSO, I have some questions/clarification, I find the concept of Delegated Auth, SP Initiated Login to be same since salesforce calls the external IDP or external service ...
2
votes
0answers
69 views

How is the effect for refreshing sandboxes once we enable SSO in production?

I have deployed a domain in the production and configured SSO on it. I need to know, how is the url of refreshing sandboxes and can we configure SSO both sandboxes and production parallel?
0
votes
0answers
65 views

Unable to login into developer forum

I am unable to login into developer forum (https://developer.salesforce.com). We have SSO enabled in our org. Error I am getting is - "There was a problem with your authentication attempt. Please try ...
1
vote
1answer
59 views

SSO for Composite Apps using SAML or OAuth

We have a SaaS running on AWS that we want to integrate with Salesforce. In a first step we want to add a web tab to the Salesforce UI and have a single-sign-on with our application so that if ...
1
vote
0answers
17 views

Can I switch from a Community to Portal without logging in again

I have an existing force.com authenticated site and i am building a community at the moment. I have enabled a profile for both the authenticated site and the community. I can login to both of these ...
0
votes
0answers
33 views

Login to external application from salesforce with Salesforce credentials

In our Salesforce org , in opportunity page we have a Custom link that directs to an internal application which is basically a login page. Since that internal application uses the same salesforce ...
2
votes
0answers
92 views

OpenID Connect's Implicit Flow is available in Salesforce?

I'm trying to login to Salesforce by Implicit Flow using third-party OpenID Provider on localhost. After authentication and authorization on the OP, it responds Access Token and ID Token to ...
0
votes
1answer
20 views

Cannot find Sun OpenSSO installation

I'm trying to get started with Salesforce SSO and SAML by reading this post by J. Douglas ( https://developer.salesforce.com/page/Single_Sign-On_with_SAML_on_Force.com ) , and I'm trying as well to ...
2
votes
0answers
61 views

Configuring Single Sign-On Authentication via SAML 2.0

We are trying to configure Single Sign-On Authentication via SAML 2.0. We have tried with two different XML metadata, one of them the example given for ExactTarget in WEB and other XML created by us. ...
4
votes
1answer
1k views

How do I configure AD FS 3.0 to support Salesforce SSO, especially with Salesforce1?

We are trying to configure AD FS to properly support SSO, particularly with Salesforce1, so our users only need to remember one login. There doesn't seem to be any documentation on how to correctly ...
0
votes
1answer
36 views

Delegated authentication request

I need to activate delegated authentication for a sandbox. Because I need to test single sign on for mobile devices. Can I request it for a separate sandbox or we need to activate in on production and ...
1
vote
1answer
58 views

Salesforce Single Sign on metadata file's binding method can't change in to http redirect

When I'm changing Service Provider Initiated Request Binding in to http redirect it's saving and displaying as http redirect. But when I looking in the metadata file it shows as below. ...
0
votes
0answers
159 views

salesforce1 single sign-on with adfs

I need to configure single sign-on with adfs for salesforce1. Therefore I configured Service Provider Initiated Request Binding on single sign-on settings to http redirect. But when I'm going to ...
1
vote
0answers
112 views

single sign on with adfs is not working for http redirect

When I'm set Service Provider Initiated Request Binding to http post it's working. But when I'm set Service Provider Initiated Request Binding to http redirect it's not working (It shows certificate ...
4
votes
0answers
56 views

How to retrieve the error description and details for Just-in-Time Provisioning errors for SAML

Usually the errors are returned in the URL parameters of the error page. Since I've created a custom page to be redirected when a SAML error (portal user login) occurs, I would like to display the ...
0
votes
2answers
90 views

Salesforce SSO implementation

I'm developing Salesforce iOS application. From the application frequently the user has to modify data which is available on Salesforce.com. When a user taps on edit I'm launching salesforce login ...
1
vote
1answer
103 views

Best practice for new user notification when using Federated SSO

When new users are provisioned in SFDC from the standard UI, there is a checkbox for "Generate new password and notify user immediately". This sends an email to the new user with all his/her info. ...
4
votes
2answers
433 views

Does Salesforce1 support NTLM (e.g. ADFS) authentication?

We have an existing single sign on (SSO) implementation where we redirect users using My Domain to an ADFS server through a mediation layer. In short, the SSO dance looks like this: ...
3
votes
1answer
236 views

Passing Custom Attributes in Canvas App Signed Request

I have set up a Canvas App that is using the Signed Request Access Method. I have defined a Custom Attribute for the app to pull from a Custom User Field. But when I look at the Signed Request from my ...
1
vote
1answer
306 views

Error with JIT Provisioning for Salesforce Community User using SAML

I've create the SSO server in which when logging in, Salesforce will takes care of Finding Account Specify Create the Contact Create the Community User Profile with that Contact. Specify the ...
1
vote
1answer
285 views

Connecting Salesforce with asp.net app using salesforce credentials

I have an external .net mvc5 app and we want a way to use that app from salesforce. I can create a webtab to open that application. But this would mean i would need to ask users to login into asp.net ...
5
votes
1answer
426 views

Is it possible to use SSO with Dataloader?

I'm trying to determine what SSO scenarios are supported with Dataloader via both the GUI and the CLI. GUI (Graphical User Interface) Does Dataloader GUI work with SAML? Does Dataloader GUI work ...
2
votes
1answer
353 views

Access REST API after Single Sign-on (SSO)

We have a heroku-hosted web app that used Salesforce as Identity Provider (IdP) to do Single Sign-On (SSO) between SFDC & other services. We know that in doing so our web app user are already ...
1
vote
1answer
81 views

How to create a force.com project in a SSO environment

I'm new to Salseforce and trying to get my eclipse Force.com IDE environment setup. Install went fine. My problem is in correctly specifying my credential for a project. My company uses SSO, so ...
1
vote
1answer
85 views

I am facing issue to map social user with Salesforce community user when using Sales Force Social sign-on

My Use Case 1. Sales Rep created a customize page for customer. 2. Shared same customize page with customer(Created community user for customer). Customer Email id or username is abc@abc.com in ...
3
votes
0answers
112 views

Auth Provider : AuthorizationError?ErrorCode=NO_ACCESS&ErrorDescription=User+was+a+portal+user

I would like to ask you about Auth Provider: I have a Registration Handler in a DE org linked to my Auth provider, it is working correctly and allowing the external users to register. Now I decided ...
0
votes
0answers
65 views

Salesforce 3rd party Rest service connectivity using SAML assertion

We have a salesforce org connected to SAML SSO and this is working fine. we have an SAP system, which provides a REST service which is also connected to the same SAML Provider, when we try to use the ...
0
votes
0answers
16 views

Single sign on in Professional edition

Scenario 1: We have salesforce prof edition with api access and we also have a asp.net application. We are looking at a way to allow our users in salesforce to access the dot net app without having ...
1
vote
1answer
217 views

Federated SSO for salesforce1

I have configured Federated SSO with ADFS successfully. But we use sso on salesforce1 it will redirect to the full UI instead of the mobile UI. Salesforce document says we need to handle the ...
2
votes
1answer
149 views

Use of the “Aloha SSO” button that sometimes appears on Login Screen

I see this button when I call the login page from a Google Chrome Incognito modus and can't make any sense out of it.