Single sign-on (SSO) is a property of access control of multiple related, but independent software systems. With this property a user logs in once and gains access to all systems without being prompted to log in again at each of them.

learn more… | top users | synonyms (1)

1
vote
0answers
8 views

Does SSO affect redirect policy?

I just implemented SSO (IDP and SP initiated) for a client who uses google apps as their IDP. When I did so, I enabled MyDomain and set the redirect policy to redirect. Users are now reporting ...
2
votes
0answers
24 views

When using Salesforce as an Identity Provider, does it authenticate against it's user base?

If I have purchased Salesforce for 10 users, does that means that I can only perform authentication against those 10 users only ? To put it another way, if I have a website that has 1,000 registered ...
4
votes
1answer
28 views

What is the difference between 2048 and 4096 key size?

We are using a Self-signed certificate for our SSO with 2048 key size (which we are generating from Salesforce). I understand that this will only last one year. If we switch to 4096 key size, what ...
1
vote
1answer
62 views

Integrate third party app with Salesforce ensuring a seamless experience

I wrapping up a proposal for a client and I'm facing some integration architectural issues. I really need your help! The client has a self-care website and three mobile apps (android, Windows Mobile, ...
3
votes
0answers
18 views

How to force log out of Service Provider orgs when logging out of Identity Provider org?

Scenario: Hub and spoke org strategy with one Salesforce org acting as a SAML IdP for the other N orgs. Is there a way to force a log out on the SPs when a user manually logs out of the IdP org? I ...
0
votes
0answers
22 views

Disable Single Sign On for some users

we are currently implementing the Single Sign On. SAML is activated, MyDomain too, SAML Single Sign-On Settings is created. We have setup the LDAP in order to manage connection for internal users AND ...
0
votes
1answer
13 views

Accessing an application in Salesforce which uses Ping One for their SSO

Can anyone give me any pointer as to what are the steps I need to setup while accessing an external application from Salesforce, which uses Ping One service for their SSO?
0
votes
1answer
16 views

Just-in-Time Provisioning in SSO - How to handle the Permission Sets / Public Groups to be assigned to newly created users via JIT

We have enabled SSO with AZURE AD for our org. Is there any way to assign a user with Permission Sets / Public Groups created via Just in Time Provisioning in SSO. Thanks
1
vote
1answer
22 views

Why can't I update a Community Users ProfileID during JIT provisioning via SAML SSO?

My Attributes: {"Contact.Account", "001230942830"}, {"Contact.Email", "theEmail@gmail.com"}, {"Contact.FirstName", "theFirstName"}, {"Contact.LastName", "theLastName"}, {"User....
1
vote
0answers
31 views

Single Sign on - Editing Identity providers Metadata file

I configured Single sign-on for my sandbox and then tested with standard user. Login by a standards user is successful. But for a portal user failed. I read that it is required to provide with Portal ...
1
vote
0answers
33 views

Portal login on Single sign on

I configured Single sign-on for my sandbox and then tested with standard user. Login by a standards user is successful. But for a portal user failed. I read that it is required to provide with Portal ...
2
votes
2answers
21 views

How to enable access to our service using SSO login via Salesforce for Salesforce partners?

We have SSO login setup via Salesforce for our platform, using which any authorised Salesforce user can access our service. In order to achieve this, we send an AuthnRequest to the Http-Redirect url ...
0
votes
0answers
8 views

How do I Export and Import Single Sign On Settings using a Command button on Visualforce page?

I want to export all SSO settings in a CSV file. And after sandbox refresh I want to import that file again.
0
votes
1answer
19 views

On with salesforceThe public key certificate used for Single Sign.com (Community) (http://www.salesforce.com) will expire email

I received this email and I understand that we need to install a new public key certificate. However, I'm not sure where to start and how to do this. Can someone please shed some light? Thank you in ...
0
votes
1answer
32 views

case sensitive use of federation Id at logon

Our Active Directory system is NOT case sensitive respect of the federation ID. So, if for a user the true federation id is myID a person could also use Myid. We notice, however that Salesforce is -...
0
votes
0answers
16 views

Login redirect to SAML request URL for non-SAML SSO enable user

Login redirect to our SAML request URL for non-SAML SSO enable users. For those users , this issue happened when they login in with hint feature .(Users no need key in user name and password) We've ...
0
votes
0answers
26 views

Single Sign On to Communities

I have an org that is hosting a community. Now we have the internal and external users i.e. Users with Community Partner licenses and users with just force.com licenses. I need to find a way to ensure ...
0
votes
1answer
32 views

Trying to capture SSO errors on a Custom Error URL Page

When an error occurs during SSO, I want to capture the error and display it in a custom Visual Force page. I have the page set up, I am just not sure how to extract the message from SSO. Is there ...
1
vote
0answers
41 views

API Only User Unable to Use SAML Assertion Flow Single Sign-On

I'm having an issue using the SAML Assertion Flow with API Only users (See SAML Assertion Flow https://help.salesforce.com/apex/HTViewHelpDoc?id=remoteaccess_oauth_web_sso_flow.htm&language=en_US )...
0
votes
1answer
40 views

How can I get free or trial ExactTarget instance

How can I get free or trial ExactTarget instance. I need to do ExactTarget SAML2.0 Single Sign-On connector development, integration and testing. Is there any step by step documentation available so ...
1
vote
0answers
23 views

Single Sign on ERROR on windows [closed]

I am trying to set up single sign on with developer edition salesforce. I follwed the instruction with saying JDK1.8 required and set the path, JAVA_HOME e.t.c. After unzip and executed the start_up....
4
votes
0answers
43 views

Managing certificates programmatically in Salesforce Org (after sandbox creation/refresh)

I was trying to find some information on feasibility of creating and deleting self-signed certificates in Salesforce Org programmatically, which could be incorporated into post sandbox creation/...
1
vote
1answer
26 views

Disallow Single Sign On for Specified Profile?

From Salesforce documentation: Do not enable Single Sign-On for the system administrator’s profile. If your system administrators were Single Sign-On users and your Single Sign-On server had ...
1
vote
1answer
38 views

Create a new Self Signed Certificate

In our Org we have setup SSO with ADFS 2.0, we are using a Self-Signed Certificate which is about to expire in a couple of days. In Certificate and key Management section I got an option to create a ...
-1
votes
1answer
36 views

Is Possible to Configure SSO from Citrix to Salesforce

I have the users working in the citrix environment (Virtual system). When the users logged in to the citrix system by using there login. salesforce should not ask for the username and password to ...
1
vote
0answers
26 views

More than one configuration of delegated authentication

I'm working on a project multi-language and multi-country. We use Magento for delegated authentication; in Salesforce we can configure only a url for the delegated authentication, is it possible to ...
2
votes
1answer
30 views

SSP Initiated and IDP initiated SSO lands on different landing page

I have SAML based SSO authenitcation set in Salesforce. SSP Initiated and IDP initiated SSO lands on different landing pages. I am aware that relay state parameter would decide the landng page for ...
2
votes
1answer
50 views

Single Sign-On - How to Force User First be Connected to Corporate Network?

In this Frequently Asked Questions article, there is a question Does single sign-on work outside my corporate firewall?" The answer is : Yes, single sign-on can work outside your corporate ...
0
votes
0answers
65 views

How to write test class for auto-generated JIT Class SSO

private void handleUser(boolean create, User u, Map<String, String> attributes,String federationIdentifier, boolean isStandard) I am just creating a user in SSO JIT using this handleuser ...
1
vote
0answers
23 views

Need to populate a custom field in User while we create a User in SF via Azure AD - Single Sign On

Scenario : Implemented Single Sign On - Azure AD with User provisioning option. If a user is created we can set Standard fields on User creation, But how are Public Groups and Permission sets being ...
2
votes
1answer
65 views

Salesforce as service provider

We are working on a requirement where "my application" will act as Identity Provider and "Salesforce" as Service Provider. Its a IDP initiated SSO(SAML 2.0 Browser POST). My question is what is that ...
0
votes
0answers
20 views

SAML SSO from External IDP for Canvas App

We have Canvas App (java Based) and we want to implement this java based application to have SAML SSO with our own Identity Provider (OpenAM). How should we proceed. We know Canvas App is getting ...
3
votes
0answers
42 views

Can you have a salesforce community with multiple Single Sign on Configurations?

Our organization is has multiple clients that we support. We would like to have one community that they all log into for technical support. We have our company's single sign on set up successfully ...
0
votes
0answers
26 views

Updating single sign on certificate to work with ADFS

We are updating our SSO certificate and wanted to know if anyone has done it before and is there best practises on doing it. As far as I know, is it just as easy as uploading the new Identity Provider ...
0
votes
0answers
84 views

Need some guidance on writing test class for SAML SSO JIT auto created handler apex class

I have configured SSO for my organisation. Now I need to write test class but I am unable to understand how to pass the values in the predefined method. Methods are as below: global User createUser(...
4
votes
1answer
49 views

Using refreshToken in Marketing Cloud SSO Session

We've created an app for HubExchange which is now listed. When a user opens the app, we receive the encoded JWT payload through the application login endpoint as documented here. We decode this ...
4
votes
1answer
90 views

Single Sign on certificate expiration service interruption

Our organization is using the SF single sign on feature and the IDP certificate is expiring soon. SAML SSO with ADFS are used. We need to minimize the user SSO service interruption and our questions ...
5
votes
1answer
76 views

Is SAML based login possible with older integrations that use the old SOAP based login?

We are using SAML based federated authentication in our org which works just fine. We have however a company specific desktop client application written some years ago in Java that, among other ...
0
votes
0answers
205 views

SAML configuration to allow Tableu in SF

Im trying to integrate Tableau Dashboards with SF using canvas but im having trouble to set the credentials from tableau. I create an Connected App and try to figure out which parameters choose on ...
0
votes
1answer
43 views

Sandbox Login not working

We can't login to our eloqua sandbox. I get this error... We can't log you in because you're only allowed to use single sign-on. For help, contact your Salesforce administrator. SSO setting not ...
0
votes
0answers
21 views

error message when trying to sign on the single sign on

Trying to log into Salesforce from our Single Sign on however receiving an error message from the Salesforce side. "accessing single sign on from our our site to Branch net to Salesforce click on the ...
0
votes
0answers
1k views

Issue of certificate - Using an external single sign on (SSO) with SalesForce

I have to connect several users to several applications through a LDAP using Single Sign On. In my scope of applications, I have two SalesForce applications which has to be connected. To supplant ...
1
vote
0answers
31 views

Login with Salesforce for 3rd party app

I have a web application that I'd like to place a 'Login with Salesforce' button on. I have many users in my application who are all part of different Salesforce orgs. I'd use the Salesforce Account ...
2
votes
1answer
56 views

Authenticating Salesforce users via JWT against ASP.net Web Application

We are setting up a Salesforce Community and would like our community members to be able to login using the credentials on an ASP.net website for which they have an account and are most likely already ...
0
votes
1answer
58 views

SSO from Magento to Salesforce

We are implementing a site with 2 parts - Magento Store and Salesforce community. We want to implement a solution such that when a user registers and then signs in on Magento, and traverses any ...
0
votes
0answers
64 views

access Microsoft SSRS and BI sites after logging into salesforce

Scenario: A user has a login account in salesforce and now wants to access SSRS on SQL Server on a VM in Azure and PowerBI without having to log into Azure. Question, How to implement Single Sign On ...
0
votes
0answers
11 views

Disable Identity Provider

Can we disable this identity provider area to avoid having to maintain a self-signed certificate? What can be the after effect and problems due to that.
0
votes
0answers
51 views

How to read and verify Signed Request in MVC, ASP.NET?

I am working on Single sign on with .net application with MVC and trying to read request context which will give me signed request. But not getting canvas app context values in asp.net, getting ...
1
vote
1answer
48 views

Install certificates https in Salesforce1

Our organization is evaluating the use of Salesforce1. In order to be able to use it is a requirement that we can implement SSO via SAML. To further assess the feasibility of implementing it our IT ...
0
votes
1answer
52 views

Impact of custom domain on existing integration

We're planning to create a custom domain as this is a prerequisite for SSO (desktop & salesforce1). The help article states that the API integration with salesforce where the pod/instances (CS80, ...