Single sign-on (SSO) is a property of access control of multiple related, but independent software systems. With this property a user logs in once and gains access to all systems without being prompted to log in again at each of them.

learn more… | top users | synonyms (1)

0
votes
0answers
11 views

Community Site for Non-SFDC Web Application SSO Using External Identity w/ 1000+ IdPs

I have 3 web applications, one each written in ColdFusion, .NET, and Java. Between all of the applications, I have over 1000 identity providers (IdPs) using SAML and eventually OAuth for SSO. I need ...
1
vote
0answers
13 views

OpenID Connect login returns Remote Error & ErrorDescription=427

To provide authentication via the external OAuth2 authorization server, I'm trying to configure Auth. Provider as an OpenID Connect type. After logging into the external server, I got an error page, ...
0
votes
0answers
41 views
+50

Issue with inline VF page from Managed package on org where SSO is setup

I am facing weird problem on one of customers org. The inline VF page is not working on one specific org when we use SSO to login on that org. If we use normal login then it works fine. When we login ...
0
votes
0answers
16 views

Connect Client's Sandbox to different companies' Environment Hub?

While it may not be recommended, is there any way to add a client's sandbox environment to a different companies' environment hub ? It would seem to provide an easy means for to SSO from the company ...
1
vote
1answer
28 views

can 1 ADFS support multiple org?

Hi I have ADFS setup for 1 of my org and its working fine, now i would like to add another org to the same ADFS server, can it be done? As I got told that only 1 org can be setup in ADFS server as it ...
0
votes
0answers
10 views

Single Sign On - SP Initiate - ADFS - Timestamp of the response is outside of allowed time window

we are trying to configure SSO authentication SP Initiate between Salesforce and ADFS. We are facing this issue: Current time is after notOnOrAfter in Conditions Current time is: ...
1
vote
0answers
37 views

How to enable SSO on mobile using Salesforce1

I need to launch another mobile app on the same mobile device from Salesforce1. I have implemented that functionality.It is currently just launching the other app by invoking the app specific URI. Now ...
0
votes
1answer
25 views

goto 3rd party link using SSO from Salesforce using HTTP Post

Can anyone help me with redirecting user to 3rd party server using SSO from SALESFORCE using Apex class using HTTP Post. Any links will also help.. Thanks
1
vote
1answer
56 views

How to add custom fields to SAML response?

In the scenario where Salesforce is configured as Identity Provider, how can the SAML assertion returned to authenticating Service Providers be modified to include additional attributes? I cannot see ...
1
vote
1answer
31 views

Setting up Federated Authentication - does the profile need to be 'Single Sign-On enabled'?

As it says on the tin. I'm trying to set up SAML based federated authentication connecting to an Active Directory server in my developer org, before I try to deploy this to my users. I don't see the ...
0
votes
0answers
16 views

Salesforce as a Identity Provider for Communities [duplicate]

I'm trying to set up a Single-Sign-On for my Community from a Salesforce org, actually I'd like to do exaclty what is detailled in the following documentation, but for Communities and not Portals. ...
1
vote
2answers
36 views

Single Sign ON recommendations

For SSO, we have Ping Fed as IDP that interacts with our AD. But when Ping Fed fails, users cant access Salesforce even if Salesforce is running fine. Any methods recommended to help users login, ...
0
votes
1answer
28 views

Salesforce, Impementing Single SIgn On from Metadata

I'm trying to implements Single Sign On, on my ORG with a custom domain (customer.my.salesforce....) I'd like to test the connectivity in a Sandbox environment (Developer Sandbox), but when i go to ...
1
vote
0answers
51 views

Implementing SAML SSO for Canvas Apps - Need help

I am trying to implement SAML SSO for Canvas Apps. I have followed all steps stated in the article "Implementing SAML SSO for Canvas Apps" ...
1
vote
0answers
16 views

Detect whether it is a login redirect on session expiry

In case of a hybrid app using SAML based third party IDP.When the salesforce session expire or IDP session expire how do we detect ? In current SDK in SFHybridViewController for Non SSO case they ...
1
vote
2answers
33 views

Using a different Profile between SSO connected orgs

I have a question about multiple connected Salesforce orgs via SSO. Is there a way to change the profile access for a user between multiple connected orgs through SSO? I have a scenario where Org1 is ...
3
votes
2answers
47 views

Query “Client Configuration” from Auth Provider (e.g. “SSO Initialization URL”)

After creating an Auth. Provider (in my case it is Provider Type = "Salesforce"), I am presented in the Setup UI with 5 URLs under "Client Configuration", including the SSO Initialization URL and ...
2
votes
0answers
30 views

Salesforce SSO using ADFS

We have implemented Salesforce SSO for our Salesforce instance which is partially functional. If we use the the SSO configuration in Salesforce which is enabled as a button at the bottom of the ...
4
votes
1answer
57 views

How to process AD security groups with Just-in-time User Provisioning?

I want to auto-assign permission sets based on a user's membership in various security groups in Active Directory ("AD"), during the Just-in-Time user provisioning process. I understand that this ...
0
votes
0answers
77 views

Cannot delete Single Sign-on Settings

Under Administration Setup - Security Controls - Single Sign-On Settings, I need to turn off Federated Single Sign-On Using SAML. However, whenever I disable the SAML Enabled checkbox and click ...
1
vote
0answers
106 views

Salesforce IDP, OAuth 2.0 JWT Bearer Token Flow

I'm trying to use Salesforce as an IDP for Aha! Ideas Portal. I had the SAML working fine, but now I need to setup JWT. I'm currently following these tutorials: Using JSON Web Token (JWT) for Aha! ...
1
vote
0answers
54 views

Deep links in native iOS app redirect user to change my password page in safari

I am working on native iOS app which has deep links for account and case detail page. When i click in that link it opens the correct page in iPad safari browser using sso, this works fine in QA. In ...
3
votes
1answer
151 views

Salesforce SSO and SimpleSAMLphp - not redirecting to startURL on logon

I am using SimpleSAMLphp as an Idp and Salesforce as the Sp. I have it working so that I can go to the Salesforce login page and use the additional button to logon using SSO, as per step 1 in this ...
0
votes
0answers
22 views

Chatter Emails to Non-SSO Users

When Chatter sends an email notification to a user containing a link, if Chatter is set up to use SSO the link is configured to automatically attempt to login using SSO. However some users aren't on ...
1
vote
1answer
114 views

ExactTarget SSO configuration “Expecting X509Certificate inside the KeyDescriptor element” error

I have set up my SSO configurations and I keep getting this error when I attempt to log in: 'Incoming SAML assertion/response from an issuer for which the SP has no metadata loaded or is wrong' In an ...
3
votes
1answer
66 views

Cost associated with Single sign on

Are there any costs associated with using SAML single-sign on with Salesforce? Are there any limits with number of calls on a daily basis?
2
votes
0answers
125 views

Why might a certificate import fail, when uploading a certificate not created from a Salesforce-generated Certificate Signing Request?

I've been given two X509 certificates to upload into an org for use in SSO (one for signing, one for decrypting), but I can't seem to upload either of them successfully. As I've been given the ...
0
votes
0answers
34 views

Disable the Change Password Link from Org?

All , I have an requirement to disable the "Change Password" link in my sfdc org. I have SSO enabled in org and don't want user to change the password. I can see there is an idea for this . ...
0
votes
0answers
16 views

We have a requirement to integrate SFDC with community portal (Similar to SalesForce Indentity)

We have a community portal where users to launch utility applications from app drawer on community protal (Similar to games launch in Facebook) These applications in app drawer will not ...
1
vote
0answers
120 views

How to call external saml protected web service from salesforce?

I want to call an secured external web service from salesforce. I dont want to pass user name and password as part of my webservice call out since I dont want to maintain them in salesforce. This is ...
0
votes
3answers
328 views

How do you configure a cname to point to the custom my domain url

We have configured our salesforce.com crm sandbox with SSO and My Domain so that going to <companyname>--dev.my.salesforce.com automatically redirects the users to our custom login page where ...
0
votes
2answers
126 views

Add SSO Login button to custom community login page

I would like to customize community login page. At the same time I have enabled SSO authentication for the community. Is it possible to add "SSO Login button" to the custom login page?
1
vote
0answers
91 views

Resize ADFS 3.0 SSO Page in Salesforce1 for iPad

We have single sign-on configured with ADFS 3.0 and everything seems to be working correctly except the ADFS login page does not resize correctly inside the Salesforce1 app on an iPad. The whole page ...
0
votes
0answers
55 views

SF One Web App (one/one.app) and SAML within a Community

I'm working on building a Customer Community. For the Desktop version of the Community (from the perspective Customer), we are implementing a SAML 2.0 based authentication. According to the ...
2
votes
1answer
351 views

SAML SSO: Encrypted SAML Assertion with salesforce user id as Attribute

I'm using a Shibboleth IDP to authenticate to Salesforce as the service provider. My desired implementation would be to have the IDP encrypt the SAML Assertion AND provide the identity (salesforce ...
2
votes
1answer
516 views

SAML SSO: Unable to import certificate via Java Keystore file (JKS)

I need to configure Single Sign On based on SAML 2.0 including encryption. Life would be easy if salesforce would allow import of the Identity Provider meta information XML that includes certificates ...
1
vote
1answer
35 views

Can we add one federation Id for multiple account names?

I have implement federated SSO in production instance. In our organization some of users have multiple salesforce accounts. Therefore I need to add one federationId for multiple user accounts? Is it ...
3
votes
1answer
265 views

Delegated Authentication vs Service Provider (SP) Initiated Login

I'm reading about Salesforce SSO, I have some questions/clarification, I find the concept of Delegated Auth, SP Initiated Login to be same since salesforce calls the external IDP or external service ...
2
votes
0answers
125 views

How is the effect for refreshing sandboxes once we enable SSO in production?

I have deployed a domain in the production and configured SSO on it. I need to know, how is the url of refreshing sandboxes and can we configure SSO both sandboxes and production parallel?
0
votes
0answers
75 views

Unable to login into developer forum

I am unable to login into developer forum (https://developer.salesforce.com). We have SSO enabled in our org. Error I am getting is - "There was a problem with your authentication attempt. Please try ...
1
vote
1answer
80 views

SSO for Composite Apps using SAML or OAuth

We have a SaaS running on AWS that we want to integrate with Salesforce. In a first step we want to add a web tab to the Salesforce UI and have a single-sign-on with our application so that if ...
1
vote
0answers
19 views

Can I switch from a Community to Portal without logging in again

I have an existing force.com authenticated site and i am building a community at the moment. I have enabled a profile for both the authenticated site and the community. I can login to both of these ...
0
votes
0answers
56 views

Login to external application from salesforce with Salesforce credentials

In our Salesforce org , in opportunity page we have a Custom link that directs to an internal application which is basically a login page. Since that internal application uses the same salesforce ...
2
votes
0answers
141 views

OpenID Connect's Implicit Flow is available in Salesforce?

I'm trying to login to Salesforce by Implicit Flow using third-party OpenID Provider on localhost. After authentication and authorization on the OP, it responds Access Token and ID Token to ...
0
votes
1answer
24 views

Cannot find Sun OpenSSO installation

I'm trying to get started with Salesforce SSO and SAML by reading this post by J. Douglas ( https://developer.salesforce.com/page/Single_Sign-On_with_SAML_on_Force.com ) , and I'm trying as well to ...
2
votes
0answers
81 views

Configuring Single Sign-On Authentication via SAML 2.0

We are trying to configure Single Sign-On Authentication via SAML 2.0. We have tried with two different XML metadata, one of them the example given for ExactTarget in WEB and other XML created by us. ...
4
votes
1answer
3k views

How do I configure AD FS 3.0 to support Salesforce SSO, especially with Salesforce1?

We are trying to configure AD FS to properly support SSO, particularly with Salesforce1, so our users only need to remember one login. There doesn't seem to be any documentation on how to correctly ...
0
votes
1answer
47 views

Delegated authentication request

I need to activate delegated authentication for a sandbox. Because I need to test single sign on for mobile devices. Can I request it for a separate sandbox or we need to activate in on production and ...
1
vote
1answer
85 views

Salesforce Single Sign on metadata file's binding method can't change in to http redirect

When I'm changing Service Provider Initiated Request Binding in to http redirect it's saving and displaying as http redirect. But when I looking in the metadata file it shows as below. ...
0
votes
0answers
206 views

salesforce1 single sign-on with adfs

I need to configure single sign-on with adfs for salesforce1. Therefore I configured Service Provider Initiated Request Binding on single sign-on settings to http redirect. But when I'm going to ...