Single sign-on (SSO) is a property of access control of multiple related, but independent software systems. With this property a user logs in once and gains access to all systems without being prompted to log in again at each of them.

learn more… | top users | synonyms (1)

1
vote
0answers
23 views

How to enable SSO on mobile using Salesforce1

I need to launch another mobile app on the same mobile device from Salesforce1. I have implemented that functionality.It is currently just launching the other app by invoking the app specific URI. Now ...
0
votes
1answer
18 views

goto 3rd party link using SSO from Salesforce using HTTP Post

Can anyone help me with redirecting user to 3rd party server using SSO from SALESFORCE using Apex class using HTTP Post. Any links will also help.. Thanks
1
vote
1answer
32 views

How to add custom fields to SAML response?

In the scenario where Salesforce is configured as Identity Provider, how can the SAML assertion returned to authenticating Service Providers be modified to include additional attributes? I cannot see ...
1
vote
1answer
22 views

Setting up Federated Authentication - does the profile need to be 'Single Sign-On enabled'?

As it says on the tin. I'm trying to set up SAML based federated authentication connecting to an Active Directory server in my developer org, before I try to deploy this to my users. I don't see the ...
-1
votes
0answers
18 views

Initialize SSO from Apex class

I need to communicate to third party tool by initiating SSO from APEX class. Can anyone give me understandings on how to implement this.. Not finding good notes on this. Thanks..
0
votes
0answers
16 views

Salesforce as a Identity Provider for Communities [duplicate]

I'm trying to set up a Single-Sign-On for my Community from a Salesforce org, actually I'd like to do exaclty what is detailled in the following documentation, but for Communities and not Portals. ...
1
vote
2answers
30 views

Single Sign ON recommendations

For SSO, we have Ping Fed as IDP that interacts with our AD. But when Ping Fed fails, users cant access Salesforce even if Salesforce is running fine. Any methods recommended to help users login, ...
0
votes
1answer
24 views

Salesforce, Impementing Single SIgn On from Metadata

I'm trying to implements Single Sign On, on my ORG with a custom domain (customer.my.salesforce....) I'd like to test the connectivity in a Sandbox environment (Developer Sandbox), but when i go to ...
1
vote
0answers
32 views

Implementing SAML SSO for Canvas Apps - Need help

I am trying to implement SAML SSO for Canvas Apps. I have followed all steps stated in the article "Implementing SAML SSO for Canvas Apps" ...
1
vote
0answers
13 views

Detect whether it is a login redirect on session expiry

In case of a hybrid app using SAML based third party IDP.When the salesforce session expire or IDP session expire how do we detect ? In current SDK in SFHybridViewController for Non SSO case they ...
1
vote
2answers
29 views

Using a different Profile between SSO connected orgs

I have a question about multiple connected Salesforce orgs via SSO. Is there a way to change the profile access for a user between multiple connected orgs through SSO? I have a scenario where Org1 is ...
3
votes
2answers
39 views

Query “Client Configuration” from Auth Provider (e.g. “SSO Initialization URL”)

After creating an Auth. Provider (in my case it is Provider Type = "Salesforce"), I am presented in the Setup UI with 5 URLs under "Client Configuration", including the SSO Initialization URL and ...
2
votes
0answers
22 views

Salesforce SSO using ADFS

We have implemented Salesforce SSO for our Salesforce instance which is partially functional. If we use the the SSO configuration in Salesforce which is enabled as a button at the bottom of the ...
4
votes
1answer
45 views

How to process AD security groups with Just-in-time User Provisioning?

I want to auto-assign permission sets based on a user's membership in various security groups in Active Directory ("AD"), during the Just-in-Time user provisioning process. I understand that this ...
0
votes
0answers
56 views

Cannot delete Single Sign-on Settings

Under Administration Setup - Security Controls - Single Sign-On Settings, I need to turn off Federated Single Sign-On Using SAML. However, whenever I disable the SAML Enabled checkbox and click ...
1
vote
0answers
92 views

Salesforce IDP, OAuth 2.0 JWT Bearer Token Flow

I'm trying to use Salesforce as an IDP for Aha! Ideas Portal. I had the SAML working fine, but now I need to setup JWT. I'm currently following these tutorials: Using JSON Web Token (JWT) for Aha! ...
0
votes
0answers
46 views

Deep links in native iOS app redirect user to change my password page in safari

I am working on native iOS app which has deep links for account and case detail page. When i click in that link it opens the correct page in iPad safari browser using sso, this works fine in QA. In ...
3
votes
1answer
131 views

Salesforce SSO and SimpleSAMLphp - not redirecting to startURL on logon

I am using SimpleSAMLphp as an Idp and Salesforce as the Sp. I have it working so that I can go to the Salesforce login page and use the additional button to logon using SSO, as per step 1 in this ...
0
votes
0answers
19 views

Chatter Emails to Non-SSO Users

When Chatter sends an email notification to a user containing a link, if Chatter is set up to use SSO the link is configured to automatically attempt to login using SSO. However some users aren't on ...
1
vote
1answer
103 views

ExactTarget SSO configuration “Expecting X509Certificate inside the KeyDescriptor element” error

I have set up my SSO configurations and I keep getting this error when I attempt to log in: 'Incoming SAML assertion/response from an issuer for which the SP has no metadata loaded or is wrong' In an ...
3
votes
1answer
58 views

Cost associated with Single sign on

Are there any costs associated with using SAML single-sign on with Salesforce? Are there any limits with number of calls on a daily basis?
2
votes
0answers
90 views

Why might a certificate import fail, when uploading a certificate not created from a Salesforce-generated Certificate Signing Request?

I've been given two X509 certificates to upload into an org for use in SSO (one for signing, one for decrypting), but I can't seem to upload either of them successfully. As I've been given the ...
0
votes
0answers
27 views

Disable the Change Password Link from Org?

All , I have an requirement to disable the "Change Password" link in my sfdc org. I have SSO enabled in org and don't want user to change the password. I can see there is an idea for this . ...
0
votes
0answers
15 views

We have a requirement to integrate SFDC with community portal (Similar to SalesForce Indentity)

We have a community portal where users to launch utility applications from app drawer on community protal (Similar to games launch in Facebook) These applications in app drawer will not ...
1
vote
0answers
102 views

How to call external saml protected web service from salesforce?

I want to call an secured external web service from salesforce. I dont want to pass user name and password as part of my webservice call out since I dont want to maintain them in salesforce. This is ...
0
votes
3answers
266 views

How do you configure a cname to point to the custom my domain url

We have configured our salesforce.com crm sandbox with SSO and My Domain so that going to <companyname>--dev.my.salesforce.com automatically redirects the users to our custom login page where ...
0
votes
2answers
99 views

Add SSO Login button to custom community login page

I would like to customize community login page. At the same time I have enabled SSO authentication for the community. Is it possible to add "SSO Login button" to the custom login page?
1
vote
0answers
84 views

Resize ADFS 3.0 SSO Page in Salesforce1 for iPad

We have single sign-on configured with ADFS 3.0 and everything seems to be working correctly except the ADFS login page does not resize correctly inside the Salesforce1 app on an iPad. The whole page ...
0
votes
0answers
47 views

SF One Web App (one/one.app) and SAML within a Community

I'm working on building a Customer Community. For the Desktop version of the Community (from the perspective Customer), we are implementing a SAML 2.0 based authentication. According to the ...
2
votes
1answer
305 views

SAML SSO: Encrypted SAML Assertion with salesforce user id as Attribute

I'm using a Shibboleth IDP to authenticate to Salesforce as the service provider. My desired implementation would be to have the IDP encrypt the SAML Assertion AND provide the identity (salesforce ...
2
votes
1answer
457 views

SAML SSO: Unable to import certificate via Java Keystore file (JKS)

I need to configure Single Sign On based on SAML 2.0 including encryption. Life would be easy if salesforce would allow import of the Identity Provider meta information XML that includes certificates ...
1
vote
1answer
33 views

Can we add one federation Id for multiple account names?

I have implement federated SSO in production instance. In our organization some of users have multiple salesforce accounts. Therefore I need to add one federationId for multiple user accounts? Is it ...
3
votes
1answer
231 views

Delegated Authentication vs Service Provider (SP) Initiated Login

I'm reading about Salesforce SSO, I have some questions/clarification, I find the concept of Delegated Auth, SP Initiated Login to be same since salesforce calls the external IDP or external service ...
2
votes
0answers
111 views

How is the effect for refreshing sandboxes once we enable SSO in production?

I have deployed a domain in the production and configured SSO on it. I need to know, how is the url of refreshing sandboxes and can we configure SSO both sandboxes and production parallel?
0
votes
0answers
73 views

Unable to login into developer forum

I am unable to login into developer forum (https://developer.salesforce.com). We have SSO enabled in our org. Error I am getting is - "There was a problem with your authentication attempt. Please try ...
1
vote
1answer
71 views

SSO for Composite Apps using SAML or OAuth

We have a SaaS running on AWS that we want to integrate with Salesforce. In a first step we want to add a web tab to the Salesforce UI and have a single-sign-on with our application so that if ...
1
vote
0answers
17 views

Can I switch from a Community to Portal without logging in again

I have an existing force.com authenticated site and i am building a community at the moment. I have enabled a profile for both the authenticated site and the community. I can login to both of these ...
0
votes
0answers
47 views

Login to external application from salesforce with Salesforce credentials

In our Salesforce org , in opportunity page we have a Custom link that directs to an internal application which is basically a login page. Since that internal application uses the same salesforce ...
2
votes
0answers
130 views

OpenID Connect's Implicit Flow is available in Salesforce?

I'm trying to login to Salesforce by Implicit Flow using third-party OpenID Provider on localhost. After authentication and authorization on the OP, it responds Access Token and ID Token to ...
0
votes
1answer
24 views

Cannot find Sun OpenSSO installation

I'm trying to get started with Salesforce SSO and SAML by reading this post by J. Douglas ( https://developer.salesforce.com/page/Single_Sign-On_with_SAML_on_Force.com ) , and I'm trying as well to ...
2
votes
0answers
76 views

Configuring Single Sign-On Authentication via SAML 2.0

We are trying to configure Single Sign-On Authentication via SAML 2.0. We have tried with two different XML metadata, one of them the example given for ExactTarget in WEB and other XML created by us. ...
4
votes
1answer
2k views

How do I configure AD FS 3.0 to support Salesforce SSO, especially with Salesforce1?

We are trying to configure AD FS to properly support SSO, particularly with Salesforce1, so our users only need to remember one login. There doesn't seem to be any documentation on how to correctly ...
0
votes
1answer
44 views

Delegated authentication request

I need to activate delegated authentication for a sandbox. Because I need to test single sign on for mobile devices. Can I request it for a separate sandbox or we need to activate in on production and ...
1
vote
1answer
76 views

Salesforce Single Sign on metadata file's binding method can't change in to http redirect

When I'm changing Service Provider Initiated Request Binding in to http redirect it's saving and displaying as http redirect. But when I looking in the metadata file it shows as below. ...
0
votes
0answers
193 views

salesforce1 single sign-on with adfs

I need to configure single sign-on with adfs for salesforce1. Therefore I configured Service Provider Initiated Request Binding on single sign-on settings to http redirect. But when I'm going to ...
1
vote
0answers
134 views

single sign on with adfs is not working for http redirect

When I'm set Service Provider Initiated Request Binding to http post it's working. But when I'm set Service Provider Initiated Request Binding to http redirect it's not working (It shows certificate ...
5
votes
0answers
83 views

How to retrieve the error description and details for Just-in-Time Provisioning errors for SAML

Usually the errors are returned in the URL parameters of the error page. Since I've created a custom page to be redirected when a SAML error (portal user login) occurs, I would like to display the ...
0
votes
2answers
101 views

Salesforce SSO implementation

I'm developing Salesforce iOS application. From the application frequently the user has to modify data which is available on Salesforce.com. When a user taps on edit I'm launching salesforce login ...
1
vote
1answer
125 views

Best practice for new user notification when using Federated SSO

When new users are provisioned in SFDC from the standard UI, there is a checkbox for "Generate new password and notify user immediately". This sends an email to the new user with all his/her info. ...
4
votes
2answers
556 views

Does Salesforce1 support NTLM (e.g. ADFS) authentication?

We have an existing single sign on (SSO) implementation where we redirect users using My Domain to an ADFS server through a mediation layer. In short, the SSO dance looks like this: ...