We need to authenticate users to Salesforce Community using internal app login which cannot support SAML or OpenID. Is there any other solution available? Is "custom authentication provider" the only way to accomplish this requirement? Is "delegated authentication" only applicable for the users who are in Active directory?
1 Answer
If external community users are not being authenticated by SAML or OpenID Connect then only option to use custom authentication.
Refer External Authentication Providers
An authentication provider lets your users log in to your Salesforce org using their login credentials from an external service provider. Salesforce provides authentication providers for apps that support the OpenID Connect protocol, such as Google, Facebook, Twitter, and LinkedIn.
For apps that don’t support OpenID Connect, Salesforce provides an Apex Auth.AuthProviderPluginClass abstract class to create a custom authentication provider.
Is "delegated authentication" only applicable for the users who are in Active directory?
No, it can also be applied for other authentication provider like PingFederate
. Here is an example to setup for that.
-
Thank you @Santanu! When you say only option is to use custom authentication, does that mean "delegated authentication" cannot be used?– Navi ADec 4, 2018 at 19:38
-
Here custom authentication and Delegated authentication are different Dec 4, 2018 at 19:49
-
Yeah, different approaches. We have to decide which one can be used and involves less customization?– Navi ADec 4, 2018 at 19:58
-