2

From Salesforce documentation:

Do not enable Single Sign-On for the system administrator’s profile. If your system administrators were Single Sign-On users and your Single Sign-On server had an outage, they would have no way to log in to Salesforce. System administrators should always be able to log in to Salesforce so they can disable Single Sign-On in the event of a problem.

This sounds like certain users or profiles can be kept out of the SSO protocol and use the old school login urls. Is this true? If so, how does it get enabled? thanks.

Update - I found that SF support needed to activate delegated authentication for the permission to be visible, but I have not been able to use it to force SSO validation for some users and allow others to skip it.

It would be best practice to allow login validation for a system admin in the case the company's directory experiences issues. Has anyone deployed this model successfully?

2 Answers 2

2

Go to

Setup | Manage Users | Profiles | theprofile | System Permissions

and look for Is Single Sign-on Enabled

4
  • 1
    I am there, salesforce.com/(profileId)?s=SystemPermissions and don't see single sign on in the list. it does not show up upon searching the profile.
    – jaw999
    Commented May 13, 2016 at 19:41
  • @jaw999 - Security Controls | Single Sign-on Settings - is it enabled?
    – cropredy
    Commented May 13, 2016 at 20:24
  • Found out - required delegated authentication for the org. This was not clear to me from the documentation.
    – jaw999
    Commented May 16, 2016 at 17:35
  • 2
    This doesn't seem to be accurate in 2024. Commented Apr 23 at 13:40
0

If 'Is Single Sign-On Enabled' is not visible, go to the Single Sign-On settings and enable 'Disable login with Salesforce credentials.' Once this is enabled, you will be able to see the 'Is Single Sign-On Enabled' option on the profile.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .