I am helping a client that needs to connect their partner portal, a Salesforce Partner Community. They need to setup an SSO for their partners from the partner portal into another web application using SAML. We are familiar with enabling Salesforce as an IdP for internal users, but not for partners. Can someone tell us how to setup and configure a Salesforce Partner Community as a SAML IdP?

1 Answer 1


The process is very much similar to how you set up for Internal Users except that you need to replace with Community URLS .

Lets look at step by step the mechanism to accomplish the same .For simplicity I am taking another winter 17 pre release org as a SP (Service Provider)

Step 1

Set Up a Partner Community in Salesforce(This is your IDP org) .Not going to detail this but should be straight forward

Step 2

Download the Self Signed Certificate from your IDP org .Your IDP org is where you have set up partner community .Navigate to

Setup | Security Controls | Identity Provider

Click on Download Certificate button

You will clearly see for your Partner Community there will be Discovery EndPoint URL .Carefully Note this down as this will be needed by your Service Provider .Also note down the issuer

enter image description here

Step 3

Lets go to the service provider screen .In my example its another salesforce Instance (Winter 17 pre release org ).

Set up | Security Control | Single Sign On Settings

enter image description here

Carefully note two things

1.The issuer was obtained from IDP .

2.The IDP login URL is of one we noted in step 2 from IDP

3.We have uploaded the certificate which we downloaded in previous step

Step 4

Create a Connected App in IDP and allow the partner community profile for the connected app

enter image description here

Carefully note that I have configured ACS URL which was provided by the service provider in previous step

Once your connected app is save and when you click on Detail link of the the Connected App ,for every community you will get an IDP intitated URL

enter image description here

The IDP initiated login URL is what you need to put on a tab or visualforce .You will then see that User is redirected to the SP once user clicks on the IDP initiated URL without having to log into the SP org .

  • 1
    wow! thank you so much for the answer and the step by step details. you should publish this. Commented Sep 6, 2016 at 18:55
  • Good one Mohith.
    – Richard N
    Commented Sep 15, 2016 at 5:28
  • Irony is good answers do not get much attention :) . Commented Sep 15, 2016 at 5:29

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .