Is the Is Single Sign-On Enabled permission that's used with Delegated Authentication available on Profiles and/or Permission Sets?

I understand that Salesforce needs to be contacted in order to enable Delegated Authentication and for the Is Single Sign-On Enabled permission to even show up but I'd like to know if that can be set at the Permission Set and/or Profile level.

The documentation from Salesforce does not make this clear "Enable the “Is Single Sign-On Enabled” permission."

Source 1, Source 2


Yes, IsSsoEnabled is a profile permission. You can see it in the documentation.





Defaulted on create, Filter, Group, Sort


If true, users assigned to this profile can delegate username and password authentication to a corporate database instead of the user database.

  • I'm not finding it in the PermissionSet documentation (developer.salesforce.com/docs/atlas.en-us.api.meta/api/…) so I presume that this is only a permission for Profiles and not Permission Sets. Would you agree? – John_Henry Mar 10 '17 at 18:00
  • @John_Henry I'm pretty sure this is indeed one of the few things you can't assign via perm set. – sfdcfox Mar 10 '17 at 18:14

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.