9

Need to setup salesforce sso, so that users have to use SSO to login, but cannot use standard login.salesforce.com to login. Not able to setup how to prevent login from the standard page with salesforce credentials. Reason we want to do this is to ensure employees who left company can no longer have access. (Basically when we disable sso login as a part of termination process, it should disable salesforce account as well)

  • Won't this mean you'll be wasting licences? – Daniel Blackhall Oct 7 '12 at 22:34
  • 2
    @DanielBlackhall - I also agree that your have to deactivate users in salesforce.com (that's must). But timing between deactivating user and turning off access is more critical and sso with delegated authentication setup solves that problem. – Prafulla Patil Oct 7 '12 at 22:48
6

Solution is to setup SAML SSO and also enable Delegated Authentication. Need to apply the "Enable Single Sign On" permission to those users you want to force to use SAML SSO using either profiles or permission sets. Administrators should be excluded from this process, so that they can always login (even if sso is down).

Note : My Domain setup doesn't help in this situation (so that's not the option).

Setup Guide - http://wiki.developerforce.com/page/Single_Sign-On_with_SAML_on_Force.com

  • Is the note about My Domain correct? If so, could you explain further, as this help article seems to suggest it'll work: help.salesforce.com/apex/… – GBreavin Jun 11 '14 at 3:11

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.