Need to setup salesforce sso, so that users have to use SSO to login, but cannot use standard login.salesforce.com to login. Not able to setup how to prevent login from the standard page with salesforce credentials. Reason we want to do this is to ensure employees who left company can no longer have access. (Basically when we disable sso login as a part of termination process, it should disable salesforce account as well)

  • Won't this mean you'll be wasting licences? Commented Oct 7, 2012 at 22:34
  • 2
    @DanielBlackhall - I also agree that your have to deactivate users in salesforce.com (that's must). But timing between deactivating user and turning off access is more critical and sso with delegated authentication setup solves that problem. Commented Oct 7, 2012 at 22:48

1 Answer 1


Solution is to setup SAML SSO and also enable Delegated Authentication. Need to apply the "Enable Single Sign On" permission to those users you want to force to use SAML SSO using either profiles or permission sets. Administrators should be excluded from this process, so that they can always login (even if sso is down).

Note : My Domain setup doesn't help in this situation (so that's not the option).

Setup Guide - http://wiki.developerforce.com/page/Single_Sign-On_with_SAML_on_Force.com

  • Is the note about My Domain correct? If so, could you explain further, as this help article seems to suggest it'll work: help.salesforce.com/apex/…
    – GBreavin
    Commented Jun 11, 2014 at 3:11

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .