I think My Domain is only required when SF is the IdP of a SSO solution and not strictly required when SF is the Service Provider.


If Salesforce is Service Provider then My Domain is mandatory to be setup. Otherwise SP initiated flow will not work.

Where as, if Salesforce is Identity Provider then it could nice to setup My Domain, IdP initiated flow will work perfectly.

My Domain is required before you can use these Salesforce features:

  • Single sign-on (SSO) with external identity providers
  • Social sign-on with authentication providers, such as Google and Facebook

Also, refer Considerations for setting up My Domain and SSO

| improve this answer | |
  • Am I right to assume my domain is only required for SP-initiated sso? IdP SSO from third party portal to standard SFDC domain would still work. My Domain is required for setting up single sign-on. For inbound single sign-on requests, the subdomain enables deep linking directly to pages in the org. No changes are required for the identity provider. The Salesforce SAML endpoint (login.salesforce.com) continues to work for SAML and OAUTH requests, even if your org deploys My Domain and selects Prevent login from login.salesforce.com in the My Domain Settings. – user682217 Jan 5 '19 at 17:19
  • You are correct – Santanu Boral Jan 6 '19 at 5:28

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.