We need to authenticate users to Salesforce Community using internal app login which cannot support SAML or OpenID. Is there any other solution available? Is "custom authentication provider" the only way to accomplish this requirement? Is "delegated authentication" only applicable for the users who are in Active directory?


If external community users are not being authenticated by SAML or OpenID Connect then only option to use custom authentication.

Refer External Authentication Providers

An authentication provider lets your users log in to your Salesforce org using their login credentials from an external service provider. Salesforce provides authentication providers for apps that support the OpenID Connect protocol, such as Google, Facebook, Twitter, and LinkedIn.

For apps that don’t support OpenID Connect, Salesforce provides an Apex Auth.AuthProviderPluginClass abstract class to create a custom authentication provider.

Is "delegated authentication" only applicable for the users who are in Active directory?

No, it can also be applied for other authentication provider like PingFederate. Here is an example to setup for that.

PingFederate Salesforce Connector 5.1

| improve this answer | |
  • Thank you @Santanu! When you say only option is to use custom authentication, does that mean "delegated authentication" cannot be used? – Navi A Dec 4 '18 at 19:38
  • Here custom authentication and Delegated authentication are different – Santanu Boral Dec 4 '18 at 19:49
  • Yeah, different approaches. We have to decide which one can be used and involves less customization? – Navi A Dec 4 '18 at 19:58
  • Yes, truly based on your use case to implement – Santanu Boral Dec 4 '18 at 20:12

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.