This is basically for confirmation, but I might be wrong.

If I'm trying to get certain users to use SSO only, I don't need to have them set up a Salesforce password correct?

I'm under the impression logging in through the salesforce log in page and logging in through SSO are two things that don't touch.

From https://help.salesforce.com/articleView?id=sso_tips.htm&type=5:

When an authentication provider is enabled, Salesforce doesn’t validate a user’s password. Instead, Salesforce uses the user’s login credentials from the external service provider to establish authentication credentials.

But does a user need to have a password at all is my question.

  • as sysads or headless/integration users will/may need a way to login when SSO is not available, such users may still require pws
    – cropredy
    Nov 8, 2019 at 22:28

1 Answer 1


You are basically correct. If a user is using SSO, the third-party server is authenticating the user. No password is necessary if they will not be logging in directly to Salesforce. This is true for Delegated Authentication as well as SSO via SAML or another authentication method.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.