5

I am setting up SSO and have an issue with the service-provider initiated flow SAML use case.

  • The IdP is ADFS.
  • The SAML Idp Initiated SSO is working but SAML SP-initiated SSO flow doesn't seem to redirect to the ADFS site for authentication. The identity mgmt. team is indicating that when they check the page source they are not seeing an attempt to redirect the user to the IdP for authentication.

The Salesforce.com settings for SSO includes a Identity Provider Login URL but does not specify an Identity Provider Logout URL but i understand the Logout URL is not required and should not impact the SP-initiated flow.

  1. The Service Provider Initiated Request Binding is set to HTTP REDIRECT. Will changing this to POST help resolve the issue?
  2. If I ask them for a SAML assertion, will that help if I can run it through the validator?

Any other troubleshooting steps?

Thanks!

Improve this question
2
  • 1
    have you setup domain?
    – ClassCastException
    Commented Mar 3, 2014 at 6:23
  • 1
    Have you read this article? And, as @Ganesh mentioned, you'll need to configure My Domain.
    – metadaddy
    Commented Mar 4, 2014 at 0:12

2 Answers 2

Reset to default
3

The resolution was to go to My Domain > Login Page Branding and change the Authentication Service to the SAML Single Sign-On Settings and uncheck "Login Page"

Improve this answer
1
  • I have the same issue after uncheck "Login Page"
    – Prasad Ruwanpathirana
    Commented Oct 24, 2014 at 3:09
0

Ensure that the IDp has enabled the relay state parameter sending. This is important to ensure Sp initiation works.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .