0

I've implemented SSO with Salesforce using ADFS. Currently all users can login to Salesforce via SSO. I'd like to limit SSO to a subset of users based on user groups defined in AD. How can this be accomplished?

3
  • In addition to the referenced Q&A above, a simple solution is outlined here
    – identigral
    Mar 3, 2020 at 20:25
  • Well i understand that i can leverage that feature by enabling Delegated Authentication in sales force, but i already have Employees in AD groups so my question would be can i leverage say Accounting (Ad Group) to have SSO enabled and anyone not apart of that group not have SSO ?
    – Kingston
    Mar 4, 2020 at 19:04
  • You can map and sync AD groups to Salesforce via Identity Connect. The groups could become Profiles and/or PermissionSets in Salesforce. The answers above show you how you can take Profile and/or PermissionSet and include or exclude it from SSO.
    – identigral
    Mar 5, 2020 at 0:46

0