10

We've set up Single Sign on with SAML. Our IdP is OneLogin and using their link, we are able to connect.

We now want to disable password login for some users in Salesforce. Salesforce's documentation points me towards a "Use Single Sign On" or "Is Single Sign On Enabled" permission (depending on the age of the document) on the user profile, however I cannot find this permission. Does anyone know where to find it?

Improve this question

3 Answers 3

Reset to default
3

I'm happy to say that this feature is now fully accessible to administrators. It has been possible to prevent users from using their Salesforce credentials when they were SSO-enabled but it required contacting Salesforce support.

As of Summer '20 (release notes), you can configure SSO in a way that it prevents users from using their internal credentials.

Single Sign-On Settings

Improve this answer
8

You will find the "Is Single Sign-On Enabled" checkbox on the User profile under the System Permissions group. Please note that this permission is related to delegated authentication and not to SAML SSO.

Improve this answer
8
  • 4
    Is also worth noting that this field is a bit of a misnomer. It should actually read something like "Force Single Sign-On" but the way it reads makes it sound like an option.
    – greenstork
    Commented May 16, 2014 at 19:22
  • 1
    Just curious, does this permission only show up in the User record after delegated authentication is enabled for the org?
    – John_Henry
    Commented Jan 21, 2016 at 16:17
  • 3
    Yes - it's not visible before delegated authentication is enabled by support.
    – haagen
    Commented Jan 26, 2016 at 13:34
  • 1
    I have an active SSO setup but don't see the "Is Single Sign On Enabled" box - has this been deprecated?
    – jaw999
    Commented May 13, 2016 at 19:52
  • 1
    @zaitsman no that's not true. Disallowing login via lsc is unrelated.
    – David Brossard
    Commented Jan 14, 2022 at 21:47
2

if Is Single Sign-On Enabled is not visible, then just open Single sign on settings and enable " Disable login with Salesforce credentials ". Then you can see Is Single Sign-On Enabled on profile.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .