10

We've set up Single Sign on with SAML. Our IdP is OneLogin and using their link, we are able to connect.

We now want to disable password login for some users in Salesforce. Salesforce's documentation points me towards a "Use Single Sign On" or "Is Single Sign On Enabled" permission (depending on the age of the document) on the user profile, however I cannot find this permission. Does anyone know where to find it?

2 Answers 2

2

I'm happy to say that this feature is now fully accessible to administrators. It has been possible to prevent users from using their Salesforce credentials when they were SSO-enabled but it required contacting Salesforce support.

As of Summer '20 (release notes), you can configure SSO in a way that it prevents users from using their internal credentials.

Single Sign-On Settings

8

You will find the "Is Single Sign-On Enabled" checkbox on the User profile under the System Permissions group. Please note that this permission is related to delegated authentication and not to SAML SSO.

8
  • 4
    Is also worth noting that this field is a bit of a misnomer. It should actually read something like "Force Single Sign-On" but the way it reads makes it sound like an option.
    – greenstork
    May 16, 2014 at 19:22
  • Just curious, does this permission only show up in the User record after delegated authentication is enabled for the org?
    – John_Henry
    Jan 21, 2016 at 16:17
  • 2
    Yes - it's not visible before delegated authentication is enabled by support.
    – haagen
    Jan 26, 2016 at 13:34
  • 1
    I have an active SSO setup but don't see the "Is Single Sign On Enabled" box - has this been deprecated?
    – jaw999
    May 13, 2016 at 19:52
  • 1
    @zaitsman no that's not true. Disallowing login via lsc is unrelated. Jan 14 at 21:47

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.