I just started with SSO on salesforce, I made my configuration on one of our sandboxes, the problem is that when I test the SSO connection or when I add a new user on the sandbox, it works well but when another user who already has an account in production and on the sandbox tests, it does not work.

They have this error

"we can't log you in because of an issue with single sign-on, contact your salesforce administration"

I use the federation ID configuration in my SSO configuration I checked for users who can't log in and they have the same Username on the sandbox as on the production.

Can you help me please?

  • Please check if the federation id is present on the existing users in Salesforce. If it is not there you have to manually add it for all existing users.
    – Saroj Bera
    Commented Jun 29, 2022 at 10:22
  • I added the federation id manually for the existing users but I still get the error
    – Ahoval
    Commented Jun 29, 2022 at 10:31
  • Follow this Salesforce help article to debug the issue and findout the root cause.
    – Saroj Bera
    Commented Jun 29, 2022 at 10:58
  • Thanks, I just checked the connection history and the users for whom the sso connection does not work, use the connection type "Application" while for the users for whom it works, they use the connection type "SAML Sfdc initiated sso". However I added the federation ID manually for the old users
    – Ahoval
    Commented Jun 29, 2022 at 12:46
  • Please check this SFSE link. It sounds similar to yours.
    – Saroj Bera
    Commented Jun 29, 2022 at 14:59

1 Answer 1


I finally found the solution:

Modify Claim on AD FS server
LDAP attributes Outgoing claim
E-mail-Adresses Name ID

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .