My Community uses a homegrown system as its IdP. The identity portion runs on Okta. When the user clicks a link in the homegrown system, they are brought to the Community and logged in using SSO.
We now have a population of users who are not present in the IdP who need to access the Community. For these users, we want them to access the Community using a direct login on its own URL. But, at the same time, we want users coming in through SSO to be put straight through.
Speaking with Salesforce Support, they are telling me that this scenario is impossible, and that when I allow a login method other than SSO in the Experience Administration -> Login & Registration:
I've tried modifying a login page with an LWC to identify the user, but all users coming in from the IdP show as guest users -- in other words the login page happens before the SSO is initiated.
I feel like there has to be a way to do this. For internal users, we have this exact scenario set up so that all users are forced through Okta while certain people can login directly in case Okta goes down. It's as simple as the "Is Single Sign-On Enabled" in a Profile/Permission Set.
Thank you in advance!
