Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [identity]

The tag has no usage guidance.

1
vote
1answer
35 views

Disable forgot password for SSO Users

We have enabled SSO for our users. How can I prevent users from using salesforce login(login.salesforce.com) if they know saleforce password from before setting up sso or if they reset their password ...
0
votes
1answer
22 views

Salesforce Identity Connect - Change user license from Salesforce Platform to Identity

we've just installed Salesforce Identity Connect so that our users can connect to Salesforce using their Microsoft AD credentials. In the future, we are going to have 2 types of users : type 1 users,...
0
votes
1answer
46 views

Salesforce SAML Single logout

I have a single sign on functionality in my site with Salesforce as identity provider. I have a saml enabled connected app in Salesforce, also it was single logout enabled. I'm done with sign on, ...
0
votes
3answers
54 views

Seamless Sign On - Single Sign On

I am using OpenID protocol and my need is to make the access to Salesforce seamless, after the user is authenticated by the Identity Provider. My Identity Provider is a internal LDAP managed by ...
1
vote
1answer
62 views

Is Custom Domain required in SF when implementing SSO where SF is the Service Provider?

I think My Domain is only required when SF is the IdP of a SSO solution and not strictly required when SF is the Service Provider.
0
votes
1answer
257 views

Field Service Ligthning Mobile App Extension URL Global Parameters

I wants to open iOS app using app extension from Field Service Lightning(FSL) application. Is there anyway to open the iOS app with the same session from which the FSL app is logged in(like passing ...
0
votes
0answers
71 views

Using Okta SSO and Auth Provider with Named Credentials

I've got Okta SSO and a Auth Provider that generate tokens which works pretty well, except that after 1 hour the tokens start to expire. Rather than adding additional app logic to manage token refresh ...
0
votes
0answers
19 views

Salesforce Community dynamic login page

I am stuck in a situation and trying to find a solution. My use case is: I have implemented a single community in salesforce and used the external identity licenses. Salesforce acts as IDP. I have ...
0
votes
1answer
127 views

How to make inactive user status active when the user tries to login using SSO by changing custom JIT Handler code

//This class provides logic for inbound just-in-time provisioning of single sign-on users in your Salesforce organization. //This is the second version which differs from the original in that it works ...
12
votes
1answer
147 views

Can a Login Flow know which Connected App started it?

I want to show different screens based on which connected app is used to login to Salesforce. Can the login flow somehow know which connected app is used? There are multiple Login Flow variables we ...
1
vote
0answers
146 views

Missing unique Third party identifier

I am trying to configure Salesforce to use my custom Identity provider(Based on Identity server 3) as oAuth Provider similar to Google. I am able to successfully achieve it but facing one issue with ...
2
votes
0answers
38 views

Facebook and Salesforce SSO

We are implementing Salesforce and Facebook SSO integration for communities. Do anyone know how to handle the registration process when the Facebook user signed up for facebook by using the mobile ...
1
vote
1answer
60 views

Identity URL always throwing Missing_OAuth_Token?

HttpClient httpClient = new HttpClient(); PostMethod post = new PostMethod(environment); post.addParameter("code", code); post.addParameter("grant_type", "authorization_code"); post....
1
vote
1answer
238 views

Salesforce (as IdP) returns error response to every SAML Single Logout request

I'm having trouble getting Salesforce SAML single logout (SLO) working. I'm writing a web application that uses Salesforce as the SAML Identitiy Provider (IdP) Every LogoutRequest I send gets a ...
0
votes
1answer
278 views

Community Builder Self Register Apex Controller

I am using a customer community self register builder for a Napili Template page and I'm wondering where the controller is for custom login. I am the administrator and have access to the community ...
2
votes
1answer
141 views

Salesforce IDP for external users

Is it required to procure community cloud license to use Salesforce IDP for external users (B2C Customers). Also, when those customers logs-in to a website using Salesforce as an IDP, they get ...
1
vote
1answer
2k views

Identity Provider values - Issuer vs Entity Id, Incorrect Salesforce documentation

I am going through Single Sign-On Implementation Guide (Page 8) where it is written about Issuer and Entity Id. Issuer - The Entity ID—a URL that uniquely identifies your SAML identity provider. ...
0
votes
1answer
93 views

Using login.salesforce.com, log user in salesforce with SAML

Workflow is Salesforce is an IdP and Okta being SP. Expectation is set that provide a generic way of login wherein users are not scoped to specific domain in Salesforce. I have created an OAuth ...
1
vote
1answer
140 views

Need Single Sign on related clarification

We have a custom portal in which there are links to some salesforce pages which are part of a customer community. Users have to be logged into the custom portal in order to access salesforce(custom ...
1
vote
0answers
56 views

Can a SessionID be used to access Identity Service

Background: oAuth 2.0 implemented on a public VF page and is working fine User logs in - regular oAuth flow Usual results returned including the instance url and id url What I am curious about is ...
0
votes
1answer
86 views

Identity Connect CSR missing subjectAlternativeName

I'm setting up Identity Connect so our employees can authenticate against AD and get logged in to SF. While it mostly works, I don't want the users to see browser warnings about invalid certificates. ...
0
votes
1answer
72 views

SCIM User create defaults for Timezone and EmailEncoding

If i create a user using the SCIM Rest APIs and don't populate timezone, it defaults to Pacific time. Since email encoding isn't a supported value in the schema, it always defaults to UTF-8. Does ...
0
votes
0answers
367 views

Regarding CommunitiesSelfRegController Salesforce communities

I am trying to figure out a way to change the logic in default CommunitiesSelfRegController controller for user self registration via community. My use case is to create a new account everytime when ...
3
votes
1answer
1k views

Is it possible to add additional custom attributes in Salesforce as Identity Provider SSO scenario?

I've implemented Single Sign On with Salesforce as Identity Provider scenario using SAML. To avoid unnecessary data bandwidth I want to pass additional data during Single Sign On login process. ...
5
votes
2answers
3k views

Pros and cons of user-agent flow vs web server flow

After looking into the different OAuth types and reading this question, I'm still confused on the specific pros and cons of user-agent vs web server flows. The best explanation I can find says that ...
2
votes
2answers
634 views

“External Identity User” Profile not available

I am trying to complete this trailhead challenge - setting up external identity . I am not able to find the "External Identity User" profile in any of my orgs, even thought they use custom domains ...
3
votes
0answers
54 views

When using Salesforce as an Identity Provider, does it authenticate against it's user base?

If I have purchased Salesforce for 10 users, does that means that I can only perform authentication against those 10 users only ? To put it another way, if I have a website that has 1,000 registered ...
1
vote
1answer
88 views

Salesforce autentication with active directory

I'm tring to understand how salesforce is working with active directory (using identity connect). With identity connect i can sync the information from AD to salesforce and choosing my mapping method. ...
1
vote
0answers
36 views

Configuring Salesforce identity & Google apps

I am trying to setup sso between Salesforce and gmail and have followed all the steps listed in Salesforce Identity implementation guide. But when I click on Gmail connected apps button I get a blank ...
0
votes
0answers
195 views

Verify Your Identity - Wrong Mail Address

It appears I have triggered my inability to log back into my developer org. Received "You're trying to Log In to Salesforce. To make sure your Salesforce account is secure, we have to verify your ...
3
votes
1answer
104 views

Connected App to provide OpenID Connect

I've a web app which is protected via a login mechanism. There is requirement that we need to let some users login using their Salesforce credentials instead of creating accounts at the web ...
12
votes
1answer
517 views

Is there any API that allows me to check if a Username is in use?

We are creating our own ISV trial provisioning page and using the SignupRequest API to create trials. I can't seem to figure out a way to check for the availability of a username synchronously. ...
2
votes
0answers
319 views

Verify Your Identity - Invalid Phone #

Have successfully reset my login on several occasions, but this time was different. Cleared my Chrome browsing data (all of it) and that appears to have triggered my inability to log back into my ...
0
votes
1answer
405 views

Openid Connect - Add custom claim

Using OpenId Connect with Salesforce Identity as the IDP and I am trying to add a custom attribute encoded within the ID token. Is this possible? I can't find any documentation on the topic within ...
2
votes
1answer
166 views

Salesforce OAuth Flow locale?

Trying to authenticate to a Salesforce community org (External Identity License) from an external application using OpenID / OAuth 2.0. Can the OAuth flow accept a language parameter in the header or ...
1
vote
1answer
802 views

Can I simply disable an automatically created identity provider?

Recently we received a "SFDC Expiring Certificate Notification" notification: "You have one or more certificates in your Salesforce org XYZ that will expire soon." We could not remember ever having ...
1
vote
0answers
525 views

Login with Salesforce for 3rd party app

I have a web application that I'd like to place a 'Login with Salesforce' button on. I have many users in my application who are all part of different Salesforce orgs. I'd use the Salesforce Account ...
0
votes
0answers
30 views

Salesforce as an identity provider issue

I want to implement Salesforce as an identity provider. so I have according to deployment guide as below: Register Salesforce account Login Salesforce operation panel Setup -> Domain Management -> My ...
2
votes
0answers
254 views

Salesforce as IdP for Aha.io - Single Sign-On Error: Invalid HTTP Method

I'm completely new to SSO, so please bare with me... I am trying to setup Salesforce as the IDP using SAML 2.0 for a third party application called Aha.io. I've followed this guide to Enable ...
0
votes
2answers
713 views

Unable to view service provider under identity provider

i have enabled the identity provider setup and filled all the correct details on SAML with the Metadata, i have also created a connected app and enabled SAML and filled the Entity ID with the ...
4
votes
0answers
570 views

From Salesforce how to invoke ext webservice using SAML assertion? [closed]

We have salesforce connected to SAML SSO(OKTA) and OKTA is IDP for salesforce. We have a Java legacy system which provides a Web service and it is also part of SSO. Legacy application expects SAML ...
1
vote
0answers
669 views

Salesforce IDP, OAuth 2.0 JWT Bearer Token Flow

I'm trying to use Salesforce as an IDP for Aha! Ideas Portal. I had the SAML working fine, but now I need to setup JWT. I'm currently following these tutorials: Using JSON Web Token (JWT) for Aha! ...
1
vote
1answer
467 views

Appmenuitem & SetupEntityAccess relation for creating app launcher for connected apps

For all records with type='ConnectedApplication' in appmenuItem object, some information should be available in SetupEntityAccess object but I am not able to find any data. Reference: Last query on ...
5
votes
1answer
3k views

“Unable to resolve request into a Service Provider” return by Salesforce Identity Provider for SAML 2.0 request

I have a Salesforce instance configured to act as an Identity Provider and am trying to connect a (non-Salesforce) Service Provider (client) to it. So we are making a SAML 2.0 samlp:AuthnRequest using ...
2
votes
1answer
189 views

Salesforce Identity Connect and AD user management

If a user is deleted from Active Directory, is the corresponding user record deleted or simply deactivated from Salesforce data store?
7
votes
1answer
2k views

Salesforce as identity provider do not provide SSO for partner and customer users in community

I have setup a community with some customer and partner users using a developer account. I have also enabled Salesforce as an identity provider (IdP). In the community login page, I added a login ...
5
votes
0answers
569 views

Just-in-Time Provisioning for Salesforce Communities

I'm trying to configure Just-In-Time provisioning for Salesforce Communities, but can't get the pieces to talk to each other. The process for setting JIT up for Customer Portals here and here, and ...
5
votes
1answer
2k views

Passing Session Id using URL instead of HTTP headers

When invoking the Tooling API, is there a way to pass the Session Id using just URL parameters? I've seen a couple of Salesforce APIs that work when the Session Id is contained in a URL parameter: ...
2
votes
2answers
760 views

Configure SSO to Sharepoint with Salesforce as an IdP without using ADFS 2.0. Is this possible?

We have external users who use a Sharepoint based website. The users are stored in a SQLServer database. We also use SalesForce's service cloud. Users register and login to each of these services ...
1
vote
0answers
91 views

Salesforce Org (Identity Provider) to Salesforce Org (Service Provider) Single Sign On

Where can I find updated instructions to configure Salesforce Org (Identity Provider) to Salesforce Org (Service Provider) Single Sign On? I'd settle for a Federation Id match, but I'd love to be ...