Skip to main content
New
Stack Overflow Jobs powered by Indeed: A job site that puts thousands of tech jobs at your fingertips (U.S. only). Search jobs

Questions tagged [identity]

Use this tag for any identity-related topic on Salesforce Sales Cloud from MFA, SSO, user authentication, connected apps, OAuth, Identity for Customers and Partners, and much more.

Filter by
Sorted by
Tagged with
0 votes
0 answers
40 views

Calling APIs via oAuth and fine-grained authorization

I have an external system calling my middleware which then calls Salesforce to retrieve some data. Users login to the external system via an External IDP and retrieve an Access/Refresh Token and an ID ...
some guy's user avatar
  • 141
1 vote
0 answers
40 views

How to refresh token with OpenIdConnect as Identity provider?

I have setup an auth provider with Open Id Connect. It works well but I have an issue when I want to refresh the token. I'm using this line to get a token. Auth.AuthToken.getAccessTokenMap(auId, 'Open ...
AshBringer's user avatar
0 votes
1 answer
38 views

Is there a way to create a custom domain identification for a page of each portal user

I am looking for a solution to create for each portal user a custom url for a specific experience cloud page. Eg. User x will access his own data on 'domain.com/s/site/customId' Is it possible to ...
gjasula's user avatar
0 votes
0 answers
99 views

Headless single sign on for non-browser clients

I want to implement single sign on for a mobile app with Magento as service provider and Salesforce Customer Identity as Identity provider. However the whole flow should happen headless without ...
jasharbn's user avatar
0 votes
0 answers
88 views

(Interaction Studio) What could be the reason why an anonimous user - even after logging in - is not merged into the existing user?

I am facing an issue with Personalization (former Interaction Studio): my website has a public area and a private one, that users can access after login; in both these 2 pages we have Personalization ...
lisim's user avatar
  • 1
0 votes
0 answers
84 views

SSO without SAML or OpenID Connect

What are the other options can we use for SSO with Salesforce as the identity provider if the other party does not support SAML or OpenID Connect? Is it necessary to use a Custom Bridge that can ...
LearningIssue's user avatar
0 votes
0 answers
115 views

External Identity User and Experience Cloud

Do i Need to buy the External Identity Licenses to make possible use Salesforce Experience Cloud as IDP? Or can i use the Community Licenses?
LearningIssue's user avatar
0 votes
0 answers
163 views

How to get the service provider Id from a connected app of SSO

We have service provider id in Salesforce which looks something like this - '0sp3I0000004CN4' This is used in the IdP-Initiated Login URL. Here is the documentation for that: IdP-Initiated Login URL ...
Jayant Jaiswal's user avatar
0 votes
0 answers
38 views

Can external user provisioning be used with Community user licenses?

Given a Community User, once a field on the user's Contact record is set to a given value, the community user needs to be provisioned as a user in Google GSuite (probably "for Education" or &...
Jason Clark's user avatar
  • 11.9k
0 votes
0 answers
35 views

Can SSO be configured via API between Salesforce and Okta?

I would like to use Okta as an IdP. Now, imagine I need to configure 10 Okta instances with 10 Salesforce instances. Is there any way I can automate the process of setting up SSO via API for each of ...
Mrquestion's user avatar
1 vote
0 answers
314 views

How to retrieve id_token from APEX OIDC Auth Provider

We are using Azure as Identity Provider and did the OIDC Setup. Configured Auth.Provider with Azure Credentials. We were able to generate the Access token from the Auth.RegistrationHandler, but we ...
RAKESH Eerati's user avatar
-1 votes
1 answer
306 views

Default to non Salesforce Authenticator App for MFA

When enabling MFA for users the initial screen that prompts them is for Salesforce Authenticator with a small "Choose Another Verification Method" option near the very bottom. Our ...
Developer Guy's user avatar
0 votes
0 answers
177 views

SF as authorization service for 3rd party API

We have an external website that is using Salesforce Identity to authenticate and authorize access to an API. We have setup the Oauth2 flow using PKCE as per the following link. https://help....
CloudingAround's user avatar
1 vote
1 answer
1k views

SAML - difference between Identity Type and Identity Location

I am implementing Salesforce as a service provider and I am expected to provide some general guidelines to the application which will be set as the identity provider. There is documentation explaining ...
DevelBase2's user avatar
0 votes
0 answers
130 views

How can I get the Salesforce IAM to generate an OIDC compliant id_token on login?

We use Salesforce as our CRM. However, there are aspects of our customer data that sits in external systems, that we need to use to augment the data presented on the CRM to our users. We can access ...
Pradeep's user avatar
0 votes
1 answer
662 views

Auth. Provider vs Single Sign-On Settings

Within Salesforce Setup there are two options: Auth. Provider Single Sign-On Settings When setting up both, both can be added to the Org 'My Domain' login page and Experience cloud pages. What is ...
Cir's user avatar
  • 11
1 vote
0 answers
46 views

Can delegated authentication be used with external identity license?

I am preparing for identity and access management exam and I can't find explaination why using External Identity licenses is not a valid option for marketing users which use third-party application ...
Patlatus's user avatar
  • 17k
1 vote
0 answers
30 views

update in iDP from SP [closed]

We're using Salesforce as an IdP(A) for internally developed application(B) using Open ID Connect protocol. Once identity of user is established in B, user works mostly on that system but there is one ...
curious_techy's user avatar
2 votes
1 answer
125 views

Create a button to Impersonate and search as a specific user

My organization uses the Coveo search engine to index and search content from multiple systems. Not all customers in our community have the same permissions, so it is helpful for our support agents to ...
Scott B's user avatar
  • 27
0 votes
2 answers
2k views

Asset's Record Type can't be deleted because it's used by Identity User profile

I have the following issue: I have two record types on Asset object, let's call them "RecordType1" and "RecordType2". As "RecordType2" is not in use, I want to get rid of ...
kwojt's user avatar
  • 66
1 vote
1 answer
1k views

Is is possible to use Salesforce as an Identity provider for community license users? [duplicate]

I know Salesforce can work as identity or service provider for internal users (standard Salesforce license) However, is is possible to use Salesforce as Identity Provider to make Salesforce external ...
dev4life's user avatar
  • 510
1 vote
1 answer
272 views

Customize Experience Site identity verification page... or custom identity verification process?

We have a requirement to enable device activation within one of our communities. Basically when someone logs in, if the device is unknown, we want to send an SMS one-time code for them to verify. ...
Ryan Werner's user avatar
1 vote
1 answer
1k views

Cannot enter to community using SSO

I have an IDP provider(from third party) and configured an SSO connection (on my org). After authorization on IDP, I try to log in to the community by following the link I took in the SSO settings for ...
Tester's user avatar
  • 11
0 votes
1 answer
1k views

REST API Salesforce Identity URL fails with 404 No_Access error (How to use admin user to read other user's information such as email_id?

I am using Salesforce REST API fetch the list of log files and getting events/records from each log file. I have generated oauth2 token successfully. Using token I can query list of log files and can ...
TestSalesforce's user avatar
0 votes
1 answer
565 views

Receiving custom attributes from an external identity provider using OAUTH for SSO?

My situation here is that I want my Salesforce Digital Experience (AKA Community) to use an external identity provider that holds some custom access rights attributes that need to be transferred to ...
Keith C's user avatar
  • 136k
1 vote
2 answers
594 views

Does NetworkMember solve the problem of assigning the Network Id in Communities/Experiences?

See: Why does adding a Queueable cause an INSUFFICIENT_ACCESS_ON_CROSS_REFERENCE_ENTITY error? for some background. That results in the need to set the NetworkId (there is one of these per Community) ...
Keith C's user avatar
  • 136k
0 votes
1 answer
169 views

Access On-Premises data from Salesforce [closed]

Active Directory is used to store user and permissions. Salesforce needs to access some documents from an on-premise system. This should be restricted to certain users only. I am thinking this can be ...
Rahul Saxena's user avatar
3 votes
1 answer
1k views

Salesforce as an OpenID Connect provider with Azure B2C as a Relying Party [closed]

I am working on a prototype to do federated authentication through Azure AD (AAD) B2C. I have successfully linked my prototype to a separate Azure AD tenant using OpenID Connect and have it working. ...
Adam Hager's user avatar
0 votes
1 answer
250 views

Getting error in implementing the embedded login on the Heroku app

I have created this Heroku app - https://embedded-login-rahul.herokuapp.com/ following this document- https://github.com/salesforceidentity/embedded-login-example for implementing the embedded login. ...
Rahul Satal's user avatar
3 votes
1 answer
1k views

What types of attacks does Salesforce Multi Factor Authentication (MFA) prevent?

This is a question that was raised from the Identity and Access exam, but it is still unclear to me why Multi Factor Authentication (MFA) would not cover all of these attacks and if I were to present ...
S.B.'s user avatar
  • 2,081
2 votes
1 answer
4k views

Auth Provider with per-user Named Credential

I have a custom AuthProviderPluginClass implementation that is working fine for authorization and the related registration handler in my community for External Identity users. I've configured the ...
mtbclimber's user avatar
1 vote
0 answers
120 views

Dynamically Pass attributes to SAML from Lightning Component/VF Page [duplicate]

I have a use case where a user clicks the SSO link on a case record or account record and it should pass some Case/Account fields based on the current record information to the SAML response. In other ...
TSalesforce's user avatar
1 vote
0 answers
41 views

Send custom data when Salesforce is a SAML SSO identity provider [duplicate]

We configured Salesforce as an Identity Provider for an External App. We want to be able to make Idp-Initiated SSO and send custom attributes with the SAML Message, for example the Case or Account ID ...
toufik_at's user avatar
  • 370
1 vote
2 answers
735 views

Passing context/state to a SAML service provider

I'm using salesforce as an identity provider through a connected app link in my community. The service provider is a .NET application that downloads a lot of files. I've got the .NET application ...
afandre's user avatar
  • 71
0 votes
1 answer
2k views

Need Test Classes for AutocreatedConfigSelfReg and AutocreatedDiscLoginHandler

I'm an admin and beginner developer who was setting up a community and thought that the login discovery page was a great user experience. Without due-diligence, I went ahead and selected the "create a ...
Douglas Bennett's user avatar
0 votes
1 answer
836 views

Identity verification via email and/or SMS

We have a lightning application on our client website. The dealer guest site profile users i.e., unauthorized users who are not part of the org after filling some of the details we wanted to give them ...
Meghana's user avatar
2 votes
3 answers
2k views

Add custom claims to OpenID Connect id token - Web Server Authentication flow

We are using Keycloak to generate OpenID Connect id tokens, now they want to use Salesforce Identity to do that. We have some custom claims in the id token returned by Keycloak that we are not able to ...
andres.bravo's user avatar
1 vote
1 answer
104 views

Alternate VisualForce page for OAuth Web Server flow

I'm trying to determine if it's possible to have two different Visualforce login pages so that some external apps use one Visualforce page to authenticate users, while others use a different page. I ...
Kevin Denham's user avatar
1 vote
1 answer
2k views

Disable forgot password for SSO Users

We have enabled SSO for our users. How can I prevent users from using salesforce login(login.salesforce.com) if they know saleforce password from before setting up sso or if they reset their password ...
sfdcdev's user avatar
  • 361
1 vote
1 answer
2k views

Salesforce Identity Connect - Change user license from Salesforce Platform to Identity

we've just installed Salesforce Identity Connect so that our users can connect to Salesforce using their Microsoft AD credentials. In the future, we are going to have 2 types of users : type 1 users,...
Julien Gaïotto's user avatar
0 votes
3 answers
640 views

Seamless Sign On - Single Sign On

I am using OpenID protocol and my need is to make the access to Salesforce seamless, after the user is authenticated by the Identity Provider. My Identity Provider is a internal LDAP managed by ...
Leandro Ferreira Fernandes's user avatar
3 votes
1 answer
2k views

Is Custom Domain required in SF when implementing SSO where SF is the Service Provider?

I think My Domain is only required when SF is the IdP of a SSO solution and not strictly required when SF is the Service Provider.
Omar AQ's user avatar
  • 33
0 votes
1 answer
2k views

Field Service Lightning Mobile App Extension URL Global Parameters

I wants to open iOS app using app extension from Field Service Lightning (FSL) application. Is there anyway to open the iOS app with the same session from which the FSL app is logged in (like passing ...
Muhammad Tahir Hassan's user avatar
1 vote
1 answer
2k views

How to make inactive user status active when the user tries to login using SSO by changing custom JIT Handler code

//This class provides logic for inbound just-in-time provisioning of single sign-on users in your Salesforce organization. //This is the second version which differs from the original in that it works ...
moni sfdc's user avatar
14 votes
1 answer
1k views

Can a Login Flow know which Connected App started it?

I want to show different screens based on which connected app is used to login to Salesforce. Can the login flow somehow know which connected app is used? There are multiple Login Flow variables we ...
Folkert's user avatar
  • 2,712
1 vote
0 answers
1k views

Missing unique Third party identifier

I am trying to configure Salesforce to use my custom Identity provider(Based on Identity server 3) as oAuth Provider similar to Google. I am able to successfully achieve it but facing one issue with ...
user4981009's user avatar
2 votes
0 answers
55 views

Facebook and Salesforce SSO

We are implementing Salesforce and Facebook SSO integration for communities. Do anyone know how to handle the registration process when the Facebook user signed up for facebook by using the mobile ...
AJ007's user avatar
  • 53
1 vote
1 answer
934 views

Identity URL always throwing Missing_OAuth_Token?

HttpClient httpClient = new HttpClient(); PostMethod post = new PostMethod(environment); post.addParameter("code", code); post.addParameter("grant_type", "authorization_code"); post....
Nagendra K S's user avatar
1 vote
2 answers
947 views

Salesforce (as IdP) returns error response to every SAML Single Logout request

I'm having trouble getting Salesforce SAML single logout (SLO) working. I'm writing a web application that uses Salesforce as the SAML Identitiy Provider (IdP) Every LogoutRequest I send gets a ...
J. Doe's user avatar
  • 11
0 votes
1 answer
2k views

Community Builder Self Register Apex Controller

I am using a customer community self register builder for a Napili Template page and I'm wondering where the controller is for custom login. I am the administrator and have access to the community ...
tjcinnamon's user avatar
  • 1,620