Questions tagged [saml]
SAML is an XML-based open standard data format for exchanging authentication and authorization data between parties, in particular, between an identity provider and a service provider
208
questions
0
votes
0answers
13 views
Possible security concern for embedding Qlik dashboard as an Iframe on a VF Page
I'm working on a use case to embed a Qlik dashboard on Salesforce . I understand that to achieve this one would have to setup SF as Identity Provider , configure connected app and SAML settings on ...
0
votes
1answer
26 views
Limit on a number of SAML identity providers
Is there a limit on a number of external SAML identity providers created under Security Controls > Single Sign-On Settings
1
vote
0answers
26 views
Connected App - Custom Attribute From Related Contact on User
Trying to create / expose a custom attribute from the User record in a connected app through SAML. The value in question is from the Account of the related contact, thus User.Contact.Account....
0
votes
1answer
39 views
Receiving custom attributes from an external identity provider using OAUTH for SSO?
My situation here is that I want my Salesforce Digital Experience (AKA Community) to use an external identity provider that holds some custom access rights attributes that need to be transferred to ...
1
vote
1answer
102 views
How to get my SSO app to work with multiple orgs?
Summary: I want to use Salesforce as an identity provider to allow people to log into my app, regardless of what salesforce org they use.
I've created an app in PHP that uses SimpleSAMLphp to ...
0
votes
1answer
34 views
What SSO (SAML) attributes from Salesforce can I use as a globally unique user identifier?
I'm using Salesforce as the identity provider (IdP) in a single sign-on application I'm developing in php. After the user logs into Salesforce.com to authenticate, they are redirected to my app and ...
1
vote
0answers
55 views
Just In Time controller showing User.surname and User.FirstName all null
I have written Just in Time (JIT) controller to handle JIT scenarios. Azure is passing the Identity provider details. But in salesforce, all values like below showing null, despite those are in the ...
0
votes
1answer
21 views
SFDX auth:web:login to SAML org redirects to SF Login form
Our sandbox is set for SSO SAML. I can directly access the org via SSO and not have to enter a username or password.
When trying to login using sfdx force:auth:web:login I am presented with the SF ...
0
votes
0answers
65 views
Salesforce Experience Cloud Just in Time Provision error
In our org Single Sign on is working but Just in time giving following error for new Users.
Below is assertion details shown on SSO.
Unexpected Exceptions
Ok
1. Validating the Status
Ok
2. Looking ...
0
votes
0answers
29 views
No logs are getting created for JIT handler class for Just In time provision
I have created JIT handler class and in SSO Setting also have given JIT handler name with Running as My user. I tried putting logs at finest level still didn't getting any logs . I tried logs for my ...
2
votes
0answers
89 views
MFA Required: Feb 1, 2022 even for SSO?
Consider a typical use-case... IdP with landing page to Enterprise Apps, and IdP requires MFA. Once authenticated, from landing page users can easily navigate to enterprise apps. Seamless. All nice ...
0
votes
0answers
64 views
SFMC SSO Certificate Update .cert to .pfx
SFMC is integrated with Azure for SSO which has been working fine, Recently when i try to login, SFMC prompting a message that i need to update SSO certificate which i have to take from SFMC Metadata....
2
votes
0answers
40 views
Handle registration process in the middle of an SP initiated flow
Given that
Salesforce is set as Identity provider
a Salesforce community works as identity provider for the community users, and is allowed the self registration.
consider that a Service Provider ...
0
votes
0answers
30 views
Automatically login to a Community without having to type name/password
I have a legacy web application with custom authorization and a B2B Commerce site with SSO/SAML auth. I need a way to allow users from the legacy web application allow access the B2B Commerce ...
1
vote
2answers
91 views
Capture session timeout event
We have a requirement, where salesforce is an identity provider for the external system(using SAML). So when a user logouts of salesforce, an external system should be notified. The connected app ...
0
votes
0answers
30 views
SAML Connected App - Bad redirection
We're using Salesforce as an identity provider so that SF users can log in to our Zendesk.
So we set up a connected app "Zendesk" and set up the SAML part.
The connection is functional for ...
1
vote
1answer
322 views
Issuer vs Entity Id
I can't get a clear answer on what the difference is between Issuer vs Entity Id. I think it depends on the context of if Salesforce is a Service Provider (SP) or Identity Provider (IdP).
Salesforce ...
0
votes
1answer
89 views
Salesforce SSO Org Id appending username intermittently [closed]
How do I stop sending the Org id and just the username?
But this is happening intermittently.
3
votes
3answers
803 views
SSO: Azure AD idp + external API Callout from Apex?
Question:
When a user is signed into SF with Azure AD identity provider (SSO), we want to send the current identity (in the form of a Saml assertion, bearer token, etc?) along with the external API ...
3
votes
0answers
141 views
Including SSO in a managed package
We have a Salesforce Managed Package, and we'd like to use it to provide access to a non-Salesforce service (in this case Tableau). The ISVForce Guide indicates that you can package SAML SSO config in ...
0
votes
0answers
90 views
OAuth 2.0 SAML Bearer Assertion Flow -
We have a scenario where we need an application (external to SF) authenticate to Salesforce via IDP. We have SSO flow set up, where Okta is the Identity Provider and Salesforce as SP. I was hoping ...
0
votes
2answers
181 views
Using Google as IdP in sandbox - how does it know what user to login to? [closed]
Question: How does a sandbox knows to which user to login?
Background: I have enabled SSO on a sandbox in order to test before going to produciton.
Our IdP is Google.
I have created a test user in ...
1
vote
0answers
77 views
Dynamically Pass attributes to SAML from Lightning Component/VF Page [duplicate]
I have a use case where a user clicks the SSO link on a case record or account record and it should pass some Case/Account fields based on the current record information to the SAML response. In other ...
1
vote
0answers
32 views
Send custom data when Salesforce is a SAML SSO identity provider [duplicate]
We configured Salesforce as an Identity Provider for an External App.
We want to be able to make Idp-Initiated SSO and send custom attributes with the SAML Message, for example the Case or Account ID ...
1
vote
0answers
79 views
Community user is not getting redirected to Start URL configured in Connected App for SAML
We are trying to implement SSO using the Salesforce Community to an external PHP site. So, the Salesforce community should be able to login to that external site using community credentials. So far we ...
3
votes
0answers
47 views
parameters of createUser method in samlJitHandler [duplicate]
the syntax of createUser method in samlJitHandler class is
createUser(Id samlSsoProviderId, Id communityId, Id portalId,String federationIdentifier,
Map<String, String> ...
1
vote
0answers
147 views
JIT provisioning for Person accounts
I am looking to enable user provisioning over SAML and was going through documentation https://developer.salesforce.com/blogs/developer-relations/2014/06/how-to-provision-salesforce-communities-users....
1
vote
1answer
614 views
Salesforce Marketing Cloud Single Sign On Error - SAML SSO Error
We are trying to configure Single Sign On with our Salesforce Marketing Cloud Instance. SFMC is our SP while Microsoft Azure is our IdP.
We have been following this link to setup the Single Sign On
...
1
vote
1answer
271 views
How Do I Enable SAML IdP in a Customer Community?
Our Client need to setup an SSO for their customers from the Salesforce Customer Community portal into another web application using SAML. We are familiar with enabling Salesforce as an IdP for ...
0
votes
0answers
43 views
User account mapping with SAML
I'm developing an application that uses Salesforce as an identity provider (IdP). How would you implement the following:
When user authenticates to Salesforce as the identity provider, the
...
1
vote
2answers
159 views
Passing context/state to a SAML service provider
I'm using salesforce as an identity provider through a connected app link in my community. The service provider is a .NET application that downloads a lot of files. I've got the .NET application ...
2
votes
1answer
273 views
SAML - Triggering Single Logout (SLO) when session times out at the identity provider
Let's say I have Saleforce set up as an Identity Provider with a session timeout of 15 minutes. I set up a connected app with SAML and SLO. I use SSO to access a connected app and start working only ...
5
votes
0answers
392 views
SSO between Salesforce - Mobile app - web service provider
I'm trying to understand if it's possible to maintain a SSO session between 3 different elements:
Mobile APP (Android/IOS) - developed with Salesforce SDK
Salesforce (Identity provider)
Web service ...
1
vote
0answers
85 views
Salesforce SAML Assertion flow via REST API for Lightning Out
Context: We want to log a user into a Lightning Out App hosted on an Azure AD System using the SAML Assertion flow.
What we have establisched so far:
We have a functioning connection for our ...
1
vote
0answers
118 views
Authenticate Community Users in External Rest API
I have a Community that consumes an external Rest API that requires authentication.
For testing purpose, I hardcoded a username and a password in my apex rest callouts in order to be able to consume ...
1
vote
0answers
82 views
Salesforce community SAML SSO not working for users created through manually
SAML SSO to community is failing for users with error. I am using the Standard provisioning(not the custom JIT handler)
ErrorCode=5&ErrorDescription=Unable+to+create+user&ErrorDetails=...
0
votes
1answer
230 views
Salesforce cURL Example with Session ID is not working
I'm trying to use the Salesforce Rest API with the session ID I received via a SAML Response from the same Salesforce Instance (as IDP) but I get the message:
[{"message":"This session is not ...
0
votes
0answers
121 views
AuthConfiguration getSamlSsoUrl method return link doesn't work
So I have the method getSamlSsoUrl(communityUrl, startURL, samlId) from the class AuthConfiguration and returned a very long url with saml id, saml acs, saml binding type, and etc in the url.
However,...
0
votes
0answers
129 views
SSO via SAML - avoid a step of clicking on a button corresponding to identity provider on the login screen
There are certain users in the org that have only SSO, as in they don't have a salesforce password set up.
Is there a way to send these users a link they can bookmark that directly goes to the step ...
0
votes
1answer
202 views
SSO with Active Directory Federation Services (ADFS) 4.x
I'm trying to set up Single Sign-On for my customer between their on-premises AD and Salesforce (Sales Cloud). They are using ADFS 4.x. We followed SF instructions that were written for ADFS 3.x but ...
1
vote
1answer
336 views
SSO with Salesforce and Azure AD - disable single logout
I've started playing with Salesforce and configuring SSO to work with our sandboxes. So far so good, and logins can happen without issue. However, I'm running into a bit of an issue when a user logs ...
1
vote
1answer
371 views
Why doesn't https://mydomain.my.salesforce.com/?login work when single signon is enabled?
The Best Practices and Tips for Implementing Single Sign-On
states:
System admins must always be able to log in to Salesforce, even if SSO is enabled for their accounts. For example, you need a ...
2
votes
1answer
409 views
Salesforce as identity provider - implementing Single Logout (django + pysaml2)
Related question: https://stackoverflow.com/questions/47293940/sp-initiated-single-logout-not-working-with-salesforce
I'm implementing single-sign-on service using Salesforce as identity provider. My ...
0
votes
1answer
199 views
I am getting error in test class because of saml is not enabled
I am getting this error-
System.UnexpectedException: Salesforce System Error: 1757874930-20679
(1748552322) (1748552322) System.UnexpectedException: Salesforce
System Error: 1757874930-20679 (...
7
votes
2answers
1k views
Metadata API Apex fails to create fields in Connected App
I am using the latest v46 version of the Financial Force Metadata API Apex Wrapper to create a Connected App but the values I put in the code are partly ignored.
What is not working:
ConnectedApp....
0
votes
3answers
727 views
Exchange SAML Assertion for an access token
I was going throught the salesforce documentation for the SAML Assertion Flow and I did not understand the following point. Can someone please explain this:
To exchange a SAML assertion for an ...
6
votes
1answer
603 views
Automate setup of an external identity provider via APIs
I use the Financial Force Metadata API Apex Wrapper to simplify an app setup using a custom UI. Part of the setup is the creation of a Self-Signed Certificate and its usage in a Single Sign-On Setting....
3
votes
2answers
169 views
Let external system modify Salesforce data on behalf of logged in user
I am going to build a native Salesforce app (Managed package) that will be installed in many subscriber orgs.
The app will make callouts (eg. calling REST endpoint) to external Java app.
The Java ...
2
votes
1answer
140 views
Is there a need to renew the Self Signed Cert for Single Sign On if Salesforce is not the Identity Provider?
Based on this help article and this community post, can we allow the Self Signed Cert within Salesforce to expire if we do not use Salesforce for an Identity Provider? Is there any harm in doing this? ...
0
votes
0answers
129 views
SAML authentication flow, do not require user to click “Log in with <sso idp option>”
I am setting up a client with a SAML IdP and SP for their site, and one of their partners now needs to tie into this system. They use force.com to do so. We have SSO working as described in this doc:
...
