Questions tagged [saml]
SAML is an XML-based open standard data format for exchanging authentication and authorization data between parties, in particular, between an identity provider and a service provider
212
questions
0
votes
0answers
18 views
How to implement the salesforce OAuth flow when client is using SAML (Okta) and it's user doesn't know their username and password
This question regards getting salesforce access token via OAuth for our client.
there are 3 parties,
salesforce
our web app
Okta
Our web app needs to communicate with salesforce on behalf of our ...
2
votes
1answer
27 views
Okta SAML SSO error: Unable to map the subject to a Salesforce user
Given:
Okta Application (Salesforce Federated Id)
Salesforce SAML enabled and configured per Okta doc
User provisioned (in Okta) to the Okta Salesforce App
Okta configured to provide federation Id to ...
1
vote
1answer
63 views
Integration between Salesforce and other systems using existing SAML [closed]
My customer is looking to integrate Salesforce with their external system and is considering authentication options. They already has implemented SAML, using a third-party Identity Provider for ...
0
votes
0answers
20 views
Connected App configuration corruption
I've found there is a strange interaction between two different settings pages. Each SAML connected app can be updated in one of two locations:
Settings > Apps > Manage Connected Apps > Edit ...
0
votes
0answers
83 views
How to Authenticate Experience Cloud(Community) Users in React Native App and pass session Id to Experience Cloud Site
We are building a React native app in which we have displayed experience cloud site using react native web-view & iframe. Everything works fine but every time users open the app they need to enter ...
0
votes
1answer
61 views
SAML Bearer Assertion Issuer/ClientId
In the OAuth 2.0 SAML Bearer Assertion Flow for Previously Authorized Apps, what is the issuer supposed to be?
I am trying to connect to orgs that have single sign on working. I have followed this ...
0
votes
1answer
82 views
Possible security concern for embedding Qlik dashboard as an Iframe on a VF Page [closed]
I'm working on a use case to embed a Qlik dashboard on Salesforce . I understand that to achieve this one would have to setup SF as Identity Provider , configure connected app and SAML settings on ...
0
votes
1answer
56 views
Limit on a number of SAML identity providers
Is there a limit on a number of external SAML identity providers created under Security Controls > Single Sign-On Settings
1
vote
0answers
64 views
Connected App - Custom Attribute From Related Contact on User
Trying to create / expose a custom attribute from the User record in a connected app through SAML. The value in question is from the Account of the related contact, thus User.Contact.Account....
0
votes
1answer
87 views
Receiving custom attributes from an external identity provider using OAUTH for SSO?
My situation here is that I want my Salesforce Digital Experience (AKA Community) to use an external identity provider that holds some custom access rights attributes that need to be transferred to ...
1
vote
1answer
233 views
How to get my SSO app to work with multiple orgs?
Summary: I want to use Salesforce as an identity provider to allow people to log into my app, regardless of what salesforce org they use.
I've created an app in PHP that uses SimpleSAMLphp to ...
0
votes
1answer
62 views
What SSO (SAML) attributes from Salesforce can I use as a globally unique user identifier?
I'm using Salesforce as the identity provider (IdP) in a single sign-on application I'm developing in php. After the user logs into Salesforce.com to authenticate, they are redirected to my app and ...
1
vote
0answers
65 views
Just In Time controller showing User.surname and User.FirstName all null
I have written Just in Time (JIT) controller to handle JIT scenarios. Azure is passing the Identity provider details. But in salesforce, all values like below showing null, despite those are in the ...
0
votes
1answer
54 views
SFDX auth:web:login to SAML org redirects to SF Login form
Our sandbox is set for SSO SAML. I can directly access the org via SSO and not have to enter a username or password.
When trying to login using sfdx force:auth:web:login I am presented with the SF ...
0
votes
1answer
177 views
Salesforce Experience Cloud Just in Time Provision error
In our org Single Sign on is working but Just in time giving following error for new Users.
Below is assertion details shown on SSO.
Unexpected Exceptions
Ok
1. Validating the Status
Ok
2. Looking ...
0
votes
0answers
103 views
No logs are getting created for JIT handler class for Just In time provision
I have created JIT handler class and in SSO Setting also have given JIT handler name with Running as My user. I tried putting logs at finest level still didn't getting any logs . I tried logs for my ...
2
votes
1answer
246 views
MFA Required: Feb 1, 2022 even for SSO?
Consider a typical use-case... IdP with landing page to Enterprise Apps, and IdP requires MFA. Once authenticated, from landing page users can easily navigate to enterprise apps. Seamless. All nice ...
0
votes
0answers
102 views
SFMC SSO Certificate Update .cert to .pfx
SFMC is integrated with Azure for SSO which has been working fine, Recently when i try to login, SFMC prompting a message that i need to update SSO certificate which i have to take from SFMC Metadata....
2
votes
0answers
51 views
Handle registration process in the middle of an SP initiated flow
Given that
Salesforce is set as Identity provider
a Salesforce community works as identity provider for the community users, and is allowed the self registration.
consider that a Service Provider ...
0
votes
0answers
103 views
Automatically login to a Community without having to type name/password
I have a legacy web application with custom authorization and a B2B Commerce site with SSO/SAML auth. I need a way to allow users from the legacy web application allow access the B2B Commerce ...
1
vote
2answers
194 views
Capture session timeout event
We have a requirement, where salesforce is an identity provider for the external system(using SAML). So when a user logouts of salesforce, an external system should be notified. The connected app ...
1
vote
1answer
808 views
Issuer vs Entity Id
I can't get a clear answer on what the difference is between Issuer vs Entity Id. I think it depends on the context of if Salesforce is a Service Provider (SP) or Identity Provider (IdP).
Salesforce ...
0
votes
1answer
120 views
Salesforce SSO Org Id appending username intermittently [closed]
How do I stop sending the Org id and just the username?
But this is happening intermittently.
3
votes
3answers
1k views
SSO: Azure AD idp + external API Callout from Apex?
Question:
When a user is signed into SF with Azure AD identity provider (SSO), we want to send the current identity (in the form of a Saml assertion, bearer token, etc?) along with the external API ...
3
votes
0answers
173 views
Including SSO in a managed package
We have a Salesforce Managed Package, and we'd like to use it to provide access to a non-Salesforce service (in this case Tableau). The ISVForce Guide indicates that you can package SAML SSO config in ...
0
votes
0answers
127 views
OAuth 2.0 SAML Bearer Assertion Flow -
We have a scenario where we need an application (external to SF) authenticate to Salesforce via IDP. We have SSO flow set up, where Okta is the Identity Provider and Salesforce as SP. I was hoping ...
0
votes
2answers
281 views
Using Google as IdP in sandbox - how does it know what user to login to? [closed]
Question: How does a sandbox knows to which user to login?
Background: I have enabled SSO on a sandbox in order to test before going to produciton.
Our IdP is Google.
I have created a test user in ...
1
vote
0answers
116 views
Dynamically Pass attributes to SAML from Lightning Component/VF Page [duplicate]
I have a use case where a user clicks the SSO link on a case record or account record and it should pass some Case/Account fields based on the current record information to the SAML response. In other ...
1
vote
0answers
33 views
Send custom data when Salesforce is a SAML SSO identity provider [duplicate]
We configured Salesforce as an Identity Provider for an External App.
We want to be able to make Idp-Initiated SSO and send custom attributes with the SAML Message, for example the Case or Account ID ...
1
vote
0answers
91 views
Community user is not getting redirected to Start URL configured in Connected App for SAML
We are trying to implement SSO using the Salesforce Community to an external PHP site. So, the Salesforce community should be able to login to that external site using community credentials. So far we ...
3
votes
0answers
63 views
parameters of createUser method in samlJitHandler [duplicate]
the syntax of createUser method in samlJitHandler class is
createUser(Id samlSsoProviderId, Id communityId, Id portalId,String federationIdentifier,
Map<String, String> ...
2
votes
1answer
233 views
JIT provisioning for Person accounts
I am looking to enable user provisioning over SAML and was going through documentation https://developer.salesforce.com/blogs/developer-relations/2014/06/how-to-provision-salesforce-communities-users....
1
vote
1answer
1k views
Salesforce Marketing Cloud Single Sign On Error - SAML SSO Error
We are trying to configure Single Sign On with our Salesforce Marketing Cloud Instance. SFMC is our SP while Microsoft Azure is our IdP.
We have been following this link to setup the Single Sign On
...
1
vote
1answer
439 views
How Do I Enable SAML IdP in a Customer Community?
Our Client need to setup an SSO for their customers from the Salesforce Customer Community portal into another web application using SAML. We are familiar with enabling Salesforce as an IdP for ...
0
votes
0answers
43 views
User account mapping with SAML
I'm developing an application that uses Salesforce as an identity provider (IdP). How would you implement the following:
When user authenticates to Salesforce as the identity provider, the
...
1
vote
2answers
240 views
Passing context/state to a SAML service provider
I'm using salesforce as an identity provider through a connected app link in my community. The service provider is a .NET application that downloads a lot of files. I've got the .NET application ...
2
votes
1answer
381 views
SAML - Triggering Single Logout (SLO) when session times out at the identity provider
Let's say I have Saleforce set up as an Identity Provider with a session timeout of 15 minutes. I set up a connected app with SAML and SLO. I use SSO to access a connected app and start working only ...
5
votes
0answers
550 views
SSO between Salesforce - Mobile app - web service provider
I'm trying to understand if it's possible to maintain a SSO session between 3 different elements:
Mobile APP (Android/IOS) - developed with Salesforce SDK
Salesforce (Identity provider)
Web service ...
1
vote
0answers
96 views
Salesforce SAML Assertion flow via REST API for Lightning Out
Context: We want to log a user into a Lightning Out App hosted on an Azure AD System using the SAML Assertion flow.
What we have establisched so far:
We have a functioning connection for our ...
1
vote
0answers
160 views
Authenticate Community Users in External Rest API
I have a Community that consumes an external Rest API that requires authentication.
For testing purpose, I hardcoded a username and a password in my apex rest callouts in order to be able to consume ...
1
vote
0answers
220 views
Salesforce community SAML SSO not working for users created through manually
SAML SSO to community is failing for users with error. I am using the Standard provisioning(not the custom JIT handler)
ErrorCode=5&ErrorDescription=Unable+to+create+user&ErrorDetails=...
0
votes
1answer
270 views
Salesforce cURL Example with Session ID is not working
I'm trying to use the Salesforce Rest API with the session ID I received via a SAML Response from the same Salesforce Instance (as IDP) but I get the message:
[{"message":"This session is not ...
0
votes
0answers
181 views
AuthConfiguration getSamlSsoUrl method return link doesn't work
So I have the method getSamlSsoUrl(communityUrl, startURL, samlId) from the class AuthConfiguration and returned a very long url with saml id, saml acs, saml binding type, and etc in the url.
However,...
0
votes
1answer
193 views
SSO via SAML - avoid a step of clicking on a button corresponding to identity provider on the login screen
There are certain users in the org that have only SSO, as in they don't have a salesforce password set up.
Is there a way to send these users a link they can bookmark that directly goes to the step ...
0
votes
1answer
261 views
SSO with Active Directory Federation Services (ADFS) 4.x
I'm trying to set up Single Sign-On for my customer between their on-premises AD and Salesforce (Sales Cloud). They are using ADFS 4.x. We followed SF instructions that were written for ADFS 3.x but ...
1
vote
1answer
520 views
SSO with Salesforce and Azure AD - disable single logout
I've started playing with Salesforce and configuring SSO to work with our sandboxes. So far so good, and logins can happen without issue. However, I'm running into a bit of an issue when a user logs ...
1
vote
1answer
551 views
Why doesn't https://mydomain.my.salesforce.com/?login work when single signon is enabled?
The Best Practices and Tips for Implementing Single Sign-On
states:
System admins must always be able to log in to Salesforce, even if SSO is enabled for their accounts. For example, you need a ...
2
votes
1answer
547 views
Salesforce as identity provider - implementing Single Logout (django + pysaml2)
Related question: https://stackoverflow.com/questions/47293940/sp-initiated-single-logout-not-working-with-salesforce
I'm implementing single-sign-on service using Salesforce as identity provider. My ...
1
vote
1answer
232 views
I am getting error in test class because of saml is not enabled
I am getting this error-
System.UnexpectedException: Salesforce System Error: 1757874930-20679
(1748552322) (1748552322) System.UnexpectedException: Salesforce
System Error: 1757874930-20679 (...
7
votes
2answers
1k views
Metadata API Apex fails to create fields in Connected App
I am using the latest v46 version of the Financial Force Metadata API Apex Wrapper to create a Connected App but the values I put in the code are partly ignored.
What is not working:
ConnectedApp....
