Questions tagged [saml]
SAML is an XML-based open standard data format for exchanging authentication and authorization data between parties, in particular, between an identity provider and a service provider
3
votes
1answer
55 views
SAML Assertion Validator crashing on encrypted assertion
I'm adding support for encrypted assertions to my SAML 2 IDP, and I'm trying to validate them against a number of SPs we work with. Everything looks good at https://www.samltool.com/online_tools.php (...
2
votes
0answers
41 views
Single Sign On (SSO) with Active Directory Federation Services (ADFS) as Identity Provider
There are other general questions regarding SSO here and here, but I'm specifically running into this error when using ADFS as the IdP:
Incoming SAML message is not properly formatted, or has ...
0
votes
1answer
18 views
I cannot find CONTACT and ACCOUNT Objects in the Connected App's “Create Custom Attributes”
I am trying to send User, Contact and Account related fields through SAML Response. But while configuring the SAML attributes in the Connected App, I only see User, Profile, Org, and few more Objects ...
1
vote
1answer
58 views
Marketing Cloud Download Metadata for Single Sign-On (SSO)
In the Single Sign-On documentation, it states there is a Download Metadata link available to retrieve metadata needed to setup SSO. I don't see this anywhere in the Security Settings in Admin.
...
0
votes
0answers
23 views
Navigate from one sso saml protected SP org to another saml protected SP org without logging into the 2nd SP?
I have 2 service providers, SP1 and SP2 both connected to an IDP through SSO and I have obtained my SAML response from IDP into SP1.
Now, I want the user from SP1 to go to SP2 upon clicking a link/...
1
vote
0answers
26 views
Posting SAML assertion to get an OAuth token
I have 2 service providers, SP1 and SP2 and I have obtained my SAML response from IDP into SP1. Now, in order to connect SP1 and SP2 I am using the oauth SAML response from SP1 and posting it to oAuth ...
1
vote
1answer
27 views
SAML bearer assertion flow for retrieving an OAuth token
I am using SAML assertion to retrieve an OAuth token and I am using a custom apex class to generate the SAML assertion. My IDP is set to send User's FederationIdentitfier in Subject (SAML Response Pic)...
1
vote
1answer
35 views
How to get data from one Service Provider to another Service Provider using the obtained SAML assertion?
I have 3 Salesforce orgs (IDP, SP1 and SP2) and have set up SSO where IDP is my Identity-Provider and SP1 and SP2 are 2 Service-Providers. Using SP1-initiated SSO login, the user gets authenticated in ...
0
votes
1answer
60 views
Multi-Org Android Configuration Microsoft MDM Intune
I am trying to configure Intune MDM (Mobile Data Management) to push multiple instances of Salesforce in the app config. Intune provide a JSON configuration for Android for Works and a XML ...
1
vote
1answer
57 views
Consume external REST API user-aware (without having to re-login)
I have an Apex class that is consuming a partners REST webservices. Currently all users of my app (in the installed org) access the service via a single API Integration user.
We now want make the ...
0
votes
0answers
39 views
Error in Signature when generating SAML Assertion
I'm trying to create my own SAML assertion generator that creates the same kind of assertion a connected app would when clicking the idP initiated login url because we need to automate that step for ...
1
vote
0answers
62 views
Accessing Connected App From Visualforce
I'm developing an application which integrates with another services API. This API requires a SAML token to provide authentication. I've created a connected app, and from an execute anonymous call if ...
0
votes
1answer
61 views
Only Authorise the User using Okta Credential not loggin in Salesforce
I have set up the Okta SAML for SSO with Salesforce. I'm able to login in Salesforce using IDP or embedded URL of Okta.
I want to reauthenticate the user from the record detail page. When I am ...
0
votes
1answer
46 views
Salesforce SAML Single logout
I have a single sign on functionality in my site with Salesforce as identity provider.
I have a saml enabled connected app in Salesforce, also it was single logout enabled.
I'm done with sign on, ...
0
votes
1answer
48 views
Salesforce1 Mobile SSO with OpenID Connect, possible?
Reading through the SSO possibilities, I found nothing related to SalesforceApp SSO with the OpenID Connect
I got documentation related only to implementation with SAML
Is is possible by any chance ...
1
vote
1answer
33 views
Get the SAML assertion when Salesforce is Identity provider
I am using one salesforce org as a Identity provider and another org as a service provider. Using connected app when I try to login from Identity provider to service provider Salesforce org, It logins ...
0
votes
0answers
21 views
Authenticated Callout to Webservice using SSO
We are facing the following problem.
We need to make webservice callout through Mulesoft in a way the user is making the call is not a service user, but the logged one:
Both Salesforce and ...
0
votes
1answer
45 views
Could Delegated Authentication be considered SP or IdP initiated SSO?
I understand that "Delegated Authentication" (DA) is a unique SSO option specific to the SFDC platform.
Can we think about DA as non-SAML SP or IdP initiated SSO?
Could DA ever be considered "...
3
votes
1answer
409 views
SSO: Enable Multiple Configs - considerations
In our Salesforce Org, our internal users sign on via Single Sign On in our Identity Provider, Okta. We are looking use Okta for our partner community users as well, and to do so, we need to add a ...
1
vote
1answer
131 views
Sales Force Marketing Cloud Entity ID
For the SSO setup for SFMC Exact Target, where to find the Entity id . Followed this document to create SSO meta data https://help.salesforce.com/articleView?id=mc_overview_create_salesforce_saml_key....
1
vote
1answer
177 views
SSO for an existing Community User with JIT fails if Contact Email address is updated
While I am still trying to figure if this is a Salesforce bug or an issue with the documentation itself, or if I am missing something here, thought of getting some opinion here as well, if anyone has ...
0
votes
1answer
127 views
How to make inactive user status active when the user tries to login using SSO by changing custom JIT Handler code
//This class provides logic for inbound just-in-time provisioning of single sign-on users in your Salesforce organization.
//This is the second version which differs from the original in that it works ...
0
votes
0answers
16 views
How to use SFOAuthCoordinator to support the OAuth/SAML Authentication flow?
I have the OAuth/SAML authentication & authorization flow working from a web browser, but I want to add it to our custom mobile app. Everything is configured correctly on the server, and we have ...
0
votes
1answer
44 views
Use Google SAML identity to call in-house API
We'd like Apex code to call an in-house developed API and pass the current user's identity.
Our users sign-in to Salesforce using their corporate GSuite/Google account account via SAML. Ideally, the ...
2
votes
1answer
115 views
Issues with start url when setting up salesforce as IdP for Office365
I have been trying to setup Salesforce as Identity Provider for Office 365 apps as per the article using SAML.
I have setup start url as https://login.microsoftonline.com/login.srf?msg=AuthnReq&...
0
votes
0answers
244 views
Pass dynamic parameters to SAML response in a connected app
I have a connected app that uses SSO (and thus it points to a SAML certificate).
I include a canvas app in a Lightning component via force:canvasApp tag like the following:
<force:canvasApp ...
1
vote
1answer
160 views
Connected App: How to select a Custom Attribute for SAML Service Provider Settings
At the bottom of the Connected App Details Page I created a simple Custom Attribute:
It's fairly simple, I just wanted to test and get the Nickname.
Now, when I go edit the Connected App Policy, I'm ...
1
vote
1answer
238 views
Salesforce (as IdP) returns error response to every SAML Single Logout request
I'm having trouble getting Salesforce SAML single logout (SLO) working. I'm writing a web application that uses Salesforce as the SAML Identitiy Provider (IdP)
Every LogoutRequest I send gets a ...
0
votes
1answer
232 views
Community SSO Buttons outside of /login
BACKGROUND
When adding multiple IdP providers for SSO, the default /login page of an SFDC-based Community (screenshot below) would prompt the user to select an IdP from which to login.
Clicking any ...
5
votes
1answer
273 views
What is the reasoning for using Custom SAML JIT Provisioning here?
I hope this isn't against the rules in some way, but this question is about an example question in the official Integration & Access Management exam guide.
The question is as follows:
Universal ...
0
votes
1answer
527 views
Single Logout (SLO) Okta
Has anyone gotten Single Logout to work with Okta as an IdP. I am getting a 403 error when I logout from Salesforce. This is the url I end up at:
../my.salesforce.com/saml/LogoutRequest
0
votes
1answer
841 views
SAML SSO - How to configure a dynamic ACS URL (SalesForce is IdP)
(My apologies, this is a re-post, I just found salesforce.stackexchange)
I am the Service Provider. Also, a shout-out to this open source C# component (AspNetSaml), they made life a bit easier: ...
0
votes
1answer
159 views
SSO - delegated/federated limitations with community
I'm looking into implementing SSO for customer community. I've been reading the documentation on SSO implementation using either delegated or federated authentication. I have not done SSO before so I'...
2
votes
3answers
235 views
Deflate XML for custom SAML integration?
I need to be able to deflate (or gzip) an XML string for a custom SAML SSO integration. It does not seem that Apex supports this. (It does allow you to compress and HttpRequest, however, that does ...
1
vote
1answer
2k views
Identity Provider values - Issuer vs Entity Id, Incorrect Salesforce documentation
I am going through Single Sign-On Implementation
Guide (Page 8) where it is written about Issuer and Entity Id.
Issuer - The Entity ID—a URL that uniquely identifies your SAML identity provider. ...
1
vote
1answer
221 views
Service accounts with Salesforce and Okta SAML for everything else
How are people using Okta or other SSO providers to manage both service accounts and user accounts? For user accounts I'm clear on configuring SAML. For Service Accounts, how are you then disabling ...
0
votes
1answer
93 views
Using login.salesforce.com, log user in salesforce with SAML
Workflow is Salesforce is an IdP and Okta being SP. Expectation is set that provide a generic way of login wherein users are not scoped to specific domain in Salesforce.
I have created an OAuth ...
1
vote
1answer
140 views
Need Single Sign on related clarification
We have a custom portal in which there are links to some salesforce pages which are part of a customer community.
Users have to be logged into the custom portal in order to access salesforce(custom ...
2
votes
1answer
442 views
All SSO's got affected by changing Self Signed Certificate. What do I need to share with Vendors?
Recently, I got an email from Salesforce, notifying that one of my self-signed certificates is going to expire soon. As a solution to this, I created a new self-signed certificate and replaced the ...
4
votes
0answers
1k views
REST API using SessionId throws “not valid for use with the REST API” for Community users
Following are the steps I am doing:
Get the Salesforce Session ID through SAML Handshake using SAML attributes
Trigger REST API using that session ID
curl https://my-communities.force.com/...
2
votes
2answers
1k views
Possible causes of “invalid assertion” error in SAML assertion oauth flow
I'm trying to get an oauth access token using the SAML Assertion oauth flow and getting back the generic invalid assertion error message.
{
"error": "invalid_grant",
"error_description": "...
1
vote
0answers
52 views
Is there any common SSO endpoint for Communities and Salesforce
We have a connected app which uses SAML which renders data from an external application in an Iframe and it's working fine inside Salesforce.
Now the challenge which we are facing is; we also want ...
1
vote
1answer
93 views
Single Sign on URL of Salesforce SSO
I am trying to enable SSO in my Salesforce Unlimited Org. The Identity Provider is asking for the following details
'Still Single Sign on URL is missing, as this is one SP initiated SSO so this SSO ...
0
votes
1answer
91 views
SSO Settings for Salesforce org
I am trying to configure SSO to my salesforce org.
As per my understanding I have to be provided with the issuer URL, Identity Provider Certificate by the IdP.
What I want to understand is that:
...
1
vote
2answers
163 views
Way to monitor SAML request to third party system!
We are planning to setup SSO with third party application (Salesforce as IdP) and I was wondering if there is way to monitor how XML response is going out to the external system. We have setup a ...
0
votes
2answers
638 views
Need to set a custom page as Default landing page after SSO authentication
I have SAML 2.0 based SSO authenitcation set in our Salesforce Org. What has to be done so that after successful authentication of the users, they should be landed on a custom page ?
Setting up the ...
3
votes
1answer
1k views
Is it possible to add additional custom attributes in Salesforce as Identity Provider SSO scenario?
I've implemented Single Sign On with Salesforce as Identity Provider scenario using SAML.
To avoid unnecessary data bandwidth I want to pass additional data during Single Sign On login process.
...
0
votes
1answer
340 views
Use URL.getCurrentRequestUrl().getQuery() in Custom Connected App Handler Class
I am reaching out to know whether I can use URL.getCurrentRequestUrl().getQuery() API in Custom Connected App Handler Class to extract parameters passed in IDP URL (when browser is redirected to idp ...
0
votes
1answer
23 views
How the single sign out to make work in Salesforce as IDP using SAML
I am using Salesforce as an Idp and my portal as SP.
I can login and can redirected to my page.
My Qn is how can I check if I have the login session active when I browse from page to page of my portal ...
0
votes
1answer
181 views
how do i remove signature info from my SAML response
In SAML how do i sign only message without signing assertion? Is there any setting via setup?
if no is it possible to remove the < ds:Signature> info from < saml:Assertion> ??
<?xml ...
