Questions tagged [saml]
SAML is an XML-based open standard data format for exchanging authentication and authorization data between parties, in particular, between an identity provider and a service provider
172
questions
0
votes
0answers
25 views
Login (Screen) flow for Custom Community Login Page
I have a salesforce community custom login page, using SSO and SAML enabled for federated single sign on.
My implementation is similar to the approach mentioned here - https://help.salesforce.com/...
0
votes
1answer
32 views
SSO with Active Directory Federation Services (ADFS) 4.x
I'm trying to set up Single Sign-On for my customer between their on-premises AD and Salesforce (Sales Cloud). They are using ADFS 4.x. We followed SF instructions that were written for ADFS 3.x but ...
1
vote
1answer
33 views
SSO with Salesforce and Azure AD - disable single logout
I've started playing with Salesforce and configuring SSO to work with our sandboxes. So far so good, and logins can happen without issue. However, I'm running into a bit of an issue when a user logs ...
1
vote
1answer
24 views
Why doesn't https://mydomain.my.salesforce.com/?login work when single signon is enabled?
The Best Practices and Tips for Implementing Single Sign-On
states:
System admins must always be able to log in to Salesforce, even if SSO is enabled for their accounts. For example, you need a ...
1
vote
1answer
86 views
Salesforce as identity provider - implementing Single Logout (django + pysaml2)
Related question: https://stackoverflow.com/questions/47293940/sp-initiated-single-logout-not-working-with-salesforce
I'm implementing single-sign-on service using Salesforce as identity provider. My ...
0
votes
1answer
32 views
I am getting error in test class because of saml is not enabled
I am getting this error-
System.UnexpectedException: Salesforce System Error: 1757874930-20679
(1748552322) (1748552322) System.UnexpectedException: Salesforce
System Error: 1757874930-20679 (...
3
votes
1answer
289 views
Metadata API Apex fails to create fields in Connected App
I am using the latest v46 version of the Financial Force Metadata API Apex Wrapper to create a Connected App but the values I put in the code are partly ignored.
What is not working:
ConnectedApp....
0
votes
3answers
55 views
Exchange SAML Assertion for an access token
I was going throught the salesforce documentation for the SAML Assertion Flow and I did not understand the following point. Can someone please explain this:
To exchange a SAML assertion for an ...
4
votes
1answer
234 views
Automate setup of an external identity provider via APIs
I use the Financial Force Metadata API Apex Wrapper to simplify an app setup using a custom UI. Part of the setup is the creation of a Self-Signed Certificate and its usage in a Single Sign-On Setting....
3
votes
2answers
97 views
Let external system modify Salesforce data on behalf of logged in user
I am going to build a native Salesforce app (Managed package) that will be installed in many subscriber orgs.
The app will make callouts (eg. calling REST endpoint) to external Java app.
The Java ...
2
votes
1answer
27 views
Is there a need to renew the Self Signed Cert for Single Sign On if Salesforce is not the Identity Provider?
Based on this help article and this community post, can we allow the Self Signed Cert within Salesforce to expire if we do not use Salesforce for an Identity Provider? Is there any harm in doing this? ...
0
votes
0answers
49 views
SAML authentication flow, do not require user to click “Log in with <sso idp option>”
I am setting up a client with a SAML IdP and SP for their site, and one of their partners now needs to tie into this system. They use force.com to do so. We have SSO working as described in this doc:
...
4
votes
1answer
247 views
SAML Assertion Validator crashing on encrypted assertion
I'm adding support for encrypted assertions to my SAML 2 IDP, and I'm trying to validate them against a number of SPs we work with. Everything looks good at https://www.samltool.com/online_tools.php (...
3
votes
0answers
150 views
Single Sign On (SSO) with Active Directory Federation Services (ADFS) as Identity Provider
There are other general questions regarding SSO here and here, but I'm specifically running into this error when using ADFS as the IdP:
Incoming SAML message is not properly formatted, or has ...
0
votes
1answer
27 views
I cannot find CONTACT and ACCOUNT Objects in the Connected App's “Create Custom Attributes”
I am trying to send User, Contact and Account related fields through SAML Response. But while configuring the SAML attributes in the Connected App, I only see User, Profile, Org, and few more Objects ...
1
vote
1answer
221 views
Marketing Cloud Download Metadata for Single Sign-On (SSO)
In the Single Sign-On documentation, it states there is a Download Metadata link available to retrieve metadata needed to setup SSO. I don't see this anywhere in the Security Settings in Admin.
...
0
votes
0answers
27 views
Navigate from one sso saml protected SP org to another saml protected SP org without logging into the 2nd SP?
I have 2 service providers, SP1 and SP2 both connected to an IDP through SSO and I have obtained my SAML response from IDP into SP1.
Now, I want the user from SP1 to go to SP2 upon clicking a link/...
1
vote
0answers
46 views
Posting SAML assertion to get an OAuth token
I have 2 service providers, SP1 and SP2 and I have obtained my SAML response from IDP into SP1. Now, in order to connect SP1 and SP2 I am using the oauth SAML response from SP1 and posting it to oAuth ...
1
vote
1answer
129 views
SAML bearer assertion flow for retrieving an OAuth token
I am using SAML assertion to retrieve an OAuth token and I am using a custom apex class to generate the SAML assertion. My IDP is set to send User's FederationIdentitfier in Subject (SAML Response Pic)...
1
vote
1answer
52 views
How to get data from one Service Provider to another Service Provider using the obtained SAML assertion?
I have 3 Salesforce orgs (IDP, SP1 and SP2) and have set up SSO where IDP is my Identity-Provider and SP1 and SP2 are 2 Service-Providers. Using SP1-initiated SSO login, the user gets authenticated in ...
0
votes
3answers
159 views
Multi-Org Android Configuration Microsoft MDM Intune
I am trying to configure Intune MDM (Mobile Data Management) to push multiple instances of Salesforce in the app config. Intune provide a JSON configuration for Android for Works and a XML ...
1
vote
1answer
78 views
Consume external REST API user-aware (without having to re-login)
I have an Apex class that is consuming a partners REST webservices. Currently all users of my app (in the installed org) access the service via a single API Integration user.
We now want make the ...
0
votes
0answers
101 views
Error in Signature when generating SAML Assertion
I'm trying to create my own SAML assertion generator that creates the same kind of assertion a connected app would when clicking the idP initiated login url because we need to automate that step for ...
1
vote
0answers
94 views
Accessing Connected App From Visualforce
I'm developing an application which integrates with another services API. This API requires a SAML token to provide authentication. I've created a connected app, and from an execute anonymous call if ...
0
votes
1answer
98 views
Only Authorise the User using Okta Credential not loggin in Salesforce
I have set up the Okta SAML for SSO with Salesforce. I'm able to login in Salesforce using IDP or embedded URL of Okta.
I want to reauthenticate the user from the record detail page. When I am ...
0
votes
1answer
175 views
Salesforce SAML Single logout
I have a single sign on functionality in my site with Salesforce as identity provider.
I have a saml enabled connected app in Salesforce, also it was single logout enabled.
I'm done with sign on, ...
0
votes
1answer
75 views
Salesforce1 Mobile SSO with OpenID Connect, possible?
Reading through the SSO possibilities, I found nothing related to SalesforceApp SSO with the OpenID Connect
I got documentation related only to implementation with SAML
Is is possible by any chance ...
1
vote
1answer
65 views
Get the SAML assertion when Salesforce is Identity provider
I am using one salesforce org as a Identity provider and another org as a service provider. Using connected app when I try to login from Identity provider to service provider Salesforce org, It logins ...
0
votes
0answers
50 views
Authenticated Callout to Webservice using SSO
We are facing the following problem.
We need to make webservice callout through Mulesoft in a way the user is making the call is not a service user, but the logged one:
Both Salesforce and ...
0
votes
1answer
72 views
Could Delegated Authentication be considered SP or IdP initiated SSO?
I understand that "Delegated Authentication" (DA) is a unique SSO option specific to the SFDC platform.
Can we think about DA as non-SAML SP or IdP initiated SSO?
Could DA ever be considered "...
3
votes
1answer
661 views
SSO: Enable Multiple Configs - considerations
In our Salesforce Org, our internal users sign on via Single Sign On in our Identity Provider, Okta. We are looking use Okta for our partner community users as well, and to do so, we need to add a ...
1
vote
1answer
194 views
Sales Force Marketing Cloud Entity ID
For the SSO setup for SFMC Exact Target, where to find the Entity id . Followed this document to create SSO meta data https://help.salesforce.com/articleView?id=mc_overview_create_salesforce_saml_key....
1
vote
1answer
337 views
SSO for an existing Community User with JIT fails if Contact Email address is updated
While I am still trying to figure if this is a Salesforce bug or an issue with the documentation itself, or if I am missing something here, thought of getting some opinion here as well, if anyone has ...
0
votes
1answer
228 views
How to make inactive user status active when the user tries to login using SSO by changing custom JIT Handler code
//This class provides logic for inbound just-in-time provisioning of single sign-on users in your Salesforce organization.
//This is the second version which differs from the original in that it works ...
1
vote
1answer
52 views
Use Google SAML identity to call in-house API
We'd like Apex code to call an in-house developed API and pass the current user's identity.
Our users sign-in to Salesforce using their corporate GSuite/Google account account via SAML. Ideally, the ...
2
votes
1answer
188 views
Issues with start url when setting up salesforce as IdP for Office365
I have been trying to setup Salesforce as Identity Provider for Office 365 apps as per the article using SAML.
I have setup start url as https://login.microsoftonline.com/login.srf?msg=AuthnReq&...
0
votes
0answers
328 views
Pass dynamic parameters to SAML response in a connected app
I have a connected app that uses SSO (and thus it points to a SAML certificate).
I include a canvas app in a Lightning component via force:canvasApp tag like the following:
<force:canvasApp ...
1
vote
1answer
256 views
Connected App: How to select a Custom Attribute for SAML Service Provider Settings
At the bottom of the Connected App Details Page I created a simple Custom Attribute:
It's fairly simple, I just wanted to test and get the Nickname.
Now, when I go edit the Connected App Policy, I'm ...
1
vote
1answer
298 views
Salesforce (as IdP) returns error response to every SAML Single Logout request
I'm having trouble getting Salesforce SAML single logout (SLO) working. I'm writing a web application that uses Salesforce as the SAML Identitiy Provider (IdP)
Every LogoutRequest I send gets a ...
0
votes
1answer
305 views
Community SSO Buttons outside of /login
BACKGROUND
When adding multiple IdP providers for SSO, the default /login page of an SFDC-based Community (screenshot below) would prompt the user to select an IdP from which to login.
Clicking any ...
5
votes
1answer
371 views
What is the reasoning for using Custom SAML JIT Provisioning here?
I hope this isn't against the rules in some way, but this question is about an example question in the official Integration & Access Management exam guide.
The question is as follows:
Universal ...
0
votes
1answer
620 views
Single Logout (SLO) Okta
Has anyone gotten Single Logout to work with Okta as an IdP. I am getting a 403 error when I logout from Salesforce. This is the url I end up at:
../my.salesforce.com/saml/LogoutRequest
0
votes
1answer
1k views
SAML SSO - How to configure a dynamic ACS URL (SalesForce is IdP)
(My apologies, this is a re-post, I just found salesforce.stackexchange)
I am the Service Provider. Also, a shout-out to this open source C# component (AspNetSaml), they made life a bit easier: ...
1
vote
1answer
206 views
SSO - delegated/federated limitations with community
I'm looking into implementing SSO for customer community. I've been reading the documentation on SSO implementation using either delegated or federated authentication. I have not done SSO before so I'...
2
votes
3answers
339 views
Deflate XML for custom SAML integration?
I need to be able to deflate (or gzip) an XML string for a custom SAML SSO integration. It does not seem that Apex supports this. (It does allow you to compress and HttpRequest, however, that does ...
1
vote
1answer
3k views
Identity Provider values - Issuer vs Entity Id, Incorrect Salesforce documentation
I am going through Single Sign-On Implementation
Guide (Page 8) where it is written about Issuer and Entity Id.
Issuer - The Entity ID—a URL that uniquely identifies your SAML identity provider. ...
2
votes
1answer
262 views
Service accounts with Salesforce and Okta SAML for everything else
How are people using Okta or other SSO providers to manage both service accounts and user accounts? For user accounts I'm clear on configuring SAML. For Service Accounts, how are you then disabling ...
0
votes
1answer
125 views
Using login.salesforce.com, log user in salesforce with SAML
Workflow is Salesforce is an IdP and Okta being SP. Expectation is set that provide a generic way of login wherein users are not scoped to specific domain in Salesforce.
I have created an OAuth ...
1
vote
1answer
184 views
Need Single Sign on related clarification
We have a custom portal in which there are links to some salesforce pages which are part of a customer community.
Users have to be logged into the custom portal in order to access salesforce(custom ...
2
votes
1answer
594 views
All SSO's got affected by changing Self Signed Certificate. What do I need to share with Vendors?
Recently, I got an email from Salesforce, notifying that one of my self-signed certificates is going to expire soon. As a solution to this, I created a new self-signed certificate and replaced the ...
