Questions tagged [saml]
SAML is an XML-based open standard data format for exchanging authentication and authorization data between parties, in particular, between an identity provider and a service provider
177
questions
1
vote
0answers
22 views
Salesforce community SAML SSO not working for users created through manually
SAML SSO to community is failing for users with error. I am using the Standard provisioning(not the custom JIT handler)
ErrorCode=5&ErrorDescription=Unable+to+create+user&ErrorDetails=...
0
votes
0answers
7 views
User Provisioning SCIM flow input value is missing
I have installed User Provisioning Connector Package and this created a default SCIM userprovisioning flow. However, when I open the Apex action, all the input values are missing. It also does not ...
0
votes
1answer
26 views
Salesforce cURL Example with Session ID is not working
I'm trying to use the Salesforce Rest API with the session ID I received via a SAML Response from the same Salesforce Instance (as IDP) but I get the message:
[{"message":"This session is not ...
0
votes
0answers
15 views
AuthConfiguration getSamlSsoUrl method return link doesn't work
So I have the method getSamlSsoUrl(communityUrl, startURL, samlId) from the class AuthConfiguration and returned a very long url with saml id, saml acs, saml binding type, and etc in the url.
However,...
0
votes
0answers
38 views
SSO via SAML - avoid a step of clicking on a button corresponding to identity provider on the login screen
There are certain users in the org that have only SSO, as in they don't have a salesforce password set up.
Is there a way to send these users a link they can bookmark that directly goes to the step ...
0
votes
0answers
29 views
Login (Screen) flow for Custom Community Login Page
I have a salesforce community custom login page, using SSO and SAML enabled for federated single sign on.
My implementation is similar to the approach mentioned here - https://help.salesforce.com/...
0
votes
1answer
35 views
SSO with Active Directory Federation Services (ADFS) 4.x
I'm trying to set up Single Sign-On for my customer between their on-premises AD and Salesforce (Sales Cloud). They are using ADFS 4.x. We followed SF instructions that were written for ADFS 3.x but ...
1
vote
1answer
51 views
SSO with Salesforce and Azure AD - disable single logout
I've started playing with Salesforce and configuring SSO to work with our sandboxes. So far so good, and logins can happen without issue. However, I'm running into a bit of an issue when a user logs ...
1
vote
1answer
30 views
Why doesn't https://mydomain.my.salesforce.com/?login work when single signon is enabled?
The Best Practices and Tips for Implementing Single Sign-On
states:
System admins must always be able to log in to Salesforce, even if SSO is enabled for their accounts. For example, you need a ...
1
vote
1answer
104 views
Salesforce as identity provider - implementing Single Logout (django + pysaml2)
Related question: https://stackoverflow.com/questions/47293940/sp-initiated-single-logout-not-working-with-salesforce
I'm implementing single-sign-on service using Salesforce as identity provider. My ...
0
votes
1answer
47 views
I am getting error in test class because of saml is not enabled
I am getting this error-
System.UnexpectedException: Salesforce System Error: 1757874930-20679
(1748552322) (1748552322) System.UnexpectedException: Salesforce
System Error: 1757874930-20679 (...
4
votes
1answer
319 views
Metadata API Apex fails to create fields in Connected App
I am using the latest v46 version of the Financial Force Metadata API Apex Wrapper to create a Connected App but the values I put in the code are partly ignored.
What is not working:
ConnectedApp....
0
votes
3answers
86 views
Exchange SAML Assertion for an access token
I was going throught the salesforce documentation for the SAML Assertion Flow and I did not understand the following point. Can someone please explain this:
To exchange a SAML assertion for an ...
4
votes
1answer
264 views
Automate setup of an external identity provider via APIs
I use the Financial Force Metadata API Apex Wrapper to simplify an app setup using a custom UI. Part of the setup is the creation of a Self-Signed Certificate and its usage in a Single Sign-On Setting....
3
votes
2answers
105 views
Let external system modify Salesforce data on behalf of logged in user
I am going to build a native Salesforce app (Managed package) that will be installed in many subscriber orgs.
The app will make callouts (eg. calling REST endpoint) to external Java app.
The Java ...
2
votes
1answer
30 views
Is there a need to renew the Self Signed Cert for Single Sign On if Salesforce is not the Identity Provider?
Based on this help article and this community post, can we allow the Self Signed Cert within Salesforce to expire if we do not use Salesforce for an Identity Provider? Is there any harm in doing this? ...
0
votes
0answers
50 views
SAML authentication flow, do not require user to click “Log in with <sso idp option>”
I am setting up a client with a SAML IdP and SP for their site, and one of their partners now needs to tie into this system. They use force.com to do so. We have SSO working as described in this doc:
...
4
votes
1answer
305 views
SAML Assertion Validator crashing on encrypted assertion
I'm adding support for encrypted assertions to my SAML 2 IDP, and I'm trying to validate them against a number of SPs we work with. Everything looks good at https://www.samltool.com/online_tools.php (...
3
votes
0answers
174 views
Single Sign On (SSO) with Active Directory Federation Services (ADFS) as Identity Provider
There are other general questions regarding SSO here and here, but I'm specifically running into this error when using ADFS as the IdP:
Incoming SAML message is not properly formatted, or has ...
0
votes
1answer
41 views
I cannot find CONTACT and ACCOUNT Objects in the Connected App's “Create Custom Attributes”
I am trying to send User, Contact and Account related fields through SAML Response. But while configuring the SAML attributes in the Connected App, I only see User, Profile, Org, and few more Objects ...
1
vote
1answer
282 views
Marketing Cloud Download Metadata for Single Sign-On (SSO)
In the Single Sign-On documentation, it states there is a Download Metadata link available to retrieve metadata needed to setup SSO. I don't see this anywhere in the Security Settings in Admin.
...
0
votes
0answers
27 views
Navigate from one sso saml protected SP org to another saml protected SP org without logging into the 2nd SP?
I have 2 service providers, SP1 and SP2 both connected to an IDP through SSO and I have obtained my SAML response from IDP into SP1.
Now, I want the user from SP1 to go to SP2 upon clicking a link/...
1
vote
0answers
48 views
Posting SAML assertion to get an OAuth token
I have 2 service providers, SP1 and SP2 and I have obtained my SAML response from IDP into SP1. Now, in order to connect SP1 and SP2 I am using the oauth SAML response from SP1 and posting it to oAuth ...
1
vote
1answer
157 views
SAML bearer assertion flow for retrieving an OAuth token
I am using SAML assertion to retrieve an OAuth token and I am using a custom apex class to generate the SAML assertion. My IDP is set to send User's FederationIdentitfier in Subject (SAML Response Pic)...
1
vote
1answer
54 views
How to get data from one Service Provider to another Service Provider using the obtained SAML assertion?
I have 3 Salesforce orgs (IDP, SP1 and SP2) and have set up SSO where IDP is my Identity-Provider and SP1 and SP2 are 2 Service-Providers. Using SP1-initiated SSO login, the user gets authenticated in ...
0
votes
3answers
177 views
Multi-Org Android Configuration Microsoft MDM Intune
I am trying to configure Intune MDM (Mobile Data Management) to push multiple instances of Salesforce in the app config. Intune provide a JSON configuration for Android for Works and a XML ...
1
vote
1answer
79 views
Consume external REST API user-aware (without having to re-login)
I have an Apex class that is consuming a partners REST webservices. Currently all users of my app (in the installed org) access the service via a single API Integration user.
We now want make the ...
0
votes
0answers
123 views
Error in Signature when generating SAML Assertion
I'm trying to create my own SAML assertion generator that creates the same kind of assertion a connected app would when clicking the idP initiated login url because we need to automate that step for ...
1
vote
0answers
115 views
Accessing Connected App From Visualforce
I'm developing an application which integrates with another services API. This API requires a SAML token to provide authentication. I've created a connected app, and from an execute anonymous call if ...
0
votes
1answer
109 views
Only Authorise the User using Okta Credential not loggin in Salesforce
I have set up the Okta SAML for SSO with Salesforce. I'm able to login in Salesforce using IDP or embedded URL of Okta.
I want to reauthenticate the user from the record detail page. When I am ...
0
votes
1answer
215 views
Salesforce SAML Single logout
I have a single sign on functionality in my site with Salesforce as identity provider.
I have a saml enabled connected app in Salesforce, also it was single logout enabled.
I'm done with sign on, ...
0
votes
1answer
83 views
Salesforce1 Mobile SSO with OpenID Connect, possible?
Reading through the SSO possibilities, I found nothing related to SalesforceApp SSO with the OpenID Connect
I got documentation related only to implementation with SAML
Is is possible by any chance ...
1
vote
1answer
75 views
Get the SAML assertion when Salesforce is Identity provider
I am using one salesforce org as a Identity provider and another org as a service provider. Using connected app when I try to login from Identity provider to service provider Salesforce org, It logins ...
0
votes
0answers
57 views
Authenticated Callout to Webservice using SSO
We are facing the following problem.
We need to make webservice callout through Mulesoft in a way the user is making the call is not a service user, but the logged one:
Both Salesforce and ...
0
votes
1answer
80 views
Could Delegated Authentication be considered SP or IdP initiated SSO?
I understand that "Delegated Authentication" (DA) is a unique SSO option specific to the SFDC platform.
Can we think about DA as non-SAML SP or IdP initiated SSO?
Could DA ever be considered "...
3
votes
1answer
749 views
SSO: Enable Multiple Configs - considerations
In our Salesforce Org, our internal users sign on via Single Sign On in our Identity Provider, Okta. We are looking use Okta for our partner community users as well, and to do so, we need to add a ...
1
vote
1answer
210 views
Sales Force Marketing Cloud Entity ID
For the SSO setup for SFMC Exact Target, where to find the Entity id . Followed this document to create SSO meta data https://help.salesforce.com/articleView?id=mc_overview_create_salesforce_saml_key....
1
vote
1answer
397 views
SSO for an existing Community User with JIT fails if Contact Email address is updated
While I am still trying to figure if this is a Salesforce bug or an issue with the documentation itself, or if I am missing something here, thought of getting some opinion here as well, if anyone has ...
0
votes
1answer
267 views
How to make inactive user status active when the user tries to login using SSO by changing custom JIT Handler code
//This class provides logic for inbound just-in-time provisioning of single sign-on users in your Salesforce organization.
//This is the second version which differs from the original in that it works ...
1
vote
1answer
53 views
Use Google SAML identity to call in-house API
We'd like Apex code to call an in-house developed API and pass the current user's identity.
Our users sign-in to Salesforce using their corporate GSuite/Google account account via SAML. Ideally, the ...
2
votes
1answer
202 views
Issues with start url when setting up salesforce as IdP for Office365
I have been trying to setup Salesforce as Identity Provider for Office 365 apps as per the article using SAML.
I have setup start url as https://login.microsoftonline.com/login.srf?msg=AuthnReq&...
0
votes
0answers
340 views
Pass dynamic parameters to SAML response in a connected app
I have a connected app that uses SSO (and thus it points to a SAML certificate).
I include a canvas app in a Lightning component via force:canvasApp tag like the following:
<force:canvasApp ...
1
vote
1answer
296 views
Connected App: How to select a Custom Attribute for SAML Service Provider Settings
At the bottom of the Connected App Details Page I created a simple Custom Attribute:
It's fairly simple, I just wanted to test and get the Nickname.
Now, when I go edit the Connected App Policy, I'm ...
1
vote
1answer
313 views
Salesforce (as IdP) returns error response to every SAML Single Logout request
I'm having trouble getting Salesforce SAML single logout (SLO) working. I'm writing a web application that uses Salesforce as the SAML Identitiy Provider (IdP)
Every LogoutRequest I send gets a ...
0
votes
1answer
326 views
Community SSO Buttons outside of /login
BACKGROUND
When adding multiple IdP providers for SSO, the default /login page of an SFDC-based Community (screenshot below) would prompt the user to select an IdP from which to login.
Clicking any ...
5
votes
1answer
416 views
What is the reasoning for using Custom SAML JIT Provisioning here?
I hope this isn't against the rules in some way, but this question is about an example question in the official Integration & Access Management exam guide.
The question is as follows:
Universal ...
0
votes
1answer
637 views
Single Logout (SLO) Okta
Has anyone gotten Single Logout to work with Okta as an IdP. I am getting a 403 error when I logout from Salesforce. This is the url I end up at:
../my.salesforce.com/saml/LogoutRequest
0
votes
1answer
1k views
SAML SSO - How to configure a dynamic ACS URL (SalesForce is IdP)
(My apologies, this is a re-post, I just found salesforce.stackexchange)
I am the Service Provider. Also, a shout-out to this open source C# component (AspNetSaml), they made life a bit easier: ...
1
vote
1answer
224 views
SSO - delegated/federated limitations with community
I'm looking into implementing SSO for customer community. I've been reading the documentation on SSO implementation using either delegated or federated authentication. I have not done SSO before so I'...
2
votes
3answers
372 views
Deflate XML for custom SAML integration?
I need to be able to deflate (or gzip) an XML string for a custom SAML SSO integration. It does not seem that Apex supports this. (It does allow you to compress and HttpRequest, however, that does ...
