Questions tagged [saml]
SAML is an XML-based open standard data format for exchanging authentication and authorization data between parties, in particular, between an identity provider and a service provider
214
questions
0
votes
0
answers
41
views
Programmatically retrieve SAML metadata of SF as a service provider
We have 3 full-sync sandboxes + our production org. Every month, the next planned sandbox is refreshed and re-configured.
Part of this process is that we enabled SSO on those sandboxes. Once the ...
- 113
1
vote
0
answers
82
views
Is SFDC username considered case sensitive when used as SAML identifier?
In our company we have some customers that login into our Experience Cloud portal using SAML in IDP-initiated mode. In SFDC federation setup, the Name IDentifier found in the SAML assertion will be ...
- 11
1
vote
1
answer
38
views
One human, two Salesforce user seats - Okta SAML SSO - How to configure?
In our org, we have some people with two Salesforce user seats, representing different personas and permissions
Example:
George Washington (the human) - with a single Okta Active Directory entry
Has ...
- 62.3k
0
votes
1
answer
538
views
Why would SSO stop working : malformed_certificate
SSO was working fine, next day it stopped working: (been working for 7+ years)
I get this Google Error:
That’s an error.
Error: malformed_certificate
Error while signing data with certificate
7 ...
- 1,255
0
votes
0
answers
27
views
How to implement the salesforce OAuth flow when client is using SAML (Okta) and it's user doesn't know their username and password
This question regards getting salesforce access token via OAuth for our client.
there are 3 parties,
salesforce
our web app
Okta
Our web app needs to communicate with salesforce on behalf of our ...
3
votes
2
answers
625
views
Okta SAML SSO error: Unable to map the subject to a Salesforce user
Given:
Okta Application (Salesforce Federated Id)
Salesforce SAML enabled and configured per Okta doc
User provisioned (in Okta) to the Okta Salesforce App
Okta configured to provide federation Id to ...
- 62.3k
1
vote
1
answer
204
views
Integration between Salesforce and other systems using existing SAML [closed]
My customer is looking to integrate Salesforce with their external system and is considering authentication options. They already has implemented SAML, using a third-party Identity Provider for ...
0
votes
0
answers
24
views
Connected App configuration corruption
I've found there is a strange interaction between two different settings pages. Each SAML connected app can be updated in one of two locations:
Settings > Apps > Manage Connected Apps > Edit ...
- 162
0
votes
0
answers
209
views
How to Authenticate Experience Cloud(Community) Users in React Native App and pass session Id to Experience Cloud Site
We are building a React native app in which we have displayed experience cloud site using react native web-view & iframe. Everything works fine but every time users open the app they need to enter ...
- 10.6k
0
votes
1
answer
98
views
SAML Bearer Assertion Issuer/ClientId
In the OAuth 2.0 SAML Bearer Assertion Flow for Previously Authorized Apps, what is the issuer supposed to be?
I am trying to connect to orgs that have single sign on working. I have followed this ...
- 15
0
votes
1
answer
146
views
Possible security concern for embedding Qlik dashboard as an Iframe on a VF Page [closed]
I'm working on a use case to embed a Qlik dashboard on Salesforce . I understand that to achieve this one would have to setup SF as Identity Provider , configure connected app and SAML settings on ...
- 517
0
votes
1
answer
93
views
Limit on a number of SAML identity providers
Is there a limit on a number of external SAML identity providers created under Security Controls > Single Sign-On Settings
1
vote
1
answer
158
views
Connected App - Custom Attribute From Related Contact on User
Trying to create / expose a custom attribute from the User record in a connected app through SAML. The value in question is from the Account of the related contact, thus User.Contact.Account....
- 906
0
votes
1
answer
137
views
Receiving custom attributes from an external identity provider using OAUTH for SSO?
My situation here is that I want my Salesforce Digital Experience (AKA Community) to use an external identity provider that holds some custom access rights attributes that need to be transferred to ...
- 130k
1
vote
1
answer
282
views
How to get my SSO app to work with multiple orgs?
Summary: I want to use Salesforce as an identity provider to allow people to log into my app, regardless of what salesforce org they use.
I've created an app in PHP that uses SimpleSAMLphp to ...
- 11
0
votes
1
answer
105
views
What SSO (SAML) attributes from Salesforce can I use as a globally unique user identifier?
I'm using Salesforce as the identity provider (IdP) in a single sign-on application I'm developing in php. After the user logs into Salesforce.com to authenticate, they are redirected to my app and ...
- 11
1
vote
0
answers
79
views
Just In Time controller showing User.surname and User.FirstName all null
I have written Just in Time (JIT) controller to handle JIT scenarios. Azure is passing the Identity provider details. But in salesforce, all values like below showing null, despite those are in the ...
- 1,277
0
votes
1
answer
74
views
SFDX auth:web:login to SAML org redirects to SF Login form
Our sandbox is set for SSO SAML. I can directly access the org via SSO and not have to enter a username or password.
When trying to login using sfdx force:auth:web:login I am presented with the SF ...
- 1
0
votes
0
answers
317
views
Salesforce Experience Cloud Just in Time Provision error
In our org Single Sign on is working but Just in time giving following error for new Users.
Below is assertion details shown on SSO.
Unexpected Exceptions
Ok
1. Validating the Status
Ok
2. Looking ...
- 1,277
0
votes
0
answers
172
views
No logs are getting created for JIT handler class for Just In time provision
I have created JIT handler class and in SSO Setting also have given JIT handler name with Running as My user. I tried putting logs at finest level still didn't getting any logs . I tried logs for my ...
- 1,277
2
votes
1
answer
312
views
MFA Required: Feb 1, 2022 even for SSO?
Consider a typical use-case... IdP with landing page to Enterprise Apps, and IdP requires MFA. Once authenticated, from landing page users can easily navigate to enterprise apps. Seamless. All nice ...
- 2,091
2
votes
0
answers
60
views
Handle registration process in the middle of an SP initiated flow
Given that
Salesforce is set as Identity provider
a Salesforce community works as identity provider for the community users, and is allowed the self registration.
consider that a Service Provider ...
- 990
1
vote
2
answers
307
views
Capture session timeout event
We have a requirement, where salesforce is an identity provider for the external system(using SAML). So when a user logouts of salesforce, an external system should be notified. The connected app ...
- 49
1
vote
1
answer
1k
views
Issuer vs Entity Id
I can't get a clear answer on what the difference is between Issuer vs Entity Id. I think it depends on the context of if Salesforce is a Service Provider (SP) or Identity Provider (IdP).
Salesforce ...
- 2,708
0
votes
1
answer
150
views
Salesforce SSO Org Id appending username intermittently [closed]
How do I stop sending the Org id and just the username?
But this is happening intermittently.
user88069
3
votes
3
answers
1k
views
SSO: Azure AD idp + external API Callout from Apex?
Question:
When a user is signed into SF with Azure AD identity provider (SSO), we want to send the current identity (in the form of a Saml assertion, bearer token, etc?) along with the external API ...
- 51
3
votes
0
answers
225
views
Including SSO in a managed package
We have a Salesforce Managed Package, and we'd like to use it to provide access to a non-Salesforce service (in this case Tableau). The ISVForce Guide indicates that you can package SAML SSO config in ...
- 2,022
0
votes
0
answers
180
views
OAuth 2.0 SAML Bearer Assertion Flow -
We have a scenario where we need an application (external to SF) authenticate to Salesforce via IDP. We have SSO flow set up, where Okta is the Identity Provider and Salesforce as SP. I was hoping ...
- 607
0
votes
2
answers
387
views
Using Google as IdP in sandbox - how does it know what user to login to? [closed]
Question: How does a sandbox knows to which user to login?
Background: I have enabled SSO on a sandbox in order to test before going to produciton.
Our IdP is Google.
I have created a test user in ...
- 5,445
1
vote
0
answers
118
views
Dynamically Pass attributes to SAML from Lightning Component/VF Page [duplicate]
I have a use case where a user clicks the SSO link on a case record or account record and it should pass some Case/Account fields based on the current record information to the SAML response. In other ...
- 31
1
vote
0
answers
34
views
Send custom data when Salesforce is a SAML SSO identity provider [duplicate]
We configured Salesforce as an Identity Provider for an External App.
We want to be able to make Idp-Initiated SSO and send custom attributes with the SAML Message, for example the Case or Account ID ...
- 330
1
vote
0
answers
121
views
Community user is not getting redirected to Start URL configured in Connected App for SAML
We are trying to implement SSO using the Salesforce Community to an external PHP site. So, the Salesforce community should be able to login to that external site using community credentials. So far we ...
- 10.6k
3
votes
0
answers
72
views
parameters of createUser method in samlJitHandler [duplicate]
the syntax of createUser method in samlJitHandler class is
createUser(Id samlSsoProviderId, Id communityId, Id portalId,String federationIdentifier,
Map<String, String> ...
- 1,375
2
votes
1
answer
308
views
JIT provisioning for Person accounts
I am looking to enable user provisioning over SAML and was going through documentation https://developer.salesforce.com/blogs/developer-relations/2014/06/how-to-provision-salesforce-communities-users....
- 1,375
1
vote
2
answers
1k
views
Salesforce Marketing Cloud Single Sign On Error - SAML SSO Error
We are trying to configure Single Sign On with our Salesforce Marketing Cloud Instance. SFMC is our SP while Microsoft Azure is our IdP.
We have been following this link to setup the Single Sign On
...
- 11
2
votes
1
answer
586
views
How Do I Enable SAML IdP in a Customer Community?
Our Client need to setup an SSO for their customers from the Salesforce Customer Community portal into another web application using SAML. We are familiar with enabling Salesforce as an IdP for ...
- 311
0
votes
0
answers
43
views
User account mapping with SAML
I'm developing an application that uses Salesforce as an identity provider (IdP). How would you implement the following:
When user authenticates to Salesforce as the identity provider, the
...
1
vote
2
answers
299
views
Passing context/state to a SAML service provider
I'm using salesforce as an identity provider through a connected app link in my community. The service provider is a .NET application that downloads a lot of files. I've got the .NET application ...
- 45
2
votes
1
answer
480
views
SAML - Triggering Single Logout (SLO) when session times out at the identity provider
Let's say I have Saleforce set up as an Identity Provider with a session timeout of 15 minutes. I set up a connected app with SAML and SLO. I use SSO to access a connected app and start working only ...
- 3,786
5
votes
0
answers
619
views
SSO between Salesforce - Mobile app - web service provider
I'm trying to understand if it's possible to maintain a SSO session between 3 different elements:
Mobile APP (Android/IOS) - developed with Salesforce SDK
Salesforce (Identity provider)
Web service ...
- 990
1
vote
0
answers
115
views
Salesforce SAML Assertion flow via REST API for Lightning Out
Context: We want to log a user into a Lightning Out App hosted on an Azure AD System using the SAML Assertion flow.
What we have establisched so far:
We have a functioning connection for our ...
1
vote
0
answers
195
views
Authenticate Community Users in External Rest API
I have a Community that consumes an external Rest API that requires authentication.
For testing purpose, I hardcoded a username and a password in my apex rest callouts in order to be able to consume ...
- 11
1
vote
0
answers
396
views
Salesforce community SAML SSO not working for users created through manually
SAML SSO to community is failing for users with error. I am using the Standard provisioning(not the custom JIT handler)
ErrorCode=5&ErrorDescription=Unable+to+create+user&ErrorDetails=...
- 111
0
votes
1
answer
314
views
Salesforce cURL Example with Session ID is not working
I'm trying to use the Salesforce Rest API with the session ID I received via a SAML Response from the same Salesforce Instance (as IDP) but I get the message:
[{"message":"This session is not ...
- 303
0
votes
0
answers
261
views
AuthConfiguration getSamlSsoUrl method return link doesn't work
So I have the method getSamlSsoUrl(communityUrl, startURL, samlId) from the class AuthConfiguration and returned a very long url with saml id, saml acs, saml binding type, and etc in the url.
However,...
- 97
0
votes
1
answer
302
views
SSO via SAML - avoid a step of clicking on a button corresponding to identity provider on the login screen
There are certain users in the org that have only SSO, as in they don't have a salesforce password set up.
Is there a way to send these users a link they can bookmark that directly goes to the step ...
- 97
0
votes
1
answer
286
views
SSO with Active Directory Federation Services (ADFS) 4.x
I'm trying to set up Single Sign-On for my customer between their on-premises AD and Salesforce (Sales Cloud). They are using ADFS 4.x. We followed SF instructions that were written for ADFS 3.x but ...
- 1
1
vote
1
answer
656
views
SSO with Salesforce and Azure AD - disable single logout
I've started playing with Salesforce and configuring SSO to work with our sandboxes. So far so good, and logins can happen without issue. However, I'm running into a bit of an issue when a user logs ...
- 125
1
vote
1
answer
682
views
Why doesn't https://mydomain.my.salesforce.com/?login work when single signon is enabled?
The Best Practices and Tips for Implementing Single Sign-On
states:
System admins must always be able to log in to Salesforce, even if SSO is enabled for their accounts. For example, you need a ...
- 62.3k
2
votes
1
answer
694
views
Salesforce as identity provider - implementing Single Logout (django + pysaml2)
Related question: https://stackoverflow.com/questions/47293940/sp-initiated-single-logout-not-working-with-salesforce
I'm implementing single-sign-on service using Salesforce as identity provider. My ...