Questions tagged [saml]
SAML is an XML-based open standard data format for exchanging authentication and authorization data between parties, in particular, between an identity provider and a service provider
202
questions
0
votes
0answers
5 views
SFDX auth:web:login to SAML org redirects to SF Login form
Our sandbox is set for SSO SAML. I can directly access the org via SSO and not have to enter a username or password.
When trying to login using sfdx force:auth:web:login I am presented with the SF ...
0
votes
0answers
24 views
Salesforce Experience Cloud Just in Time Provision error
In our org Single Sign on is working but Just in time giving following error for new Users.
Below is assertion details shown on SSO.
Unexpected Exceptions
Ok
1. Validating the Status
Ok
2. Looking ...
0
votes
0answers
21 views
No logs are getting created for JIT handler class for Just In time provision
I have created JIT handler class and in SSO Setting also have given JIT handler name with Running as My user. I tried putting logs at finest level still didn't getting any logs . I tried logs for my ...
2
votes
0answers
75 views
MFA Required: Feb 1, 2022 even for SSO?
Consider a typical use-case... IdP with landing page to Enterprise Apps, and IdP requires MFA. Once authenticated, from landing page users can easily navigate to enterprise apps. Seamless. All nice ...
0
votes
0answers
43 views
SFMC SSO Certificate Update .cert to .pfx
SFMC is integrated with Azure for SSO which has been working fine, Recently when i try to login, SFMC prompting a message that i need to update SSO certificate which i have to take from SFMC Metadata....
2
votes
0answers
35 views
Handle registration process in the middle of an SP initiated flow
Given that
Salesforce is set as Identity provider
a Salesforce community works as identity provider for the community users, and is allowed the self registration.
consider that a Service Provider ...
0
votes
0answers
19 views
Automatically login to a Community without having to type name/password
I have a legacy web application with custom authorization and a B2B Commerce site with SSO/SAML auth. I need a way to allow users from the legacy web application allow access the B2B Commerce ...
1
vote
2answers
60 views
Capture session timeout event
We have a requirement, where salesforce is an identity provider for the external system(using SAML). So when a user logouts of salesforce, an external system should be notified. The connected app ...
0
votes
0answers
30 views
SAML Connected App - Bad redirection
We're using Salesforce as an identity provider so that SF users can log in to our Zendesk.
So we set up a connected app "Zendesk" and set up the SAML part.
The connection is functional for ...
1
vote
1answer
127 views
Issuer vs Entity Id
I can't get a clear answer on what the difference is between Issuer vs Entity Id. I think it depends on the context of if Salesforce is a Service Provider (SP) or Identity Provider (IdP).
Salesforce ...
0
votes
1answer
79 views
Salesforce SSO Org Id appending username intermittently [closed]
How do I stop sending the Org id and just the username?
But this is happening intermittently.
3
votes
3answers
594 views
SSO: Azure AD idp + external API Callout from Apex?
Question:
When a user is signed into SF with Azure AD identity provider (SSO), we want to send the current identity (in the form of a Saml assertion, bearer token, etc?) along with the external API ...
3
votes
0answers
128 views
Including SSO in a managed package
We have a Salesforce Managed Package, and we'd like to use it to provide access to a non-Salesforce service (in this case Tableau). The ISVForce Guide indicates that you can package SAML SSO config in ...
0
votes
0answers
17 views
Salesforce as Identity Provider, catch the parameter after the start URL from Service Provider
we use Salesforce as Identity Provider and SAML connected app to integrate with the service provider. I am new to this. Service provider want to trigger the connection with Start_URL/Text.
How can I ...
0
votes
0answers
75 views
OAuth 2.0 SAML Bearer Assertion Flow -
We have a scenario where we need an application (external to SF) authenticate to Salesforce via IDP. We have SSO flow set up, where Okta is the Identity Provider and Salesforce as SP. I was hoping ...
0
votes
2answers
143 views
Using Google as IdP in sandbox - how does it know what user to login to? [closed]
Question: How does a sandbox knows to which user to login?
Background: I have enabled SSO on a sandbox in order to test before going to produciton.
Our IdP is Google.
I have created a test user in ...
1
vote
0answers
57 views
Dynamically Pass attributes to SAML from Lightning Component/VF Page [duplicate]
I have a use case where a user clicks the SSO link on a case record or account record and it should pass some Case/Account fields based on the current record information to the SAML response. In other ...
1
vote
0answers
31 views
Send custom data when Salesforce is a SAML SSO identity provider [duplicate]
We configured Salesforce as an Identity Provider for an External App.
We want to be able to make Idp-Initiated SSO and send custom attributes with the SAML Message, for example the Case or Account ID ...
1
vote
0answers
63 views
Community user is not getting redirected to Start URL configured in Connected App for SAML
We are trying to implement SSO using the Salesforce Community to an external PHP site. So, the Salesforce community should be able to login to that external site using community credentials. So far we ...
3
votes
0answers
45 views
parameters of createUser method in samlJitHandler [duplicate]
the syntax of createUser method in samlJitHandler class is
createUser(Id samlSsoProviderId, Id communityId, Id portalId,String federationIdentifier,
Map<String, String> ...
1
vote
0answers
132 views
JIT provisioning for Person accounts
I am looking to enable user provisioning over SAML and was going through documentation https://developer.salesforce.com/blogs/developer-relations/2014/06/how-to-provision-salesforce-communities-users....
1
vote
1answer
468 views
Salesforce Marketing Cloud Single Sign On Error - SAML SSO Error
We are trying to configure Single Sign On with our Salesforce Marketing Cloud Instance. SFMC is our SP while Microsoft Azure is our IdP.
We have been following this link to setup the Single Sign On
...
1
vote
1answer
194 views
How Do I Enable SAML IdP in a Customer Community?
Our Client need to setup an SSO for their customers from the Salesforce Customer Community portal into another web application using SAML. We are familiar with enabling Salesforce as an IdP for ...
0
votes
0answers
41 views
User account mapping with SAML
I'm developing an application that uses Salesforce as an identity provider (IdP). How would you implement the following:
When user authenticates to Salesforce as the identity provider, the
...
1
vote
1answer
113 views
Passing context/state to a SAML service provider
I'm using salesforce as an identity provider through a connected app link in my community. The service provider is a .NET application that downloads a lot of files. I've got the .NET application ...
2
votes
1answer
227 views
SAML - Triggering Single Logout (SLO) when session times out at the identity provider
Let's say I have Saleforce set up as an Identity Provider with a session timeout of 15 minutes. I set up a connected app with SAML and SLO. I use SSO to access a connected app and start working only ...
5
votes
0answers
351 views
SSO between Salesforce - Mobile app - web service provider
I'm trying to understand if it's possible to maintain a SSO session between 3 different elements:
Mobile APP (Android/IOS) - developed with Salesforce SDK
Salesforce (Identity provider)
Web service ...
1
vote
0answers
82 views
Salesforce SAML Assertion flow via REST API for Lightning Out
Context: We want to log a user into a Lightning Out App hosted on an Azure AD System using the SAML Assertion flow.
What we have establisched so far:
We have a functioning connection for our ...
1
vote
0answers
109 views
Authenticate Community Users in External Rest API
I have a Community that consumes an external Rest API that requires authentication.
For testing purpose, I hardcoded a username and a password in my apex rest callouts in order to be able to consume ...
1
vote
0answers
62 views
Salesforce community SAML SSO not working for users created through manually
SAML SSO to community is failing for users with error. I am using the Standard provisioning(not the custom JIT handler)
ErrorCode=5&ErrorDescription=Unable+to+create+user&ErrorDetails=...
0
votes
1answer
193 views
Salesforce cURL Example with Session ID is not working
I'm trying to use the Salesforce Rest API with the session ID I received via a SAML Response from the same Salesforce Instance (as IDP) but I get the message:
[{"message":"This session is not ...
0
votes
0answers
100 views
AuthConfiguration getSamlSsoUrl method return link doesn't work
So I have the method getSamlSsoUrl(communityUrl, startURL, samlId) from the class AuthConfiguration and returned a very long url with saml id, saml acs, saml binding type, and etc in the url.
However,...
0
votes
0answers
115 views
SSO via SAML - avoid a step of clicking on a button corresponding to identity provider on the login screen
There are certain users in the org that have only SSO, as in they don't have a salesforce password set up.
Is there a way to send these users a link they can bookmark that directly goes to the step ...
0
votes
1answer
181 views
SSO with Active Directory Federation Services (ADFS) 4.x
I'm trying to set up Single Sign-On for my customer between their on-premises AD and Salesforce (Sales Cloud). They are using ADFS 4.x. We followed SF instructions that were written for ADFS 3.x but ...
1
vote
1answer
271 views
SSO with Salesforce and Azure AD - disable single logout
I've started playing with Salesforce and configuring SSO to work with our sandboxes. So far so good, and logins can happen without issue. However, I'm running into a bit of an issue when a user logs ...
1
vote
1answer
298 views
Why doesn't https://mydomain.my.salesforce.com/?login work when single signon is enabled?
The Best Practices and Tips for Implementing Single Sign-On
states:
System admins must always be able to log in to Salesforce, even if SSO is enabled for their accounts. For example, you need a ...
2
votes
1answer
367 views
Salesforce as identity provider - implementing Single Logout (django + pysaml2)
Related question: https://stackoverflow.com/questions/47293940/sp-initiated-single-logout-not-working-with-salesforce
I'm implementing single-sign-on service using Salesforce as identity provider. My ...
0
votes
1answer
180 views
I am getting error in test class because of saml is not enabled
I am getting this error-
System.UnexpectedException: Salesforce System Error: 1757874930-20679
(1748552322) (1748552322) System.UnexpectedException: Salesforce
System Error: 1757874930-20679 (...
6
votes
2answers
974 views
Metadata API Apex fails to create fields in Connected App
I am using the latest v46 version of the Financial Force Metadata API Apex Wrapper to create a Connected App but the values I put in the code are partly ignored.
What is not working:
ConnectedApp....
0
votes
3answers
633 views
Exchange SAML Assertion for an access token
I was going throught the salesforce documentation for the SAML Assertion Flow and I did not understand the following point. Can someone please explain this:
To exchange a SAML assertion for an ...
6
votes
1answer
542 views
Automate setup of an external identity provider via APIs
I use the Financial Force Metadata API Apex Wrapper to simplify an app setup using a custom UI. Part of the setup is the creation of a Self-Signed Certificate and its usage in a Single Sign-On Setting....
3
votes
2answers
160 views
Let external system modify Salesforce data on behalf of logged in user
I am going to build a native Salesforce app (Managed package) that will be installed in many subscriber orgs.
The app will make callouts (eg. calling REST endpoint) to external Java app.
The Java ...
2
votes
1answer
118 views
Is there a need to renew the Self Signed Cert for Single Sign On if Salesforce is not the Identity Provider?
Based on this help article and this community post, can we allow the Self Signed Cert within Salesforce to expire if we do not use Salesforce for an Identity Provider? Is there any harm in doing this? ...
0
votes
0answers
123 views
SAML authentication flow, do not require user to click “Log in with <sso idp option>”
I am setting up a client with a SAML IdP and SP for their site, and one of their partners now needs to tie into this system. They use force.com to do so. We have SSO working as described in this doc:
...
4
votes
1answer
756 views
SAML Assertion Validator crashing on encrypted assertion
I'm adding support for encrypted assertions to my SAML 2 IDP, and I'm trying to validate them against a number of SPs we work with. Everything looks good at https://www.samltool.com/online_tools.php (...
4
votes
0answers
564 views
Single Sign On (SSO) with Active Directory Federation Services (ADFS) as Identity Provider
There are other general questions regarding SSO here and here, but I'm specifically running into this error when using ADFS as the IdP:
Incoming SAML message is not properly formatted, or has ...
0
votes
1answer
219 views
I cannot find CONTACT and ACCOUNT Objects in the Connected App's “Create Custom Attributes”
I am trying to send User, Contact and Account related fields through SAML Response. But while configuring the SAML attributes in the Connected App, I only see User, Profile, Org, and few more Objects ...
1
vote
1answer
733 views
Marketing Cloud Download Metadata for Single Sign-On (SSO)
In the Single Sign-On documentation, it states there is a Download Metadata link available to retrieve metadata needed to setup SSO. I don't see this anywhere in the Security Settings in Admin.
...
0
votes
0answers
39 views
Navigate from one sso saml protected SP org to another saml protected SP org without logging into the 2nd SP?
I have 2 service providers, SP1 and SP2 both connected to an IDP through SSO and I have obtained my SAML response from IDP into SP1.
Now, I want the user from SP1 to go to SP2 upon clicking a link/...
1
vote
0answers
66 views
Posting SAML assertion to get an OAuth token
I have 2 service providers, SP1 and SP2 and I have obtained my SAML response from IDP into SP1. Now, in order to connect SP1 and SP2 I am using the oauth SAML response from SP1 and posting it to oAuth ...
