Questions tagged [saml]
SAML is an XML-based open standard data format for exchanging authentication and authorization data between parties, in particular, between an identity provider and a service provider
199
questions
0
votes
0answers
19 views
Provisioning community users only if related person account has an order
I'm working on a JIT custom handler for the following use case: A community user need to be created for each contact with at least an order. Salesforce is the SP. Here is my handler:
global class ...
0
votes
1answer
49 views
Salesforce SSO Org Id appending username intermittently [closed]
How do I stop sending the Org id and just the username?
But this is happening intermittently.
2
votes
3answers
203 views
SSO: Azure AD idp + external API Callout from Apex?
Question:
When a user is signed into SF with Azure AD identity provider (SSO), we want to send the current identity (in the form of a Saml assertion, bearer token, etc?) along with the external API ...
3
votes
0answers
105 views
Including SSO in a managed package
We have a Salesforce Managed Package, and we'd like to use it to provide access to a non-Salesforce service (in this case Tableau). The ISVForce Guide indicates that you can package SAML SSO config in ...
0
votes
0answers
17 views
Salesforce as Identity Provider, catch the parameter after the start URL from Service Provider
we use Salesforce as Identity Provider and SAML connected app to integrate with the service provider. I am new to this. Service provider want to trigger the connection with Start_URL/Text.
How can I ...
0
votes
0answers
36 views
OAuth 2.0 SAML Bearer Assertion Flow -
We have a scenario where we need an application (external to SF) authenticate to Salesforce via IDP. We have SSO flow set up, where Okta is the Identity Provider and Salesforce as SP. I was hoping ...
0
votes
2answers
72 views
Using Google as IdP in sandbox - how does it know what user to login to? [closed]
Question: How does a sandbox knows to which user to login?
Background: I have enabled SSO on a sandbox in order to test before going to produciton.
Our IdP is Google.
I have created a test user in ...
1
vote
0answers
37 views
Dynamically Pass attributes to SAML from Lightning Component/VF Page [duplicate]
I have a use case where a user clicks the SSO link on a case record or account record and it should pass some Case/Account fields based on the current record information to the SAML response. In other ...
1
vote
0answers
29 views
Send custom data when Salesforce is a SAML SSO identity provider [duplicate]
We configured Salesforce as an Identity Provider for an External App.
We want to be able to make Idp-Initiated SSO and send custom attributes with the SAML Message, for example the Case or Account ID ...
1
vote
0answers
42 views
Community user is not getting redirected to Start URL configured in Connected App for SAML
We are trying to implement SSO using the Salesforce Community to an external PHP site. So, the Salesforce community should be able to login to that external site using community credentials. So far we ...
3
votes
0answers
38 views
parameters of createUser method in samlJitHandler [duplicate]
the syntax of createUser method in samlJitHandler class is
createUser(Id samlSsoProviderId, Id communityId, Id portalId,String federationIdentifier,
Map<String, String> ...
1
vote
0answers
94 views
JIT provisioning for Person accounts
I am looking to enable user provisioning over SAML and was going through documentation https://developer.salesforce.com/blogs/developer-relations/2014/06/how-to-provision-salesforce-communities-users....
0
votes
0answers
122 views
Retrieving user identity in Connected App plugin
My requirement is setup SSO into App via Salesforce Connected Apps and need to pass AccountID field in Saml Payload. Account ID needs to be picked from respective contact’s account which is related ...
0
votes
0answers
34 views
modifySAMLResponse [duplicate]
Explain the modifysamlresponse(authsession, connectedappid, samlresponse) method in connectedAppplugin Class with example? I am not able to modify the XML generated by the Salesforce SAML Identity ...
0
votes
0answers
21 views
Passing Account attributes via SAML response [duplicate]
I want to pass additional accountID attributes via SAML response to the Service ProviderRegarding .The scenario is:
Account ID needs to be picked from respective contact’s account which is related to ...
1
vote
1answer
197 views
Salesforce Marketing Cloud Single Sign On Error - SAML SSO Error
We are trying to configure Single Sign On with our Salesforce Marketing Cloud Instance. SFMC is our SP while Microsoft Azure is our IdP.
We have been following this link to setup the Single Sign On
...
1
vote
1answer
65 views
How Do I Enable SAML IdP in a Customer Community?
Our Client need to setup an SSO for their customers from the Salesforce Customer Community portal into another web application using SAML. We are familiar with enabling Salesforce as an IdP for ...
0
votes
0answers
40 views
User account mapping with SAML
I'm developing an application that uses Salesforce as an identity provider (IdP). How would you implement the following:
When user authenticates to Salesforce as the identity provider, the
...
1
vote
1answer
81 views
Passing context/state to a SAML service provider
I'm using salesforce as an identity provider through a connected app link in my community. The service provider is a .NET application that downloads a lot of files. I've got the .NET application ...
2
votes
1answer
142 views
SAML - Triggering Single Logout (SLO) when session times out at the identity provider
Let's say I have Saleforce set up as an Identity Provider with a session timeout of 15 minutes. I set up a connected app with SAML and SLO. I use SSO to access a connected app and start working only ...
0
votes
0answers
28 views
Is there a way to full export of UserRecordAccess object
We have an integration with third party application where we want to inherit salesforce Account object security for all the users. SAML is the authentication mechanism used for authenticating user to ...
0
votes
0answers
53 views
SAML SLO initiated by SP redirects to IdP, IdP sends SLO Success Response not redirecting back to SP
I am sending a SAML SLO Request to Salesforce which acts as IdP:
<?xml
version="1.0"?>
<LogoutRequest
xmlns="urn:oasis:names:tc:SAML:2.0:protocol"
ID="...
5
votes
0answers
269 views
SSO between Salesforce - Mobile app - web service provider
I'm trying to understand if it's possible to maintain a SSO session between 3 different elements:
Mobile APP (Android/IOS) - developed with Salesforce SDK
Salesforce (Identity provider)
Web service ...
1
vote
0answers
70 views
Salesforce SAML Assertion flow via REST API for Lightning Out
Context: We want to log a user into a Lightning Out App hosted on an Azure AD System using the SAML Assertion flow.
What we have establisched so far:
We have a functioning connection for our ...
1
vote
0answers
81 views
Authenticate Community Users in External Rest API
I have a Community that consumes an external Rest API that requires authentication.
For testing purpose, I hardcoded a username and a password in my apex rest callouts in order to be able to consume ...
1
vote
0answers
45 views
Salesforce community SAML SSO not working for users created through manually
SAML SSO to community is failing for users with error. I am using the Standard provisioning(not the custom JIT handler)
ErrorCode=5&ErrorDescription=Unable+to+create+user&ErrorDetails=...
0
votes
0answers
34 views
User Provisioning SCIM flow input value is missing
I have installed User Provisioning Connector Package and this created a default SCIM userprovisioning flow. However, when I open the Apex action, all the input values are missing. It also does not ...
0
votes
1answer
135 views
Salesforce cURL Example with Session ID is not working
I'm trying to use the Salesforce Rest API with the session ID I received via a SAML Response from the same Salesforce Instance (as IDP) but I get the message:
[{"message":"This session is not ...
0
votes
0answers
56 views
AuthConfiguration getSamlSsoUrl method return link doesn't work
So I have the method getSamlSsoUrl(communityUrl, startURL, samlId) from the class AuthConfiguration and returned a very long url with saml id, saml acs, saml binding type, and etc in the url.
However,...
0
votes
0answers
74 views
SSO via SAML - avoid a step of clicking on a button corresponding to identity provider on the login screen
There are certain users in the org that have only SSO, as in they don't have a salesforce password set up.
Is there a way to send these users a link they can bookmark that directly goes to the step ...
0
votes
1answer
122 views
SSO with Active Directory Federation Services (ADFS) 4.x
I'm trying to set up Single Sign-On for my customer between their on-premises AD and Salesforce (Sales Cloud). They are using ADFS 4.x. We followed SF instructions that were written for ADFS 3.x but ...
1
vote
1answer
176 views
SSO with Salesforce and Azure AD - disable single logout
I've started playing with Salesforce and configuring SSO to work with our sandboxes. So far so good, and logins can happen without issue. However, I'm running into a bit of an issue when a user logs ...
1
vote
1answer
181 views
Why doesn't https://mydomain.my.salesforce.com/?login work when single signon is enabled?
The Best Practices and Tips for Implementing Single Sign-On
states:
System admins must always be able to log in to Salesforce, even if SSO is enabled for their accounts. For example, you need a ...
2
votes
1answer
279 views
Salesforce as identity provider - implementing Single Logout (django + pysaml2)
Related question: https://stackoverflow.com/questions/47293940/sp-initiated-single-logout-not-working-with-salesforce
I'm implementing single-sign-on service using Salesforce as identity provider. My ...
0
votes
1answer
131 views
I am getting error in test class because of saml is not enabled
I am getting this error-
System.UnexpectedException: Salesforce System Error: 1757874930-20679
(1748552322) (1748552322) System.UnexpectedException: Salesforce
System Error: 1757874930-20679 (...
6
votes
2answers
814 views
Metadata API Apex fails to create fields in Connected App
I am using the latest v46 version of the Financial Force Metadata API Apex Wrapper to create a Connected App but the values I put in the code are partly ignored.
What is not working:
ConnectedApp....
0
votes
3answers
419 views
Exchange SAML Assertion for an access token
I was going throught the salesforce documentation for the SAML Assertion Flow and I did not understand the following point. Can someone please explain this:
To exchange a SAML assertion for an ...
6
votes
1answer
444 views
Automate setup of an external identity provider via APIs
I use the Financial Force Metadata API Apex Wrapper to simplify an app setup using a custom UI. Part of the setup is the creation of a Self-Signed Certificate and its usage in a Single Sign-On Setting....
3
votes
2answers
150 views
Let external system modify Salesforce data on behalf of logged in user
I am going to build a native Salesforce app (Managed package) that will be installed in many subscriber orgs.
The app will make callouts (eg. calling REST endpoint) to external Java app.
The Java ...
2
votes
1answer
76 views
Is there a need to renew the Self Signed Cert for Single Sign On if Salesforce is not the Identity Provider?
Based on this help article and this community post, can we allow the Self Signed Cert within Salesforce to expire if we do not use Salesforce for an Identity Provider? Is there any harm in doing this? ...
0
votes
0answers
95 views
SAML authentication flow, do not require user to click “Log in with <sso idp option>”
I am setting up a client with a SAML IdP and SP for their site, and one of their partners now needs to tie into this system. They use force.com to do so. We have SSO working as described in this doc:
...
4
votes
1answer
600 views
SAML Assertion Validator crashing on encrypted assertion
I'm adding support for encrypted assertions to my SAML 2 IDP, and I'm trying to validate them against a number of SPs we work with. Everything looks good at https://www.samltool.com/online_tools.php (...
4
votes
0answers
418 views
Single Sign On (SSO) with Active Directory Federation Services (ADFS) as Identity Provider
There are other general questions regarding SSO here and here, but I'm specifically running into this error when using ADFS as the IdP:
Incoming SAML message is not properly formatted, or has ...
0
votes
1answer
168 views
I cannot find CONTACT and ACCOUNT Objects in the Connected App's “Create Custom Attributes”
I am trying to send User, Contact and Account related fields through SAML Response. But while configuring the SAML attributes in the Connected App, I only see User, Profile, Org, and few more Objects ...
1
vote
1answer
580 views
Marketing Cloud Download Metadata for Single Sign-On (SSO)
In the Single Sign-On documentation, it states there is a Download Metadata link available to retrieve metadata needed to setup SSO. I don't see this anywhere in the Security Settings in Admin.
...
0
votes
0answers
34 views
Navigate from one sso saml protected SP org to another saml protected SP org without logging into the 2nd SP?
I have 2 service providers, SP1 and SP2 both connected to an IDP through SSO and I have obtained my SAML response from IDP into SP1.
Now, I want the user from SP1 to go to SP2 upon clicking a link/...
1
vote
0answers
62 views
Posting SAML assertion to get an OAuth token
I have 2 service providers, SP1 and SP2 and I have obtained my SAML response from IDP into SP1. Now, in order to connect SP1 and SP2 I am using the oauth SAML response from SP1 and posting it to oAuth ...
1
vote
1answer
330 views
SAML bearer assertion flow for retrieving an OAuth token
I am using SAML assertion to retrieve an OAuth token and I am using a custom apex class to generate the SAML assertion. My IDP is set to send User's FederationIdentitfier in Subject (SAML Response Pic)...
1
vote
1answer
73 views
How to get data from one Service Provider to another Service Provider using the obtained SAML assertion?
I have 3 Salesforce orgs (IDP, SP1 and SP2) and have set up SSO where IDP is my Identity-Provider and SP1 and SP2 are 2 Service-Providers. Using SP1-initiated SSO login, the user gets authenticated in ...
0
votes
3answers
368 views
Multi-Org Android Configuration Microsoft MDM Intune
I am trying to configure Intune MDM (Mobile Data Management) to push multiple instances of Salesforce in the app config. Intune provide a JSON configuration for Android for Works and a XML ...
